POST a committed redemption.released event to the configured merchant receiver

SENDmerchantReceiver

Message

application/json

eventIdstringrequired

The event type, colon, and canonical redemption/hold ID. All retries preserve this value.

matches ^redemption\.released:.+$

typestringrequired

merchantIdstringrequired

The registered merchant bound to the canonical redemption.

min length 1

redemptionIdstringrequired

Canonical ledger hold/redemption ID; no agent or owner identifiers are included.

min length 1

amountUcstringrequired

Released authorization amount in integer microcredits. One credit is 1000000 microcredits.

matches ^(0|[1-9][0-9]*)$

createdAtintegerrequired

Canonical outbox creation time as Unix milliseconds. Retries preserve this value.

min 0

Message bindings

http

headers

Content-Typestringrequired

ACS-Signaturestringrequired

HMAC-SHA256 over <Unix seconds>.<exact JSON request body>, using the configured merchant webhook secret. Verify the raw body before parsing; the SDK verifier defaults to a 300-second timestamp tolerance.

matches ^t=[0-9]+,v1=[a-f0-9]{64}$

ACS-Event-IDstringrequired

Same eventId as the payload. Deduplicate this stable ID before receiver side effects.

min length 1

User-Agentstring

Operation bindings

http

methodPOST

Message

{
  "eventId": "string",
  "type": "redemption.released",
  "merchantId": "string",
  "redemptionId": "string",
  "amountUc": "string",
  "createdAt": 0
}