{
"event_id": "3c4d5e6f-7a8b-4c9d-8e0f-2a3b4c5d6e7f",
"type": "member_security_event",
"account_id": "c57f05b6-8f2e-4d51-9a0c-5b7e2d3f4a10",
"created_at": "2026-07-25T18:09:05Z",
"data": {
"account_id": "c57f05b6-8f2e-4d51-9a0c-5b7e2d3f4a10",
"event_type": "password_changed",
"member_id": "1c2d3e4f-3b7d-4bad-9bdd-2b0d7b3dcb6d"
}
}Account security event
A security fact of the account (sign-in, password change, factor added or removed, session revoked). Account-scoped deliveries redact ip and user_agent; organization-wide admin views retain forensic user_agent and the resolved actor IP fields actor_ip and actor_ip_source, which are not part of this public webhook contract.
WEBHOOK
member_security_event
{
"event_id": "3c4d5e6f-7a8b-4c9d-8e0f-2a3b4c5d6e7f",
"type": "member_security_event",
"account_id": "c57f05b6-8f2e-4d51-9a0c-5b7e2d3f4a10",
"created_at": "2026-07-25T18:09:05Z",
"data": {
"account_id": "c57f05b6-8f2e-4d51-9a0c-5b7e2d3f4a10",
"event_type": "password_changed",
"member_id": "1c2d3e4f-3b7d-4bad-9bdd-2b0d7b3dcb6d"
}
}Authorizations
Session JWT (from register/login) or API key (pk_...).
X-API-Key: <token> is accepted as an alternative header.
Response
200
Received.