Webhooks

POST /api/v1/oris/webhooks/circle

Circle webhook

Process Circle payment status updates. Returns 200 OK.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Responses

Status	Description
200	Successful Response

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/webhooks/circle' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

POST /api/v1/oris/webhooks/mastercard

Mastercard webhook

Process Mastercard dispute/chargeback notifications. Signature: X-MC-Signature header, RSA-SHA256 verification. Event types: - payment.completed -> status='confirmed' - payment.declined -> status='failed'

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Responses

Status	Description
200	Successful Response

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/webhooks/mastercard' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

POST /api/v1/oris/webhooks/stripe-connect

Stripe Connect account webhook

Handle Stripe Connect account events. Events: account.updated, account.application.deauthorized

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Responses

Status	Description
200	Successful Response

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/webhooks/stripe-connect' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

POST /api/v1/oris/webhooks/stripe-issuing/{developer_id}

Stripe Issuing authorization webhook

Receives Stripe Issuing events per-developer (BYOK).

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Path parameters

Name	Type	Required	Description
developer_id	string	Yes

Responses

Status	Description
200	Successful Response
422	Validation Error

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/webhooks/stripe-issuing/{developer_id}' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

POST /api/v1/oris/webhooks/visa

Visa TAP webhook

Process Visa TAP transaction status notifications. Signature: X-Visa-Signature header, HMAC-SHA256(secret, body). Event types: - transaction.completed -> status='confirmed' - transaction.failed -> status='failed' - transaction.reversed -> status='reversed', credit wallet

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Responses

Status	Description
200	Successful Response

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/webhooks/visa' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'