v1/organizations

Qonto webhook

curl --request POST \
  --url https://thirdparty.qonto.com/v1/organizations \
  --header 'Content-Type: application/json' \
  --header 'X-Qonto-Signature: <api-key>' \
  --data '
{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "subscription_id": "123e4567-e89b-12d3-a456-426614174000",
  "organization_id": "123e4567-e89b-12d3-a456-426614174000",
  "membership_id": "123e4567-e89b-12d3-a456-426614174000",
  "type": "v1/transactions",
  "created_at": "2025-01-24T10:55:00Z",
  "data": {
    "event": "suspended",
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "legal_name": "Elektro Tesla GmbH",
    "locale": "de",
    "legal_country": "DE",
    "status": "activated",
    "created_at": "2022-12-01T08:57:00.123Z",
    "updated_at": "2022-12-01T08:57:00.123Z",
    "slug": "elektro-tesla-gmbh-3066",
    "legal_form": "GmbH",
    "legal_sector": "6200Z",
    "legal_number": "12A34FC5",
    "legal_registration_date": "2022-01-01",
    "legal_share_capital": 100000,
    "contract_signed_at": "2022-12-01T08:57:00.123Z"
  }
}
'

POST

organizations

Qonto webhook

curl --request POST \
  --url https://thirdparty.qonto.com/v1/organizations \
  --header 'Content-Type: application/json' \
  --header 'X-Qonto-Signature: <api-key>' \
  --data '
{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "subscription_id": "123e4567-e89b-12d3-a456-426614174000",
  "organization_id": "123e4567-e89b-12d3-a456-426614174000",
  "membership_id": "123e4567-e89b-12d3-a456-426614174000",
  "type": "v1/transactions",
  "created_at": "2025-01-24T10:55:00Z",
  "data": {
    "event": "suspended",
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "legal_name": "Elektro Tesla GmbH",
    "locale": "de",
    "legal_country": "DE",
    "status": "activated",
    "created_at": "2022-12-01T08:57:00.123Z",
    "updated_at": "2022-12-01T08:57:00.123Z",
    "slug": "elektro-tesla-gmbh-3066",
    "legal_form": "GmbH",
    "legal_sector": "6200Z",
    "legal_number": "12A34FC5",
    "legal_registration_date": "2022-01-01",
    "legal_share_capital": 100000,
    "contract_signed_at": "2022-12-01T08:57:00.123Z"
  }
}
'

{
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "subscription_id": "123e4567-e89b-12d3-a456-426614174000",
    "organization_id": "123e4567-e89b-12d3-a456-426614174000",
    "membership_id": "123e4567-e89b-12d3-a456-426614174000",
    "type": "v1/organizations",
    "created_at": "2025-01-24T10:55:00Z",
    "data": {
        "event": "suspended",
        "id": "123e4567-e89b-12d3-a456-426614174000",
        "legal_name": "Elektro Tesla GmbH",
        "slug": "elektro-tesla-gmbh-3066",
        "locale": "de",
        "legal_country": "DE",
        "legal_form": "GmbH",
        "legal_sector": "6200Z",
        "legal_number": "12A34FC5",
        "legal_registration_date": "2022-01-01",
        "legal_share_capital": 100000,
        "contract_signed_at": "2022-12-01T08:57:00.123Z",
        "status": "suspended",
        "created_at": "2022-12-01T08:57:00.123Z",
        "updated_at": "2022-12-01T08:57:00.123Z"
    }
}

Authorizations

X-Qonto-Signature

string

header

required

The signature header follows the format t={timestamp},v1={signature}.

Verification steps:

Extract the timestamp and signature from the signature header
Reject the request if the timestamp is older than 5 minutes
Recreate the signed payload: '{timestamp}.{raw_request_body}'
Compute HMAC-SHA256 of the signed payload using your webhook secret as the key
Compare the computed signature with the one in the header

Body

application/json

string<uuid>

required

Unique identifier for this webhook event

Example:

"123e4567-e89b-12d3-a456-426614174000"

subscription_id

string<uuid>

required

ID of the webhook subscription that received the event

Example:

"123e4567-e89b-12d3-a456-426614174000"

organization_id

string<uuid>

required

ID of the organization that owns the bank account

Example:

"123e4567-e89b-12d3-a456-426614174000"

membership_id

string<uuid>

required

ID of the membership associated with subscription

Example:

"123e4567-e89b-12d3-a456-426614174000"

type

enum<string>

required

Available options:

v1/transactions,

v1/accounts,

v1/organizations,

v1/memberships,

v1/consent-revocations,

v1/cards,

v1/payment-links,

v1/payment-links-connections,

v1/beneficiaries

Example:

"v1/transactions"

created_at

string<date-time>

required

Timestamp when the webhook event was created

Example:

"2025-01-24T10:55:00Z"

data

v1/organization · object

required

Show child attributes

data.event

enum<string>

required

Event triggering the webhook

Available options:

suspended,

deactivated

Example:

"suspended"

data.id

string<uuid>

required

UUID of the organization

Example:

"123e4567-e89b-12d3-a456-426614174000"

data.legal_name

string

required

Registered name of the organization

Example:

"Elektro Tesla GmbH"

data.locale

string

required

Default language set for the organization

Example:

"de"

data.legal_country

string

required

Country of incorporation of the organization

Example:

"DE"

data.status

enum<string>

required

Current status of the organization

Available options:

kyb_waiting,

activated,

suspended,

deactivated

Example:

"activated"

data.created_at

string<date-time>

required

When the organization was created

Example:

"2022-12-01T08:57:00.123Z"

data.updated_at

string<date-time>

required

When the organization was last updated

Example:

"2022-12-01T08:57:00.123Z"

data.slug

string

Slug based on organization's legal name

Example:

"elektro-tesla-gmbh-3066"

data.legal_form

string

Legal formation of the organization

Example:

"GmbH"

data.legal_sector

string

Code of the organization's activity sector

Example:

"6200Z"

data.legal_number

string

Unique number of registration (e.g. SIRET in France)

Example:

"12A34FC5"

data.legal_registration_date

string<date>

Registration date of the organization

Example:

"2022-01-01"

Share capital of the organization

Example:

100000

data.contract_signed_at

string<date-time>

Date and time the account was opened

Example:

"2022-12-01T08:57:00.123Z"

Response

200

Webhook received successfully

v1/accounts v1/memberships

⌘I

Business API

Onboarding API

v1/organizations

Authorizations

Body

Response