Docs/Webhooks/Account

account.connected

Fired when a PMS or OTA account is successfully connected via the Connect Widget or API.

Payload

Every delivery uses the same outer envelope (type, deliveryId, createdAt, data). Dedupe on deliveryId — retries reuse the same id.

{
  "event": "account.connected",
  "timestamp": "2026-04-04T10:00:00Z",
  "data": {
    "provider": "airbnb",
    "accountId": "acc_uuid",
    "externalAccountId": "380436627",
    "listingsImported": 12
  }
}

Verifying signatures

Every delivery includes an X-Repull-Signature header containing an HMAC-SHA256 of the raw request body computed with your subscription's signing secret. Verify it before processing — see Verify Signatures for full Node.js and Python examples.

Use the raw body

Verify the HMAC against the raw request body, not a re-stringified JSON object. Re-serialisation can reorder keys or change whitespace and break the signature.

Example handler

if (event === 'account.connected') {
  console.log('Connected:', data.provider, data.listingsImported, 'listings imported')
}

Tip: Acknowledge with a 2xx status within 5 seconds. Failed deliveries are retried up to 5 times with exponential backoff.Webhook reliability →

AI