Skip to main content
WEBHOOK

Authorizations

X-Hook0-Signature
string
header
required

HMAC-SHA256 signature of the raw request body, computed using your webhook secret. Webhook receivers should always verify this header before processing the event. The header value is hex-encoded and prefixed by the algorithm and timestamp, e.g. t=1700000000,v1=abc123... (refer to the Webhook Security docs for the exact verification algorithm).

This scheme applies to webhook delivery (outbound POSTs from CDP to your endpoint), not to inbound CDP API requests.

Body

application/json

The acceptance.disbursement.succeeded webhook event payload.

Fields shared by disbursement webhook events.

eventId
string<uuid>
required

The unique identifier for this webhook event. Use it to deduplicate deliveries.

Example:

"123e4567-e89b-12d3-a456-426614174000"

timestamp
string<date-time>
required

The UTC ISO 8601 timestamp when the event occurred.

Example:

"2025-06-01T12:00:00Z"

data
object
required

A payment from a CDP account you own to a Coinbase user account or an onchain address, independent of a payment session.

Example:
eventType
enum<string>
required

The type of webhook event.

Available options:
acceptance.disbursement.succeeded
Example:

"acceptance.disbursement.succeeded"

Response

Webhook received and processed successfully.