Skip to main content

Register a BNPL webhook destination

POST 
/partner/webhook

Registers a destination for loan_approved events, verified by HMAC signature.

This is the endpoint for BNPL partners, and loan_approved is the BNPL event. If you integrate Buy Now, Pay Later, this is the route to use — including for a brand-new integration. The self-service endpoint POST /partner/webhook/subscription rejects BNPL partners outright, so this is not a deprecated fallback: it is your registration route.

What you get​

A destination created here is subscribed to loan_approved and nothing else, and always verifies by HMAC. Both are fixed at creation and cannot be changed afterwards — see Verify HMAC Signatures. For the payload, see loan_approved in the Event Catalog.

The body is just the URL​

Only url is read. Any other field is ignored rather than rejected, so a request carrying eventTypes or filters still returns 201 and those fields have no effect. Event selection and filtering are features of the real-estate route, not this one.

One registration per URL​

A URL can be registered once. Posting a URL you already registered returns 409 — and that includes a destination you deleted: deleting deactivates a destination but keeps its URL, so this endpoint never registers that URL again. To start over, register a different URL.

The secret​

The response body is the secret, as a plain string under data. It is shown once — GET /partner/webhook never returns it.

Request​

Responses​

Destination registered