Create Subscription

POST /v1/webhooks

Subscribe to events. Quda will send signed HTTP POST requests to your URL when these events occur.

Request

{
  "url": "https://your-app.com/webhooks/quda",
  "secret": "whsec_your_secret_here",
  "events": [
    "account:created",
    "transaction:posted",
    "transaction:pending",
    "balance:updated"
  ]
}

Field	Required	Description
url	Yes	Your endpoint URL
secret	Yes	Used to sign payloads with HMAC-SHA256
events	Yes	Array of event types to subscribe to. Minimum 1.

See Events for all available event types.

Response 201

{
  "data": {
    "id": "b2c3d4e5-f6a7-8901-bcde-f12345678901",
    "tenant_id": "f714f6af-...",
    "url": "https://your-app.com/webhooks/quda",
    "events": ["account:created", "transaction:posted", "transaction:pending", "balance:updated"],
    "active": true,
    "created_at": "2026-04-06T22:50:00Z"
  }
}

Payload verification

Every webhook delivery includes an HMAC-SHA256 signature. Verify it using the secret you provided.

X-Webhook-Signature: sha256=<hex-encoded-hmac>