Recipient updated
Sent as a recipient moves through onboarding (onboarding_started, tax_info_collected, onboarding_completed). Each milestone is sent at most once per onboarding invitation, and tax_info_collected is never sent for recipients with tax collection disabled. Verify the X-Karat-Signature header before processing — see the Webhooks guide.
Authorizations
Pass your API key as a bearer token: Authorization: Bearer <API_KEY>.
Headers
HMAC-SHA256 signature of the delivery, in the format v1=<base64>.
Unix epoch seconds when the event was sent. Used in the signed payload and for replay protection.
The subscription this delivery belongs to. Use it to look up the signing secret.
Unique delivery ID, for deduplication.
Body
Response
Return a 2xx status to acknowledge receipt.