Receive a signed company-monitoring event

VATFind sends events at least once. Verify HMAC-SHA256 over <VATFind-Timestamp>.<raw request body>, then deduplicate with VATFind-Event-Id. Redirects are not followed.

postWebhookmonitorEvent

Headers

VATFind-Event-Idstring required
VATFind-Timestampstring required
VATFind-Signaturestring required

Payload

idstring required
type'vat.monitor.change_detected' | 'vat.monitor.source_degraded' | 'vat.monitor.source_restored' | 'vat.monitor.needs_credits' | 'vat.monitor.paused' | 'vat.monitor.resumed' required
api_version'2026-08-29' required
created_atstring date-time required

Response

Event accepted. Other responses are retried up to the documented delivery limit.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.