A single HTTPS endpoint receives every selected event type. The request body is an ARRAY of event payloads, not a single object. You receive nothing for types you have not selected in the portal.
Verify the X-SIGNATURE HMAC-SHA512 header, deduplicate on eventId, and respond 2xx within 5 seconds. Non-2xx or slower puts the event into the retry ladder (5 min, 20 min, 60 min, 1 day, dead letter).
Messages
disbursement.updated
Sent when a disbursement is updated. Uniquely among Confido events the payload carries BOTH disbursement and oldDisbursement, so the consumer can diff the transition rather than re-query.
Content-Type:
firm.updated
Sent when a Firm is updated, including every firm.status change.
Content-Type:
statement.created
Emitted when a monthly statement has been created for a Firm.
Content-Type:
statement.updated
Emitted if a statement is updated. Documented as very unlikely — statements should be final at statement.created.
Content-Type:
stored_payment_method.created
Content-Type:
stored_payment_method.updated
Content-Type:
stored_payment_method.deleted
Content-Type:
stored_disbursement_method.created
Content-Type:
stored_disbursement_method.updated
Content-Type:
stored_disbursement_method.deleted
Content-Type:
transaction.created
Sent when a new Transaction is created.
Content-Type:
transaction.funds_in_transit
Sent when a Transaction moves to FUNDS_IN_TRANSIT.
Content-Type:
transaction.deposited
Sent when a Transaction is deposited in the Firm's account.
Content-Type:
transaction.voided
Sent when a Transaction is voided.
Content-Type:
transaction.refunded
Sent when a Transaction is fully refunded.
Content-Type:
transaction.partially_refunded
Sent when a Transaction is partially refunded.
Content-Type:
transaction.ach_returned
Sent when a settled ACH payment is returned by the bank and funds are reversed. Partial returns do not exist.
Content-Type:
About AsyncAPI
The AsyncAPI specification describes event-driven APIs the way OpenAPI describes request/response APIs. A channel is the named pipe — a webhook URL, a Kafka topic, a WebSocket route, an MQTT subject — that producers and consumers publish or subscribe to. Each channel carries one or more messages with structured payloads, and an operation declares whether a given party sends or receives on that channel.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.