Pave Bank Webhooks

generated: '2026-07-20'
method: searched
source: https://docs.pavebank.com/docs/webhooks
docs: https://docs.pavebank.com/docs/webhooks
type: Webhooks
delivery:
  transport: HTTP POST to configured URL
  ack: requires 2xx response
  retry: exponential backoff 10s -> 20s -> 40s -> 80s (capped at 10 min), for up to 72 hours
  configuration: Webhook URL is set via the Update Webhook URL endpoint (sandbox mode).
signature:
  header: 'Pave-Signature: t={timestamp},v1={signature}'
  algorithm: ECDSA with SHA-256
  encoding: Base64
  verification: Reconstruct the signed payload by concatenating the raw response body with the timestamp, then validate against the environment public key. The body must be processed as a raw buffer; JSON parsing or transformation breaks verification.
events:
- name: Transaction
  description: Triggered when transactions are created or transition between statuses. Each unique status of a transaction triggers at most one webhook (no duplicates for the same status).
  payload_example: '{ "transaction_id": "transaction_b3mz0xppufvytxggtu7h09xb01" }'
- name: RFI
  description: Request for Information event. See the RFI documentation for payload format and examples.
  docs: https://docs.pavebank.com/docs/rfi