Skip to main content
Currently supported: revocation.completed only. Roadmap (Q1 2027): wallet.scan.completed, risk.alert. There is no production dispatcher for other event names.
Manage subscriptions in the Developer Portal (UI recomendada) or via the developer session API:
A API key (X-API-Key) autentica chamadas /v1/.... A sessão do portal gere projectos/webhooks. Não mistures os dois contratos.

Event: revocation.completed

Fired when an approval revocation is confirmed on-chain. Headers:
  • X-NZOChain-Signature: sha256=<hmac>
  • X-NZOChain-Event: revocation.completed

Verifying authenticity

HMAC-SHA256 of the raw JSON body with your whsec_* secret. Compare to X-NZOChain-Signature (prefix sha256=).

Delivery

  • HTTPS only (SSRF protections apply)
  • Retries: 1s → 5s → 30s
  • Expect HTTP 2xx; non-2xx marks the webhook as failing after retries
Full details: backend docs/WEBHOOKS.md.