Tesser Webhooks

generated: '2026-07-21'
method: searched
type: Webhooks
source:
  - https://docs.tesser.xyz/webhooks/general
  - https://docs.tesser.xyz/webhooks/authentication
  - https://docs.tesser.xyz/webhooks/payment-updates
  - https://docs.tesser.xyz/webhooks/treasury-updates
description: >-
  Tesser sends outbound webhooks to your server for the funds-movement lifecycle.
  Every event shares a common envelope and is signed with an Ed25519 asymmetric
  signature you must verify before processing.
transport: HTTPS POST to your registered endpoint
envelope:
  fields:
    - {name: id, type: string, description: Unique event identifier}
    - {name: type, type: string, description: 'Event type in scope.action format (e.g. payment.quote_created)'}
    - {name: created_at, type: string, description: ISO 8601 timestamp of when the event was created}
    - {name: data, type: object, description: Event-specific payload under data.object}
  data_object: >-
    Carries the full resource for top-level events (payment.*, deposit.*,
    withdrawal.*, rebalance.*) and the individual step resource for step.* events.
event_scopes: [payment, deposit, withdrawal, rebalance, step]
event_type_format: 'scope.action (e.g. payment.updated, deposit.updated, step.completed)'
signing:
  algorithm: Ed25519
  headers:
    - {name: X-Tesser-Signature, description: Base64-encoded Ed25519 signature of the raw request body}
    - {name: Content-Type, value: application/json}
    - {name: User-Agent, value: Tesser-Webhooks/1.0}
  verification: >-
    Signature is computed over the exact UTF-8 bytes of the JSON body. Verify
    against the environment-matched public key (separate SPKI DER base64 keys for
    production api.tesser.xyz and sandbox sandbox.tesserx.co); do not parse and
    re-serialize before verifying.
  public_keys_docs: https://docs.tesser.xyz/webhooks/authentication
inbound_partner_webhooks:
  note: >-
    Tesser also RECEIVES inbound webhooks from partners/providers (these are REST
    endpoints in the OpenAPI, not events Tesser sends). Providers: Circle, CPN,
    Notabene, OpenFX, QuickNode.
  operations:
    - openapi/tesser-openapi-original.json#webhook_receiveCircleWebhook
    - openapi/tesser-openapi-original.json#webhook_receiveCircleWebhookForOrg
    - openapi/tesser-openapi-original.json#webhook_receiveCpnWebhook
    - openapi/tesser-openapi-original.json#notabeneWebhook_receive
    - openapi/tesser-openapi-original.json#webhook_receiveOpenFxWebhook
    - openapi/tesser-openapi-original.json#webhook_receiveQuicknodeWebhookForNetwork
asyncapi_spec: null   # provider does not publish an AsyncAPI document; webhook catalog captured above