AsyncAPI Specification
generated: '2026-07-20'
method: searched
source: https://docs.onboard.xyz/onboard-exchange/connect/webhooks
spec_type: Webhooks
docs: https://docs.onboard.xyz/onboard-exchange/connect/webhooks
notes: >-
Onboard Connect delivers webhooks (HTTP POST) for order lifecycle events. No AsyncAPI document is
published; this captures the webhook catalog. Endpoints are configured in the Business portal
dashboard under Onboard Connect Settings and must return 200 with an empty body. Failed deliveries
are retried up to 3 times.
delivery:
transport: http-post
configured_at: Business portal dashboard (Onboard Connect Settings)
success_response: 200 OK with empty body
retries: 3
signing:
method: HMAC-SHA256
headers:
signature: x-signature
timestamp: x-timestamp
scheme: HMAC-SHA256 over x-timestamp + payload, keyed with the API secret from the Business dashboard.
envelope:
event: string
data: object
timestamp: unix-timestamp
events:
- name: order.state_transition
description: Emitted when an order moves between states (e.g. INITIATED -> DEPOSITED).
order_states:
non_terminal: [PENDING, AWAITING_ACCEPTANCE, INITIATED, DEPOSITED, CONFIRMED, IN_DISPUTE]
terminal: [COMPLETED, CANCELLED]
Work with this as data
Every AsyncAPI spec here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for asyncapi
4 MCP tools reach this
find_asyncapisBrowse and filter every AsyncAPI spec in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This AsyncAPI spec
curl "https://apis.io/api/v1/asyncapis/nestcoin-webhooks"
All asyncapi
curl "https://apis.io/api/v1/asyncapis?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.