---
title: "Inactivate a binding from a GCash access token revoke notification"
method: POST
path: "/v1/gcash/bindings/unbind_webhook"
tags: ["GCash"]
---

# Inactivate a binding from a GCash access token revoke notification

`POST /v1/gcash/bindings/unbind_webhook`

## Request

- Base URL: `https://ewallets-api.paymongo.com`
- URL: `https://ewallets-api.paymongo.com/v1/gcash/bindings/unbind_webhook`
- Auth: HTTP basic

Verifies GCash's signature over the relayed notification, then marks the binding identified by the revoked access token as inactivated. GCash has already revoked the token, so the GCash unbind API is not called. Already-inactivated bindings are returned as-is.

## Request body

- UnbindWebhookRequestDTO: The notification's request object exactly as GCash sent it, plus GCash's signature over it. The signature is verified with the subscription client's GCash public key before the binding is inactivated.
  - `request` object, required
  - `signature` string, required

## Response `200`

Successfully inactivated binding

- object: Standard response containing data and its metadata if any
  - `data` UnbindWebhookResponseDTO: Response payload containing the binding that was inactivated because GCash revoked its access token
    - `id` string
    - `inactivated_at` string
    - `organization_id` string
    - `payment_method_id` string
    - `status_code` string
  - `has_more` boolean

## Other responses

- `400`: Invalid request body, or the notification is not a revoke notification
- `401`: Missing or invalid credentials, or invalid GCash notification signature
- `404`: No binding found for the access token
- `500`: Internal server error

---

[API](https://skmtc.dev/paymongo/apis/ewallets.md) - [All operations](https://skmtc.dev/paymongo/apis/ewallets/llms.txt) - [OpenAPI document](https://skmtc.dev/paymongo/apis/ewallets/revisions/a445ca65c132?raw)