Skip to main content
POST
Receive an aggregator webhook

Autorizaciones

X-Webhook-Signature
string
header
requerido

Hex HMAC-SHA256 of the raw request body, proving an inbound aggregator webhook originated from the configured provider.

Encabezados

X-Webhook-Signature
string

Hex HMAC-SHA256 of the raw body for signing providers; omitted by IP-allowlist providers

Parámetros de ruta

provider
string
requerido

Aggregator provider the token was minted for (pluggy or belvo)

Ejemplo:

"pluggy"

webhookToken
string
requerido

Opaque webhook token minted for the connection; hashed and resolved to a tenant binding server-side

Cuerpo

application/octet-stream

The body is of type file.

Respuesta

Accepted