Credilinq.ai · AsyncAPI Specification

CrediLinq Webhooks

Version 1.0

AsyncAPI representation of CrediLinq's documented webhook events. CrediLinq delivers server-to-server notifications via HTTP POST to a partner-configured redirect_url. Payloads are signed with HMAC SHA-256 over "." using the partner's client_secret as the signing secret. Generated by the API Evangelist enrichment pipeline from the published webhook catalog; the channel payload schema is not published by the provider and is left generic.

View Spec View on GitHub CompanyFintechEmbedded FinanceLendingBNPLCreditPaymentsKYCB2BAsyncAPIWebhooksEvents

Channels

events

Messages

✉

DRAWDOWN_INITIATED

Drawdown/Loan is initiated

✉

DRAWDOWN_APPROVED

Drawdown/Loan is approved

✉

DRAWDOWN_DISBURSED

Drawdown/Loan is disbursed

✉

DRAWDOWN_PAYMENT_VERIFIED

Drawdown/Loan payment is verified

✉

DATA_PROCESSING_COMPLETED

Customer Data Processing Completed

✉

DATA_PROCESSING_FAILED

Customer Data Processing Failed

✉

CUSTOMER_KYC_ACCEPTED

Customer's KYC is accepted

✉

CUSTOMER_KYC_REJECTED

Customer's KYC is rejected

✉

CUSTOMER_APP_ACCEPTED

Customer's KYC Application is accepted and final credit limits assigned

✉

CUSTOMER_APP_REJECTED

Customer's KYC Application is rejected

✉

DIRECTOR_SIGNATURE_UPDATED

A director signed the Loan Agreement

✉

LOO_AGREEMENT_SIGNED

All directors completed signature on Loan Agreement

✉

CREDIT_LINE_UPDATED

Customer's credit line changed

Servers

https

webhook

Partner-hosted endpoint (redirect_url / webhook_url) that receives CrediLinq event POSTs.

AsyncAPI Specification

# generated: 2026-07-18
# method: generated
# source: https://docs.credilinq.ai/docs/webhooks (documented webhook event catalog)
asyncapi: 3.0.0
info:
  title: CrediLinq Webhooks
  version: '1.0'
  description: >-
    AsyncAPI representation of CrediLinq's documented webhook events. CrediLinq
    delivers server-to-server notifications via HTTP POST to a partner-configured
    redirect_url. Payloads are signed with HMAC SHA-256 over "<timestamp>.<body>"
    using the partner's client_secret as the signing secret. Generated by the API
    Evangelist enrichment pipeline from the published webhook catalog; the channel
    payload schema is not published by the provider and is left generic.
defaultContentType: application/json
servers:
  webhook:
    host: partner-configured
    protocol: https
    description: Partner-hosted endpoint (redirect_url / webhook_url) that receives CrediLinq event POSTs.
channels:
  events:
    address: '{redirect_url}'
    parameters:
      redirect_url:
        description: The partner-configured webhook URL registered with CrediLinq support.
    messages:
      DRAWDOWN_INITIATED: { $ref: '#/components/messages/DRAWDOWN_INITIATED' }
      DRAWDOWN_APPROVED: { $ref: '#/components/messages/DRAWDOWN_APPROVED' }
      DRAWDOWN_DISBURSED: { $ref: '#/components/messages/DRAWDOWN_DISBURSED' }
      DRAWDOWN_PAYMENT_VERIFIED: { $ref: '#/components/messages/DRAWDOWN_PAYMENT_VERIFIED' }
      DATA_PROCESSING_COMPLETED: { $ref: '#/components/messages/DATA_PROCESSING_COMPLETED' }
      DATA_PROCESSING_FAILED: { $ref: '#/components/messages/DATA_PROCESSING_FAILED' }
      CUSTOMER_KYC_ACCEPTED: { $ref: '#/components/messages/CUSTOMER_KYC_ACCEPTED' }
      CUSTOMER_KYC_REJECTED: { $ref: '#/components/messages/CUSTOMER_KYC_REJECTED' }
      CUSTOMER_APP_ACCEPTED: { $ref: '#/components/messages/CUSTOMER_APP_ACCEPTED' }
      CUSTOMER_APP_REJECTED: { $ref: '#/components/messages/CUSTOMER_APP_REJECTED' }
      DIRECTOR_SIGNATURE_UPDATED: { $ref: '#/components/messages/DIRECTOR_SIGNATURE_UPDATED' }
      LOO_AGREEMENT_SIGNED: { $ref: '#/components/messages/LOO_AGREEMENT_SIGNED' }
      CREDIT_LINE_UPDATED: { $ref: '#/components/messages/CREDIT_LINE_UPDATED' }
operations:
  receiveEvents:
    action: receive
    channel: { $ref: '#/channels/events' }
components:
  messages:
    DRAWDOWN_INITIATED: { name: DRAWDOWN_INITIATED, title: Drawdown/Loan is initiated, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DRAWDOWN_APPROVED: { name: DRAWDOWN_APPROVED, title: Drawdown/Loan is approved, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DRAWDOWN_DISBURSED: { name: DRAWDOWN_DISBURSED, title: Drawdown/Loan is disbursed, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DRAWDOWN_PAYMENT_VERIFIED: { name: DRAWDOWN_PAYMENT_VERIFIED, title: Drawdown/Loan payment is verified, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DATA_PROCESSING_COMPLETED: { name: DATA_PROCESSING_COMPLETED, title: Customer Data Processing Completed, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DATA_PROCESSING_FAILED: { name: DATA_PROCESSING_FAILED, title: Customer Data Processing Failed, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    CUSTOMER_KYC_ACCEPTED: { name: CUSTOMER_KYC_ACCEPTED, title: Customer's KYC is accepted, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    CUSTOMER_KYC_REJECTED: { name: CUSTOMER_KYC_REJECTED, title: Customer's KYC is rejected, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    CUSTOMER_APP_ACCEPTED: { name: CUSTOMER_APP_ACCEPTED, title: Customer's KYC Application is accepted and final credit limits assigned, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    CUSTOMER_APP_REJECTED: { name: CUSTOMER_APP_REJECTED, title: Customer's KYC Application is rejected, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    DIRECTOR_SIGNATURE_UPDATED: { name: DIRECTOR_SIGNATURE_UPDATED, title: A director signed the Loan Agreement, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    LOO_AGREEMENT_SIGNED: { name: LOO_AGREEMENT_SIGNED, title: All directors completed signature on Loan Agreement, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
    CREDIT_LINE_UPDATED: { name: CREDIT_LINE_UPDATED, title: Customer's credit line changed, payload: { $ref: '#/components/schemas/WebhookEnvelope' } }
  schemas:
    WebhookEnvelope:
      type: object
      description: >-
        Generic CrediLinq webhook payload. The exact per-event body schema is not
        published; treat as an event envelope. Verify the HMAC SHA-256 signature
        over "<timestamp>.<body>" before processing.
      properties:
        event:
          type: string
          description: The event name (e.g. DRAWDOWN_DISBURSED).