Application is declined
Receive and interpret application.declined notifications.
Incoming notification
application.declined is an incoming POST to your registered callback, not an endpoint that your application calls. This event is triggered when the merchant application is declined. POST <your registered callback URL> Content-Type: application/json Signature: <HMAC-SHA256 of the raw request body>
Verify before processing
Use the Sign-Up subscription secret to compute HMAC-SHA256 over the original request bytes and compare it with the Signature header. Do not use the gateway Webhook-Signature nonce format for this API family. Persist the event before acknowledging it and make downstream handlers safe for repeated delivery. Sign-Up verification and delivery
Payload fields
Required flags are scoped to the containing object. The complete schema below preserves enums, nullable types and constraints. Field Required Type Constraints Meaning event_id Not marked required string maxLength: 36 — event_type Not marked required allOf / reference — — event_body Not marked required object — — event_body.app_id Required in parent string minLength: 20; maxLength: 20 — event_body.dba Required in parent string maxLength: 255 — event_body.reject_reason Required in parent string maxLength: 255 — event_body.partner_identifier Not marked required string | null maxLength: 255 Optional partner-supplied identifier captured on the originating public sign-up form, echoed back so partners can correlate this event with their submission. Null when no identifier was captured for the lead.
Payload contract
{ "type": "object", "properties": { "event_id": { "type": "string", "maxLength": 36, "example": "38cf9efa-8aec-4a4e-98e2-6bb2411fdc60" }, "event_type": { "allOf": [ { "$ref": "#/components/schemas/event-types" }, { "example": "application.declined" } ] }, "event_body": { "type": "object", "required": [ "app_id", "dba", "reject_reason" ], "properties": { "app_id": { "type": "string", "minLength": 20, "maxLength": 20, "example": "app_341c7b5b432a3158" }, "dba": { "type": "string", "maxLength": 255, "example": "Network Merchant Inc" }, "reject_reason": { "type": "string", "maxLength": 255, "example": "Security Issue" }, "partner_identifier": { "type": [ "string", "null" ], "maxLength": 255, "description": "Optional partner-supplied identifier captured on the originating public sign-up form, echoed back so partners can correlate this event with their submission. Null when no identifier was captured for the lead.", "example": "partner-ref-12345" } } } } } true
Example payload
Source example values are fixtures; do not treat its IDs as account credentials or real account state. { "event_id": "38cf9efa-8aec-4a4e-98e2-6bb2411fdc60", "event_type": "application.declined", "event_body": { "app_id": "app_341c7b5b432a3158", "dba": "Network Merchant Inc", "reject_reason": "Security Issue", "partner_identifier": "partner-ref-12345" } }
Referenced schema definitions
{ "components": { "schemas": { "event-types": { "type": "string", "enum": [ "application.updated.data.requested", "application.approved", "application.declined", "application.cancelled", "application.merchant.closed", "application.merchant.boarded", "merchant.chargeback.added", "merchant.deposit.new", "merchant.first-batch", "merchant.processing.start", "merchant.processing.stop", "merchant.residuals.published", "merchant.retrieval.added", "merchant.statement.new" ], "example": "application.merchant.boarded" } } } } true