Create a new webhook subscription
curl --request POST \
--url https://thirdparty.qonto.com/v2/webhook_subscriptions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": [
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
],
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=",
"description": "Production webhook for transactions"
}
'import requests
url = "https://thirdparty.qonto.com/v2/webhook_subscriptions"
payload = {
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": ["v1/transactions", "v1/accounts", "v1/organizations", "v1/memberships", "v1/consent-revocations", "v1/cards", "v1/payment-links", "v1/payment-links-connections", "v1/beneficiaries", "v1/client-invoices", "v1/terminal-payments", "v1/clients", "v1/products", "v1/transfers", "v1/recurring-transfers"],
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=",
"description": "Production webhook for transactions"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
callback_url: 'https://api.partner.com/webhooks/qonto',
types: [
'v1/transactions',
'v1/accounts',
'v1/organizations',
'v1/memberships',
'v1/consent-revocations',
'v1/cards',
'v1/payment-links',
'v1/payment-links-connections',
'v1/beneficiaries',
'v1/client-invoices',
'v1/terminal-payments',
'v1/clients',
'v1/products',
'v1/transfers',
'v1/recurring-transfers'
],
secret: 'whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=',
description: 'Production webhook for transactions'
})
};
fetch('https://thirdparty.qonto.com/v2/webhook_subscriptions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://thirdparty.qonto.com/v2/webhook_subscriptions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'callback_url' => 'https://api.partner.com/webhooks/qonto',
'types' => [
'v1/transactions',
'v1/accounts',
'v1/organizations',
'v1/memberships',
'v1/consent-revocations',
'v1/cards',
'v1/payment-links',
'v1/payment-links-connections',
'v1/beneficiaries',
'v1/client-invoices',
'v1/terminal-payments',
'v1/clients',
'v1/products',
'v1/transfers',
'v1/recurring-transfers'
],
'secret' => 'whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=',
'description' => 'Production webhook for transactions'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://thirdparty.qonto.com/v2/webhook_subscriptions"
payload := strings.NewReader("{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://thirdparty.qonto.com/v2/webhook_subscriptions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://thirdparty.qonto.com/v2/webhook_subscriptions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}"
response = http.request(request)
puts response.read_body{
"id": "123e4567-e89b-12d3-a456-426614174000",
"organization_id": "123e4567-e89b-12d3-a456-426614174000",
"membership_id": "123e4567-e89b-12d3-a456-426614174000",
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": [
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
],
"created_at": "2025-01-24T10:55:00Z",
"updated_at": "2025-01-24T10:55:00Z",
"description": "Production webhook for transactions",
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA="
}{
"code": "<string>",
"detail": "<string>",
"source": {
"pointer": "<string>",
"parameter": "<string>"
}
}{
"code": "<string>",
"detail": "<string>"
}{
"code": "<string>",
"detail": "<string>"
}Subscription endpoints
Create a new webhook subscription
OAuth scopes: webhook + the scope(s) required for the webhook(s) you want to receive (cf. Supported webhooks).
Example: if you want to receive a webhook every time a transaction is created or updated, you need the
organization.readscope on top of thewebhookscope.
Subscribe to receive webhooks for specific event types.
POST
/
v2
/
webhook_subscriptions
Create a new webhook subscription
curl --request POST \
--url https://thirdparty.qonto.com/v2/webhook_subscriptions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": [
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
],
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=",
"description": "Production webhook for transactions"
}
'import requests
url = "https://thirdparty.qonto.com/v2/webhook_subscriptions"
payload = {
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": ["v1/transactions", "v1/accounts", "v1/organizations", "v1/memberships", "v1/consent-revocations", "v1/cards", "v1/payment-links", "v1/payment-links-connections", "v1/beneficiaries", "v1/client-invoices", "v1/terminal-payments", "v1/clients", "v1/products", "v1/transfers", "v1/recurring-transfers"],
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=",
"description": "Production webhook for transactions"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
callback_url: 'https://api.partner.com/webhooks/qonto',
types: [
'v1/transactions',
'v1/accounts',
'v1/organizations',
'v1/memberships',
'v1/consent-revocations',
'v1/cards',
'v1/payment-links',
'v1/payment-links-connections',
'v1/beneficiaries',
'v1/client-invoices',
'v1/terminal-payments',
'v1/clients',
'v1/products',
'v1/transfers',
'v1/recurring-transfers'
],
secret: 'whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=',
