{
"transfer_id": "2a7b9c1d-4e5f-6a70-8b9c-0d1e2f3a4b5c",
"from_account_id": "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d",
"to_account_id": "5e6f7a8b-9c0d-1e2f-3a4b-5c6d7e8f9a0b",
"asset": "USDT",
"amount": "25.000000",
"description": "Expense split",
"created_at": "2026-07-07T12:00:00Z"
}Transfer received
The account received an internal transfer.
Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.
WEBHOOK
transfer_received
{
"transfer_id": "2a7b9c1d-4e5f-6a70-8b9c-0d1e2f3a4b5c",
"from_account_id": "9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d",
"to_account_id": "5e6f7a8b-9c0d-1e2f-3a4b-5c6d7e8f9a0b",
"asset": "USDT",
"amount": "25.000000",
"description": "Expense split",
"created_at": "2026-07-07T12:00:00Z"
}Authorizations
Session JWT (from register/login) or API key (pk_...).
X-API-Key: <token> is accepted as an alternative header.
Body
application/json
Response
200
Return any 2xx to acknowledge the delivery.