Skip to main content

Overview

Orchestrator webhooks notify you when a platform completes hosted onboarding. They are owned by your orchestrator and use your x-orchestrator-key, not a platform’s x-client-id. Register a webhook before you send an onboarding URL to a platform. Its active endpoints receive the client_id.linked event after the platform completes the flow.

Register a webhook

Register an endpoint with your orchestrator key:
The response includes the webhook and a signing secret:
Save the signing secret when you register the webhook. Request Network returns it only once and never includes it in list, deactivate, or reactivate responses.
Verify the x-request-network-signature HMAC-SHA256 header against the raw request body before you process an event. See the webhook reconciliation guide for a signature-verifying handler. Webhook deliveries may be retried. Make sure your endpoint can safely receive the same notification more than once.

Test your endpoint

Send a signed mock client_id.linked event to every active endpoint:
The response reports the delivery result:
Test deliveries have the x-request-network-test: true header. They use the same signing process and payload shape as a real event, with placeholder values.

Receive client_id.linked

client_id.linked is sent after a platform completes hosted onboarding from a link intent. It is not sent for a direct POST /v2/orchestrators/client-ids link.
Use intentId or your optional externalId to match the event to your onboarding record, then save the returned clientId. Use the stable linkId or intentId to identify a repeated delivery. The destinationId, wallet address, chain, and currency identify the payment destination that the hosted flow bound to the new client ID. Use that client ID with paired authentication to create payment links for the platform.

Manage webhook endpoints

List every endpoint registered to your orchestrator, including inactive ones:
To stop delivery without removing the endpoint, deactivate it:
To resume delivery, reactivate the same endpoint:
Deactivation preserves the endpoint URL and signing secret. Registering the same URL again is rejected, even while it is inactive; reactivate it instead. To use a different URL, deactivate the old endpoint and register the new one.

Client ID linking

Create a hosted onboarding link and receive its result through a webhook.

Webhook reconciliation

Verify signatures and process webhook deliveries safely.
Last modified on August 18, 2026