account.disconnected
Fired when a PMS or OTA account is disconnected — by the user, admin, or due to expired credentials.
Payload
Every delivery uses the same outer envelope (type, deliveryId, createdAt, data). Dedupe on deliveryId — retries reuse the same id.
{
"event": "account.disconnected",
"timestamp": "2026-04-04T18:00:00Z",
"data": {
"provider": "hostaway",
"accountId": "acc_uuid",
"reason": "user_initiated"
}
}Verifying signatures
Every delivery includes an X-Repull-Signature header containing an HMAC-SHA256 of the raw request body computed with your subscription's signing secret. Verify it before processing — see Verify Signatures for full Node.js and Python examples.
Use the raw body
Verify the HMAC against the raw request body, not a re-stringified JSON object. Re-serialisation can reorder keys or change whitespace and break the signature.
Example handler
if (event === 'account.disconnected') {
console.log('Disconnected:', data.provider, 'reason:', data.reason)
// Clean up cached data, notify admin
}Tip: Acknowledge with a 2xx status within 5 seconds. Failed deliveries are retried up to 5 times with exponential backoff.Webhook reliability →
AI