Internal account status webhook

Webhook that is called when the status of an internal account changes. This includes balance updates and may include additional account events in the future. This endpoint should be implemented by clients of the Grid API.

Authentication

The webhook includes a signature in the X-Grid-Signature header that allows you to verify that the webhook was sent by Grid. To verify the signature:

1. Get the Grid public key provided to you during integration
2. Decode the base64 signature from the header
3. Create a SHA-256 hash of the request body
4. Verify the signature using the public key and the hash

If the signature verification succeeds, the webhook is authentic. If not, it should be rejected.

Event types

• INTERNAL_ACCOUNT.BALANCE_UPDATED — Fired when the balance of an internal account changes. The data payload contains the full internal account object.
• INTERNAL_ACCOUNT.STATUS_UPDATED — Fired when the status of an internal account changes (e.g., OPEN → FROZEN). The data payload contains the full internal account object.