> ## Documentation Index > Fetch the complete documentation index at: https://docs.yourflexpay.com/llms.txt > Use this file to discover all available pages before exploring further. # Get the RECEIVER webhook record > Returns the outbound webhook record for the receiving application (TRANSACTION_INITIATED notification). ## OpenAPI ````yaml /openapi/idaas.openapi.json get /v1/transactions/{reference}/webhooks/receiver openapi: 3.0.3 info: title: IDaaS – Identity as a Service API description: > ## Overview IDaaS provides globally unique, portable identity **tags** that travel with users across applications. Each tag is a short handle (e.g. `@alice`) that can carry verified claims, participate in cross-application payments, and be federated to external identity providers. ## Key Capabilities - **Tags** – create, transfer, disable, and attach claims to identity handles. - **Cross-application payments** – send money from any tag on Application A to any tag on Application B; each application has a single escrow wallet tracked for end-of-day settlement. - **Ledger** – every completed payment produces an immutable double-entry `DEBIT` / `CREDIT` pair recorded against application wallets. - **Webhooks** – real-time callbacks with HMAC-SHA256 signatures and automatic retry (up to 3 attempts with exponential back-off). - **Settlement** – a scheduled end-of-day job aggregates daily wallet movements and emits `SETTLEMENT_BATCH` Kafka events. ## Authentication 1. Register an application: `POST /v1/applications` 2. Exchange credentials for a JWT: `POST /v1/auth/token` 3. Include the JWT as `Authorization: Bearer ` on all protected calls. ## Rate Limits | Endpoint | Limit | |---|---| | `POST /v1/auth/token` | 10 req / min per IP | | `POST /v1/transactions` | 60 req / min per application | | All other | 300 req / min per IP | contact: name: ReflexPay Platform Team url: https://yourflexpay.com email: integration@yourflexpay.com license: name: Proprietary url: https://yourflexpay.com/terms version: 1.0.0 servers: - url: https://staging-idaas.yourflexpay.com/api description: Staging - url: https://idaas.yourflexpay.com/api description: Production security: - bearerAuth: [] tags: - name: Authentication description: Exchange client credentials for a JWT access token. - name: Encryption description: > JWE payload encryption – end-to-end security for API request bodies and webhook payloads. Each application receives an EC P-256 keypair at registration: - IDaaS encrypts **outbound webhooks** with the application's public key. - Applications encrypt **inbound request bodies** with the IDaaS public key. Algorithm: ECDH-ES+A256KW + A256GCM (JSON Web Encryption, RFC 7516). Use `GET /v1/keys/idaas` to fetch the IDaaS public key. Use `POST /v1/applications/keys/rotate` to rotate your application keypair. - name: Wallet description: View application escrow wallet balance and paginated ledger statement. - name: Subjects description: Manage the real-world entities (users / organisations) behind tags. - name: Tags description: Create, transfer, disable and resolve globally unique identity tags. - name: Claims description: Attach and revoke verifiable claims on tags. - name: Consent description: Issue and manage user consent tokens for claim federation. - name: Transactions description: Initiate, accept/reject, and query cross-application tag-to-tag payments. - name: Settlement description: Query end-of-day settlement batches and per-application net positions. - name: Webhooks description: >- Inspect outbound webhook delivery records for transactions. Each transaction has at most two webhook records: one RECEIVER (sent on initiation) and one SENDER (sent on acceptance/rejection/expiry). externalDocs: description: IDaaS GitHub Repository url: https://github.com/reflexpay/idaas paths: /v1/transactions/{reference}/webhooks/receiver: get: tags: - Webhooks summary: Get the RECEIVER webhook record description: >- Returns the outbound webhook record for the receiving application (TRANSACTION_INITIATED notification). operationId: getReceiverWebhook parameters: - name: reference in: path description: Transaction reference required: true schema: type: string responses: '200': description: Webhook record found content: '*/*': schema: $ref: '#/components/schemas/ApiResponseTransactionWebhookResponse' '404': description: Transaction or webhook record not found content: '*/*': schema: $ref: '#/components/schemas/ApiResponseTransactionWebhookResponse' components: schemas: ApiResponseTransactionWebhookResponse: type: object properties: success: type: boolean message: type: string errorCode: type: string data: $ref: '#/components/schemas/TransactionWebhookResponse' errors: type: array items: type: string timestamp: type: string format: date-time TransactionWebhookResponse: type: object properties: id: type: string description: Unique webhook record ID format: uuid transactionId: type: string description: UUID of the parent transaction format: uuid transactionReference: type: string description: Transaction reference example: TXN-16820000-AB1C2D3E applicationId: type: string description: UUID of the target application (receiver or sender) format: uuid applicationName: type: string description: Name of the target application direction: type: string description: Which side this webhook notifies enum: - RECEIVER - SENDER targetUrl: type: string description: HTTP endpoint that was (or will be) called example: https://app-b.example.com/webhooks/transactions eventType: type: string description: Event name included in the webhook body example: TRANSACTION_INITIATED enum: - TRANSACTION_INITIATED - TRANSACTION_COMPLETED - TRANSACTION_REJECTED - TRANSACTION_EXPIRED status: type: string description: Current delivery status enum: - PENDING - DELIVERED - FAILED attempts: type: integer description: Total number of HTTP delivery attempts made (max 3) format: int32 lastError: type: string description: HTTP status code or exception message from the most recent attempt lastAttemptAt: type: string description: ISO-8601 timestamp of the most recent delivery attempt format: date-time deliveredAt: type: string description: >- ISO-8601 timestamp when delivery was confirmed (HTTP 2xx). Null until delivered. format: date-time createdAt: type: string description: ISO-8601 creation timestamp (when the webhook was first queued) format: date-time updatedAt: type: string description: ISO-8601 last-update timestamp format: date-time description: Outbound webhook delivery record for a transaction securitySchemes: bearerAuth: type: http description: > Obtain a token from `POST /v1/auth/token` using your `client_id` and `client_secret`, then enter `Bearer ` here. scheme: bearer bearerFormat: JWT ````