This webhook event is triggered when a merchant application needs more information or documents from the merchant before review can continue.
Headers
-
The unique message id for this delivery. Constant across retries of the same message.
-
The time the message was sent, as a Unix timestamp in seconds. Reject stale timestamps to protect against replay attacks.
-
One or more space-delimited signatures in the form
v1,<base64 signature>— an HMAC-SHA256 over{svix-id}.{svix-timestamp}.{raw request body}keyed with the endpoint's signing secret. See the Webhook Configuration section for verification details.
Body
The request body for the merchant.application.requires_action webhook event.
-
Webhook event details for merchant lifecycle events. Extends the standard event envelope with the merchant the event relates to, once a merchant record exists.
-
Details for a merchant lifecycle event. Every field is always present; fields that do not apply to the event type are null. Payloads are PII-safe by design — they never carry underwriting documents, bank details, or tax identifiers.
{
"event": {
"id": "01JZM7Q2XVGT5H8RC3W9K4N6PD",
"type": "merchant.application.requires_action",
"timestamp": "2026-07-09T14:30:00Z",
"merchantId": null
},
"data": {
"isvId": "isv_01JY9FCPM8Q5T2V7R4W1XKB6ZD",
"merchantName": "Blue Bottle Bakery",
"applicationId": "map_01JZM7RH2M8S6WV0P9RQD37GXE",
"fromStatus": null,
"toStatus": null,
"reason": null,
"templateName": null,
"templateRegion": null,
"templateVersion": null,
"portalLink": "https://partner-portal.omni.integratedcommerce.io/merchants/applications/map_01JZM7RH2M8S6WV0P9RQD37GXE"
}
}
{
"value": {}
}