Webhooks

COMPANY_ADDRESS_CHANGED

Sent when the company address returned by VIES for a monitored VAT ID differs from the previously-recorded address. Fires only while the VAT ID is currently valid.

postWebhookcompanyAddressChanged

Headers

X-Vatnode-Signaturestring required

Example:t=1747636992,v1=8f43...c0

HMAC-SHA256 over <t>.<raw request body>, keyed with the full per-webhook signing key (vat_wh_…, prefix included), formatted as t=<unix-seconds>,v1=<hex-hmac>. Verify it before trusting the payload.

X-Vatnode-Eventstring required

Example:VAT_BECAME_INVALID

The event type, mirroring the event field in the body.

Payload

idstring required

Stable, unique identifier for the event. Identical across every retry of the same delivery – use it to deduplicate.

versionstring required

Envelope schema version. Currently 1. Bumped only on a breaking change to the payload shape, so consumers can version-handle safely.

event'COMPANY_ADDRESS_CHANGED' required

Event type. See per-envelope schema for allowed values.

timestampstring date-time required

When the event was emitted (ISO-8601, UTC).

Example payload

{
  "version": "1"
}

Response

Acknowledged.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.