Skip to content

Verification Completed
Webhook

Request

Delivered when a verification session reaches a terminal status (success, failed, or expired).

Fetch the full session snapshot — requested fields, captured credential_subject_data, error fields — via GET /b2b/v1/verification-sessions/{sessionId}.

Headers
X-Webhook-Eventstringrequired

Event type (same as event field in body).

X-Webhook-Signaturestringrequired

HMAC-SHA256 hex digest of the raw request body. Verifying is recommended — see the Webhooks guide.

Example:a1b2c3d4e5f6...
X-Webhook-Timestampstringrequired

Unix timestamp of the event.

Example:1747393200
X-Webhook-Signature-Previousstring

Present during the 24-hour secret rotation grace period — signature with the previous secret.

Example:d4e5f6a7b8c9...
Bodyapplication/jsonrequired
eventstringrequired

Event type identifier (same value as the X-Webhook-Event header).

tenant_idstring, (uuid)required

Your organization ID.

Example:"550e8400-e29b-41d4-a716-446655440000"
timestampstring, (date-time)required

When the event occurred (RFC 3339 UTC).

Example:"2026-05-16T10:00:00Z"
dataobject(VerificationCompletedData)required
POST
verification.completed
Payload
{ "event": "verification.completed", "tenant_id": "550e8400-e29b-41d4-a716-446655440000", "timestamp": "2026-03-29T12:00:00Z", "data": { "session_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7", "status": "success", "credential_status": "valid" } }

Responses

Event acknowledged — return any 2xx status to confirm receipt.