Skip to content
APIs
/Webhook Events/Webhook Events

Verification Completed
Webhook

Request

Delivered when a verification session reaches a terminal status (success, failed, or expired).

Fetch the full session snapshot via GET /b2b/v1/verification-sessions/{sessionId}: the disclosed values under attributes, what was asked for under requested_attributes, what ran under case (a session launched from a verification case) or credential_definition (a session created for a credential definition), and the error fields.

Headers
X-Webhook-Eventstringrequired

Event type (same as event field in body).

X-Webhook-Signaturestringrequired

HMAC-SHA256 hex digest of the raw request body. Verifying is recommended — see the Webhooks guide.

Example:a1b2c3d4e5f6...
X-Webhook-Timestampstringrequired

Delivery time in Unix seconds. Not covered by the signature; for replay protection check the signed body's timestamp instead.

Example:1747393200
X-Webhook-Signature-Previousstring

Present during the 24-hour secret rotation grace period — signature with the previous secret.

Example:d4e5f6a7b8c9...
Bodyapplication/jsonrequired
eventstringrequired

Event type identifier (same value as the X-Webhook-Event header).

tenant_idstring, (uuid)required

Your organization ID.

Example:"550e8400-e29b-41d4-a716-446655440000"
timestampstring, (date-time)required

When the event occurred (RFC 3339 UTC).

Example:"2026-05-16T10:00:00Z"
dataobject(VerificationCompletedData)required
Payload
{
  "event": "verification.completed",
  "tenant_id": "550e8400-e29b-41d4-a716-446655440000",
  "timestamp": "2026-03-29T12:00:00Z",
  "data": {
    "session_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "status": "success",
    "credential_status": "valid"
  }
}

Responses

Event acknowledged — return any 2xx status to confirm receipt.