{
"event": "sentinel.scan.complete",
"scan_id": "ver_3f9a1c0b7d2e4a51c8e0f6a29b4d7c13",
"status": "PASS",
"timestamp": "2026-10-18T09:15:42.000Z",
"product": "aml",
"result": {
"verdict": "pass"
}
}Event delivery to your endpoint
Sentinel POSTs this to each webhook endpoint you add under
Developer → Webhooks. Verify X-Sentinel-Signature-V2: the hex
HMAC-SHA256 of <X-Sentinel-Timestamp>.<raw body> keyed with the
endpoint’s signing secret (also accept X-Sentinel-Signature-V2-Next
during a secret rotation), and reject timestamps more than 5 minutes
old. Answer any 2xx within 10 seconds. Failed deliveries are retried
after 1 minute, 5 minutes, 30 minutes, 2 hours, 6 hours and 24 hours.
{
"event": "sentinel.scan.complete",
"scan_id": "ver_3f9a1c0b7d2e4a51c8e0f6a29b4d7c13",
"status": "PASS",
"timestamp": "2026-10-18T09:15:42.000Z",
"product": "aml",
"result": {
"verdict": "pass"
}
}Authorizations
Your API key: gt_live_… or gt_test_…
Headers
Unix time in seconds.
Only during a secret rotation.
Older scheme (HMAC of the body alone). Prefer V2.
Body
sentinel.scan.complete, sentinel.monitoring.alert, sentinel.review.decided, sentinel.credits.low, sentinel.test The check's id; use it with GET /v1/verify/{id}.
PASS, REVIEW, REJECT, FAILED kyc, aml, idp, kyb, liveness, null The check's full result; for FAILED, { failureReason }.
sentinel.review.decided only.
Show child attributes
Show child attributes
sentinel.credits.low only.
Show child attributes
Show child attributes
Response
Any 2xx tells Sentinel the delivery arrived.