Documentation index for AI agents (llms.txt)

Append .md to any page URL for its markdown source, or fetch llms-full.txt for the complete corpus.

Developer Portal
Webhooks

How webhooks work

Receive real-time notifications when application statuses change

iwoca sends webhooks to your endpoint when key events occur – application approvals, declines, offers, and funding. No polling required.

Event types

Available events and example payloads

Security

Signature verification and retry behaviour

Getting started

  1. 1
    Get your webhook secret token

    Retrieve your token via GET /webhooks/configuration/ or from the Developer Portal (sandbox only).

  2. 2
    Configure your webhook URL

    Set the URL where iwoca should send events using PUT /webhooks/configuration/ or the Developer Portal.

  3. 3
    Subscribe to events

    Choose which events you want to receive using POST /webhooks/subscriptions/ or the Developer Portal.

  4. 4
    Implement signature verification

    Verify the X-IW-Signature header on incoming webhooks to confirm they're from iwoca. See Security for code examples.

  5. 5
    Test in sandbox

    Trigger test events in the sandbox environment before going live.

Your webhook endpoint should respond with a 2xx status code to confirm receipt. Failed deliveries are retried up to 10 times over roughly 16 hours – see retry behaviour.

Base URL

Webhook configuration and subscription endpoints use the same base URL as the rest of the lending API:

APIBase URL
Lendinghttps://www.iwoca.co.uk/api/lending/v2.2

Authenticate with your Bearer token, the same as any other lending API request.