POST
Transaction Webhooks

Authorizations

X-API-Key
string
header
required

Admins and Developers can obtain their Bolt API key from the Bolt Merchant Dashboard.

Headers

X-Bolt-Hmac-Sha256
string

Bolt sends a signed HMAC for hook verification

Body

application/json
type
enum<string>

The type of webhook. For auth webhooks, a notification is only triggered if the authorization included a risk review.

IMPORTANT: The One Of buttons above reflect the webhook type and change the schema below (within data). Please make sure to select the correct webhook type according to your needs.

Available options:
auth,
capture,
credit,
failed_payment,
newsletter_subscription,
payment,
pending,
rejected_irreversible,
risk_insights,
void
Example:

"pending"

object
enum<string>
Available options:
transaction
Example:

"transaction"

data
object

This is a generic wrapper for the merchant's data. Open to see properties.

Response

Webhooks Transaction Response

status
enum<string>
required
Available options:
succeeded,
failed
Example:

"succeeded"