Kita · AsyncAPI Specification

Kita Capture Webhooks

Version

View Spec View on GitHub CompanyFintechLendingUnderwritingCredit ScoringDocument IntelligenceDocument ExtractionFraud DetectionArtificial IntelligenceComputer VisionEmerging MarketsLoan OriginationAsyncAPIWebhooksEvents

AsyncAPI Specification

Raw ↑
generated: '2026-07-19'
method: searched
source: https://www.kita.ai/documentation
spec_type: Webhooks
asyncapi_published: false
note: 'Kita publishes no AsyncAPI document. The Kita Capture API ships a real, fully managed
  outbound webhook surface — registration, secret rotation, delivery history, dead-letter
  queue and HMAC signing — so the event surface is captured here as a webhook catalog rather
  than fabricated as an AsyncAPI spec. The Kita AI Underwriter API explicitly does not support
  webhooks; polling is its documented pattern.'
apis:
- api: Kita Capture API
  webhooks: supported
  base_url: https://portal.usekita.com
- api: Kita AI Underwriter API
  webhooks: not supported
  alternative: polling with exponential backoff
delivery:
  direction: outbound
  transport: HTTPS POST
  payload: JSON
  signing:
    algorithm: HMAC-SHA256
    over: the raw request body
    key: the webhook's signing secret
    header: X-Kita-Signature
    timestamp_field: 't='
    replay_tolerance: 5 minutes (default)
    verification_guidance: 'Verify both the signature and the t= timestamp tolerance window to
      defend against replays.'
  retries:
    enabled: true
    dead_letter_queue: true
    note: Deliveries that fail every retry land in the dead-letter queue.
subscription_modes:
- mode: registered endpoint
  description: A persistent endpoint registered via POST /api/v1/webhooks with a set of
    subscribed events and an active flag.
- mode: one-shot
  description: A per-request webhook_url passed on POST /api/process-async or POST /api/v1/batch,
    delivering the result of that single job.
events:
  published_catalog: false
  note: 'Kita documents that a delivery fires "when a job finishes (or other events fire)" and
    that webhooks carry a configurable events list, but does not publish the enumerated event
    names. The event enum is therefore not captured here rather than invented.'
  known_trigger: document or batch processing job completion
management_operations:
- method: POST
  path: /api/v1/webhooks
  description: Register a webhook endpoint.
  operation: openapi/kita-capture-openapi.yml#createWebhook
- method: GET
  path: /api/v1/webhooks
  description: List registered webhooks.
  operation: openapi/kita-capture-openapi.yml#listWebhooks
- method: GET
  path: /api/v1/webhooks/{id}
  description: Get a single webhook.
  operation: openapi/kita-capture-openapi.yml#getWebhook
- method: PATCH
  path: /api/v1/webhooks/{id}
  description: Update URL, events, or active flag.
  operation: openapi/kita-capture-openapi.yml#updateWebhook
- method: DELETE
  path: /api/v1/webhooks/{id}
  description: Delete a webhook.
  operation: openapi/kita-capture-openapi.yml#deleteWebhook
- method: POST
  path: /api/v1/webhooks/{id}/test
  description: Send a test delivery.
  operation: openapi/kita-capture-openapi.yml#testWebhook
- method: POST
  path: /api/v1/webhooks/{id}/rotate-secret
  description: Rotate the signing secret.
  operation: openapi/kita-capture-openapi.yml#rotateWebhookSecret
- method: GET
  path: /api/v1/webhooks/{id}/secret
  description: Retrieve the current signing secret.
  operation: openapi/kita-capture-openapi.yml#getWebhookSecret
- method: GET
  path: /api/v1/webhooks/{id}/deliveries
  description: Delivery history — status, attempts, latency.
  operation: openapi/kita-capture-openapi.yml#listWebhookDeliveries
- method: GET
  path: /api/v1/webhooks/stats
  description: Delivery aggregates.
  operation: openapi/kita-capture-openapi.yml#getWebhookStats
- method: GET
  path: /api/v1/webhooks/dlq
  description: Dead-letter queue — deliveries that failed every retry.
  operation: openapi/kita-capture-openapi.yml#getWebhookDeadLetterQueue
- method: POST
  path: /api/v1/webhooks/validate-url
  description: Pre-flight check a candidate endpoint URL.
  operation: openapi/kita-capture-openapi.yml#validateWebhookUrl
- method: POST
  path: /api/v1/webhooks/verify-signature
  description: Helper to verify a sample payload signature.
  operation: openapi/kita-capture-openapi.yml#verifyWebhookSignature