{
"createdAt": "2026-10-02T10:00:00.000Z",
"data": {
"id": "a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11",
"object": "order",
"code": "CPmJ6QbYMo",
"url": "/api/v2/orders/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11"
},
"id": "4821",
"object": "event",
"type": "order.updated"
}Order updated
Sent to the callback.url given when the order was created, each time the order or one of its services changes status. The body names the order; fetch it at data.url with the API token for its current state. Respond with any 2xx status to acknowledge. Anything else, or no response within 30 seconds, counts as a failed delivery and is retried with exponential backoff, 5 attempts in all; retries carry the same id and X-Notification-Id.
{
"createdAt": "2026-10-02T10:00:00.000Z",
"data": {
"id": "a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11",
"object": "order",
"code": "CPmJ6QbYMo",
"url": "/api/v2/orders/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11"
},
"id": "4821",
"object": "event",
"type": "order.updated"
}Headers
Always Origin-Instant-Test-Notifications/1.0.
The event id; the same on every retry of this delivery.
"4821"
The event type.
"order.updated"
When this attempt was sent (ISO 8601).
"2026-10-02T10:00:00.000Z"
Identifier of the webhook subscription created with the order.
"17"
Only sent when callback.auth.secretKey was configured: sha256=<hex> HMAC-SHA256 of the raw JSON body.
"sha256=5d41402abc4b2a76b9719d911017c592…"
Body
When the event was recorded.
"2026-10-02T10:00:00.000Z"
The resource the event is about. Fetch it at url for its current state.
Show child attributes
Show child attributes
Unique identifier of the event. Retries carry the same id; use it to drop duplicates.
"4821"
Object type; always event.
"event""event"
Event type, <resource>.<verb>.
"order.updated""order.updated"
Response
Any 2xx acknowledges the delivery. Anything else is retried.