Service health

POST /api/v1/webhooks/card-payments

Mock-only signed payment status callback. Requires X-Dutch-Signature: t=<unix>,v1=<hex> (HMAC-SHA256 of <t>.<raw body> with CARD_PAYMENTS_WEBHOOK_SECRET); only cp_mock_ records are accepted. It records payment.created, payment.pending, payment.succeeded, payment.failed and payment.refunded events. No live processing is connected.

Access

No authentication.

Errors

Errors use { "error": "code", "message": "text" }. A missing permission answers 403 permission_required; a missing session 401.

Related references

Browse the complete endpoint directory, the developer portal and the security and controls guide.