{
  "proof_id": "c41d2a88-7f3e-4b21-9c6d-2e8f1a5b7d90",
  "account_id": "ae8c1f02-3b45-4c67-9d12-8f0e5a6b7c8d",
  "wallet_id": "b7e39c14-2d56-4e78-8a01-3c5d7e9f1b24",
  "chain": "eth",
  "address": "0x71C7656EC7ab88b098defB751B7401B5f6d8976F",
  "purpose": "wallet_ownership",
  "proof_code": "Gc41d2a887f3e4b219c6d2e8f1a5b7d90a1b2c3d4e5f60718293a",
  "verify_url": "https://api.qbank.cl/platform/v1/public/signature-proofs/Gc41d2a887f3e4b219c6d2e8f1a5b7d90a1b2c3d4e5f60718293a"
}

Wallet signature proof created

A signature proof was created with a segregated wallet (POST /v1/segregated-wallets/{walletID}/signatures). The wallet signed a message with the chain-native standard (EIP-191 for ETH/EVM, TIP-191 for TRON) inside the anti-phishing CBPay Signature Proof envelope. The proof can be verified publicly at verify_url (no auth).

Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.

WEBHOOK

wallet_signature_created

{
  "proof_id": "c41d2a88-7f3e-4b21-9c6d-2e8f1a5b7d90",
  "account_id": "ae8c1f02-3b45-4c67-9d12-8f0e5a6b7c8d",
  "wallet_id": "b7e39c14-2d56-4e78-8a01-3c5d7e9f1b24",
  "chain": "eth",
  "address": "0x71C7656EC7ab88b098defB751B7401B5f6d8976F",
  "purpose": "wallet_ownership",
  "proof_code": "Gc41d2a887f3e4b219c6d2e8f1a5b7d90a1b2c3d4e5f60718293a",
  "verify_url": "https://api.qbank.cl/platform/v1/public/signature-proofs/Gc41d2a887f3e4b219c6d2e8f1a5b7d90a1b2c3d4e5f60718293a"
}

Authorizations

Authorization

string

header

required

Session JWT (from register/login) or API key (pk_...). X-API-Key: <token> is accepted as an alternative header.

Body

application/json

proof_id

string

account_id

string

wallet_id

string

chain

enum<string>

Available options:

eth,

tron

address

string

purpose

string

proof_code

string

Public capability code of the proof (starts with G).

verify_url

string

Public verification URL (no auth required).

Response

200

Return any 2xx to acknowledge the delivery.