# Webhooks

Webhooks provide asynchronous status updates for quotes, payments, and payouts.

## Signature verification

Kaito sends:

- `Kaito-Timestamp`: unix epoch seconds
- `Kaito-Signature`: `sha256=<hex>`


Compute `HMAC_SHA256(secret, "{timestamp}.{raw_body}")` and compare to the signature hex.

## Suggested event types (V1)

- `payment.created`
- `payment.succeeded`
- `payment.failed`
- `payout.created`
- `payout.completed`
- `payout.failed`
- `quote.expired`


## Delivery & retries

- Use a 2xx response to acknowledge receipt.
- Implement idempotency on your side using `event.id`.