account.disconnected

Fired when a PMS or OTA account is disconnected — by the user, admin, or due to expired credentials.

Payload

Every delivery uses the same outer envelope (event, eventId, apiVersion, timestamp, data). Dedupe on eventId — it stays stable across retries and replays, while the X-Repull-Delivery-Id header changes on every attempt.

{
  "event": "account.disconnected",
  "eventId": "3f1c9a2e-8b7d-4c6a-9e0f-1a2b3c4d5e6f",
  "apiVersion": "2026-04",
  "timestamp": "2026-05-01T12:34:56.000Z",
  "data": {
    "workspaceId": "47f8883d-28c2-4d2c-b020-c7cef1aff62c",
    "accountId": "acc_01HX5XPQ2K",
    "provider": "airbnb",
    "disconnectedAt": "2026-05-01T17:00:00.000Z",
    "reason": "refresh_token_rejected"
  }
}

Verifying signatures

Every delivery includes a timestamped X-Repull-Signature header of the form t=<unix_ts>,v1=<hex>, where v1 is HMAC-SHA256(signing_secret, `${t}.${raw_body}`). Verify it before processing — see Verify Signatures for full Node.js and Python examples.

Example handler

if (event === 'account.disconnected') {
  console.log('Disconnected:', data.provider, 'reason:', data.reason)
  // Clean up cached data, notify admin
}