description: 'Production webhook for transactions'
})
};
fetch('https://thirdparty.qonto.com/v2/webhook_subscriptions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://thirdparty.qonto.com/v2/webhook_subscriptions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'callback_url' => 'https://api.partner.com/webhooks/qonto',
'types' => [
'v1/transactions',
'v1/accounts',
'v1/organizations',
'v1/memberships',
'v1/consent-revocations',
'v1/cards',
'v1/payment-links',
'v1/payment-links-connections',
'v1/beneficiaries',
'v1/client-invoices',
'v1/terminal-payments',
'v1/clients',
'v1/products',
'v1/transfers',
'v1/recurring-transfers'
],
'secret' => 'whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=',
'description' => 'Production webhook for transactions'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://thirdparty.qonto.com/v2/webhook_subscriptions"
payload := strings.NewReader("{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://thirdparty.qonto.com/v2/webhook_subscriptions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://thirdparty.qonto.com/v2/webhook_subscriptions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"callback_url\": \"https://api.partner.com/webhooks/qonto\",\n \"types\": [\n \"v1/transactions\",\n \"v1/accounts\",\n \"v1/organizations\",\n \"v1/memberships\",\n \"v1/consent-revocations\",\n \"v1/cards\",\n \"v1/payment-links\",\n \"v1/payment-links-connections\",\n \"v1/beneficiaries\",\n \"v1/client-invoices\",\n \"v1/terminal-payments\",\n \"v1/clients\",\n \"v1/products\",\n \"v1/transfers\",\n \"v1/recurring-transfers\"\n ],\n \"secret\": \"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA=\",\n \"description\": \"Production webhook for transactions\"\n}"
response = http.request(request)
puts response.read_body{
"id": "123e4567-e89b-12d3-a456-426614174000",
"organization_id": "123e4567-e89b-12d3-a456-426614174000",
"membership_id": "123e4567-e89b-12d3-a456-426614174000",
"callback_url": "https://api.partner.com/webhooks/qonto",
"types": [
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
],
"created_at": "2025-01-24T10:55:00Z",
"updated_at": "2025-01-24T10:55:00Z",
"description": "Production webhook for transactions",
"secret": "whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA="
}{
"code": "<string>",
"detail": "<string>",
"source": {
"pointer": "<string>",
"parameter": "<string>"
}
}{
"code": "<string>",
"detail": "<string>"
}{
"code": "<string>",
"detail": "<string>"
}Authorizations
Bearer authorization header: Bearer <token>, where <token> is the access token received from the authorization server at the end of the OAuth 2.0 flow.
Body
application/json
The HTTPS URL where webhooks will be sent
Maximum string length:
512Pattern:
^https://.*Example:
"https://api.partner.com/webhooks/qonto"
The types of events to subscribe to
Minimum array length:
1Available options:
v1/transactions, v1/accounts, v1/organizations, v1/memberships, v1/consent-revocations, v1/cards, v1/payment-links, v1/payment-links-connections, v1/beneficiaries, v1/client-invoices, v1/terminal-payments, v1/clients, v1/products, v1/transfers, v1/recurring-transfers Example:
[
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
]
Secret key for verifying webhook signatures. If not provided, one will be generated
Required string length:
32 - 128Example:
"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA="
Optional description for the webhook subscription
Example:
"Production webhook for transactions"
Response
Webhook subscription created successfully
Unique identifier for the webhook subscription
Example:
"123e4567-e89b-12d3-a456-426614174000"
ID of the organization that owns this subscription
Example:
"123e4567-e89b-12d3-a456-426614174000"
ID of the membership that owns this subscription
Example:
"123e4567-e89b-12d3-a456-426614174000"
The HTTPS URL where webhooks will be sent
Maximum string length:
512Pattern:
^https://.*Example:
"https://api.partner.com/webhooks/qonto"
The types of events to subscribe to
Minimum array length:
1Available options:
v1/transactions, v1/accounts, v1/organizations, v1/memberships, v1/consent-revocations, v1/cards, v1/payment-links, v1/payment-links-connections, v1/beneficiaries, v1/client-invoices, v1/terminal-payments, v1/clients, v1/products, v1/transfers, v1/recurring-transfers Example:
[
"v1/transactions",
"v1/accounts",
"v1/organizations",
"v1/memberships",
"v1/consent-revocations",
"v1/cards",
"v1/payment-links",
"v1/payment-links-connections",
"v1/beneficiaries",
"v1/client-invoices",
"v1/terminal-payments",
"v1/clients",
"v1/products",
"v1/transfers",
"v1/recurring-transfers"
]
When the subscription was created
Example:
"2025-01-24T10:55:00Z"
When the subscription was last updated
Example:
"2025-01-24T10:55:00Z"
Optional description for the webhook subscription
Maximum string length:
256Example:
"Production webhook for transactions"
Secret key for verifying webhook signatures.
Required string length:
32 - 128Example:
"whsec_VuvcYxzMbryt1UBytq58jtGBxCgbQdzX/c0vj5ZLjUA="
Was this page helpful?