Skip to main content

Webhooks Services API

API People’s Webhook Services API delivers real‑time, event‑driven notifications to your backend with no polling required. By registering secure webhook listeners and subscribing to event types, you get immediate updates on transactions, account changes, and more.

Supported Event Types​

Our webhooks support the following event types:

Event TypeDescription
ach.statusNotifies when an ACH instruction changes status. See the response structure for this event type here.
wires.statusIndicates status changes in ISO wire transactions. See the response structure for this event type here.
gen.trans.infoGeneral transaction updates for subscribed accounts.
acct.statusNotifies when an account is opened or closed.

Each notification includes a UUID, timestamp, and a JSON‑formatted payload.

Signature Verification​

Every webhook request carries two headers to ensure integrity:

  • XSignature: HMAC‑SHA256 of payload + XTimestamp using your shared key.
  • XTimestamp: Unix epoch seconds, to prevent replay attacks.

To verify:

  1. Recompute HMAC_SHA256(shared_key, payload + XTimestamp).
  2. Compare against the XSignature header.
  3. Reject any mismatches.

If you opted for Basic Auth on your listener, API People will also include:

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=