Order updated

Sent to the callback.url given when the order was created, each time the order or one of its services changes status. The body names the order; fetch it at data.url with the API token for its current state. Respond with any 2xx status to acknowledge. Anything else, or no response within 30 seconds, counts as a failed delivery and is retried with exponential backoff, 5 attempts in all; retries carry the same id and X-Notification-Id.

WEBHOOK orderUpdated

Example

{
  "createdAt": "2026-10-02T10:00:00.000Z",
  "data": {
    "id": "a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11",
    "object": "order",
    "code": "CPmJ6QbYMo",
    "url": "/api/v2/orders/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11"
  },
  "id": "4821",
  "object": "event",
  "type": "order.updated"
}

Headers

User-Agent · string

Always Origin-Instant-Test-Notifications/1.0.

X-Notification-Id · string

The event id; the same on every retry of this delivery.

Example:

"4821"

X-Notification-Event · string

The event type.

Example:

"order.updated"

X-Notification-Timestamp · string

When this attempt was sent (ISO 8601).

Example:

"2026-10-02T10:00:00.000Z"

X-Notification-Subscription · string

Identifier of the webhook subscription created with the order.

Example:

"17"

X-Signature · string

Only sent when callback.auth.secretKey was configured: sha256=<hex> HMAC-SHA256 of the raw JSON body.

Example:

"sha256=5d41402abc4b2a76b9719d911017c592…"

Body

application/json

createdAt · string<date-time> · required

When the event was recorded.

Example:

"2026-10-02T10:00:00.000Z"

data · object · required

The resource the event is about. Fetch it at url for its current state.

Show child attributes

id · string · required

Unique identifier of the event. Retries carry the same id; use it to drop duplicates.

Example:

"4821"

object · string · required

Object type; always event.

Allowed value: "event"

Example:

"event"

type · string · required

Event type, <resource>.<verb>.

Allowed value: "order.updated"

Example:

"order.updated"

Response

200

Any 2xx acknowledges the delivery. Anything else is retried.