Audit Webhooks are a specialized system of automated notifications indicating that an authentication event has occurred in your gateway. Rather than requiring you to pull information via our API, webhooks push information to your designated destination when important events occur.

Webhooks allow you to develop a workflow for how your server responds to the information provided in a notification (e.g. setting up your server to send an email to any customers whose subscriptions have expired).

For general information on Braintree webhooks, refer to Create webhooks.

APIAnchorIcon

NotificationsAnchorIcon

The following table describes the conditions that trigger each kind of webhook.

Notification TypeDescription
ip_restrictions_changedIP restrictions have been changed.
tokenization_key_createdA tokenization key has been created.
tokenization_key_destroyedA tokenization key has been destroyed.
api_key_createdAn API key has been created.
api_key_destroyedAn API key has been destroyed.
two_factor_changedA user has changed two factor authentication.

LoginAnchorIcon

NotificationsAnchorIcon

The following table describes the conditions that trigger each kind of webhook.

Notification TypeDescription
user_password_resetA password has been reset for a user.
user_loginA user has successfully logged into the Control Panel.
user_sso_loginA user has successfully logged into the Control Panel through SSO.
user_locked_outA user has been locked out of the Control Panel.

AuthZAnchorIcon

NotificationsAnchorIcon

The following table describes the conditions that trigger each kind of webhook.

Notification TypeDescription
role_createdA role has been created.
role_changedA role's rights have been changed.
role_assignedA role has been assigned to a user.
role_unassignedA role has been unassigned from a user.
user_suspension_changedA user suspension status has changed.

OAuthAnchorIcon

NotificationsAnchorIcon

The following table describes the conditions that trigger each kind of webhook.

Notification TypeDescription
oauth_access_grantedA connected merchant has granted API access.
oauth_application_createdA connected merchant has created an OAuth application.
oauth_application_changedA connected merchant has made changes to an OAuth application.

Fraud ProtectionAnchorIcon

NotificationsAnchorIcon

The following table describes the conditions that trigger each kind of webhook.

Notification TypeDescription
avs_rules_changedThe AVS rules have been changed.
cvv_rules_changedThe CVV rules have been changed.
risk_threshold_createdA risk threshold rule has been created.
risk_threshold_deletedA risk threshold rule has been deleted.
risk_threshold_changedA risk threshold rule has been changed.
premium_fraud_protection_changedPremium fraud protection has been changed.

Shared AttributesAnchorIcon

Notification TypeDescription
kind (enum)The kind of webhook notification.
timestamp (string)The UTC time at which the webhook was triggered.