{
"id": "0199a3c5-0000-7000-8000-000000000001",
"timestamp": 1791374400,
"type": "operation.confirmed",
"resource": {
"type": "operation",
"id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e"
},
"data": {
"operation_id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e",
"kind": "transfer",
"status": "confirmed",
"chain_ref": "9f1c2e…"
}
}operation.*
A transaction you submitted changed state. Types: operation.confirmed,
operation.failed, operation.expired, operation.stuck,
operation.awaiting_approval, operation.approved.
{
"id": "0199a3c5-0000-7000-8000-000000000001",
"timestamp": 1791374400,
"type": "operation.confirmed",
"resource": {
"type": "operation",
"id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e"
},
"data": {
"operation_id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e",
"kind": "transfer",
"status": "confirmed",
"chain_ref": "9f1c2e…"
}
}Authorizations
An API key minted in the console (ctd_…). Authenticates; never authorizes funds. A key
carries scopes (read, wallets.write, transactions.write, events.write,
webhooks.write, policy.write) and may be limited to vaults, to IP addresses, and in
lifetime — see Authentication.
Headers
The event type, same as type in the body.
The delivery id, same as id in the body. Stable across retries.
t=<unix>,v1=<hex HMAC-SHA256 of "<t>.<body>"> with the endpoint secret. While a rotated
secret overlaps the new one, one v1 per secret, the new secret's first
(t=<unix>,v1=<new>,v1=<old>): accept the delivery when any v1 matches.
Body
Response
Any 2xx acknowledges the delivery.