{
"id": "evt_9pQ2vX7mKdR4tYb1nZ3sLwCe",
"created_at": "2026-07-28T18:41:03Z",
"type": "delivery.updated",
"data": {
"id": "dlv_7hK2mQ9xR4tV6bN1cZ8sLwYe",
"external_id": "order-841",
"origin": "api",
"code": "LS-2048",
"store_id": "<string>",
"test": true,
"payment": {
"url": "<string>",
"cash_to_collect_cents": 123,
"paid_at": "2023-11-07T05:31:56Z"
},
"order_value_cents": 123,
"fee_cents": 123,
"business_fee_cents": 123,
"customer_fee_cents": 123,
"tip_cents": 123,
"currency": "MXN",
"quote_id": "<string>",
"pickup": {
"name": "<string>",
"street": "<string>",
"lat": 123,
"lng": 123,
"notes": "<string>"
},
"dropoff": {
"name": "<string>",
"phone": "+528112345678",
"street": "<string>",
"apt_unit": "<string>",
"lat": 123,
"lng": 123,
"notes": "<string>"
},
"manifest": {
"items": [
{
"name": "<string>",
"quantity": 123
}
]
},
"vehicle": "moto",
"courier": {
"name": "<string>",
"vehicle": "<string>",
"vehicle_type": "<string>",
"plate": "<string>",
"phone": {
"masked": "<string>",
"pin": "<string>"
},
"location": {
"lat": 123,
"lng": 123,
"updated_at": "2023-11-07T05:31:56Z"
},
"imminent": true
},
"pickup_eta_at": "2023-11-07T05:31:56Z",
"dropoff_eta_at": "2023-11-07T05:31:56Z",
"tracking_url": "https://app.listo.delivery/t/abc123",
"verification": {
"pincode": "<string>"
},
"return_verification": {
"pincode": "4821"
},
"proof": {
"picture_url": "<string>",
"signature_image_url": "<string>",
"signature_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z"
},
"proofs": {
"pickup": {
"photo_url": "<string>",
"captured_at": "2023-11-07T05:31:56Z"
},
"dropoff": {
"photo_url": "<string>",
"signature_url": "<string>",
"signer_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z",
"delivered": true
},
"return": {
"photo_url": "<string>",
"signature_url": "<string>",
"signer_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z",
"meters_from_store": 123
}
},
"cancellation": {
"description": "<string>"
},
"charges": [
{
"amount_cents": 123,
"charged_at": "2023-11-07T05:31:56Z"
}
],
"refunds": [
{
"id": "rfn_4bQ7wS2xK9mT6vN3cZ8pLdYe",
"amount_cents": 123,
"reason": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"succeeded_at": "2023-11-07T05:31:56Z"
}
],
"refunded_cents": 123,
"refundable_cents": 123,
"support_reference": "2080F",
"pickup_ready_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"courier_assigned_at": "2023-11-07T05:31:56Z",
"picked_up_at": "2023-11-07T05:31:56Z",
"delivered_at": "2023-11-07T05:31:56Z",
"canceled_at": "2023-11-07T05:31:56Z",
"returned_at": "2023-11-07T05:31:56Z",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z"
},
"test": true
}A delivery changed without changing status
Sent when something you can see about a delivery moved but its status did not: the courier’s identity arrived, an ETA shifted, the courier became imminent, proof of delivery landed, or a payment was refunded.
data is the full delivery object.
{
"id": "evt_9pQ2vX7mKdR4tYb1nZ3sLwCe",
"created_at": "2026-07-28T18:41:03Z",
"type": "delivery.updated",
"data": {
"id": "dlv_7hK2mQ9xR4tV6bN1cZ8sLwYe",
"external_id": "order-841",
"origin": "api",
"code": "LS-2048",
"store_id": "<string>",
"test": true,
"payment": {
"url": "<string>",
"cash_to_collect_cents": 123,
"paid_at": "2023-11-07T05:31:56Z"
},
"order_value_cents": 123,
"fee_cents": 123,
"business_fee_cents": 123,
"customer_fee_cents": 123,
"tip_cents": 123,
"currency": "MXN",
"quote_id": "<string>",
"pickup": {
"name": "<string>",
"street": "<string>",
"lat": 123,
"lng": 123,
"notes": "<string>"
},
"dropoff": {
"name": "<string>",
"phone": "+528112345678",
"street": "<string>",
"apt_unit": "<string>",
"lat": 123,
"lng": 123,
"notes": "<string>"
},
"manifest": {
"items": [
{
"name": "<string>",
"quantity": 123
}
]
},
"vehicle": "moto",
"courier": {
"name": "<string>",
"vehicle": "<string>",
"vehicle_type": "<string>",
"plate": "<string>",
"phone": {
"masked": "<string>",
"pin": "<string>"
},
"location": {
"lat": 123,
"lng": 123,
"updated_at": "2023-11-07T05:31:56Z"
},
"imminent": true
},
"pickup_eta_at": "2023-11-07T05:31:56Z",
"dropoff_eta_at": "2023-11-07T05:31:56Z",
"tracking_url": "https://app.listo.delivery/t/abc123",
"verification": {
"pincode": "<string>"
},
"return_verification": {
"pincode": "4821"
},
"proof": {
"picture_url": "<string>",
"signature_image_url": "<string>",
"signature_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z"
},
"proofs": {
"pickup": {
"photo_url": "<string>",
"captured_at": "2023-11-07T05:31:56Z"
},
"dropoff": {
"photo_url": "<string>",
"signature_url": "<string>",
"signer_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z",
"delivered": true
},
"return": {
"photo_url": "<string>",
"signature_url": "<string>",
"signer_name": "<string>",
"captured_at": "2023-11-07T05:31:56Z",
"meters_from_store": 123
}
},
"cancellation": {
"description": "<string>"
},
"charges": [
{
"amount_cents": 123,
"charged_at": "2023-11-07T05:31:56Z"
}
],
"refunds": [
{
"id": "rfn_4bQ7wS2xK9mT6vN3cZ8pLdYe",
"amount_cents": 123,
"reason": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"succeeded_at": "2023-11-07T05:31:56Z"
}
],
"refunded_cents": 123,
"refundable_cents": 123,
"support_reference": "2080F",
"pickup_ready_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"courier_assigned_at": "2023-11-07T05:31:56Z",
"picked_up_at": "2023-11-07T05:31:56Z",
"delivered_at": "2023-11-07T05:31:56Z",
"canceled_at": "2023-11-07T05:31:56Z",
"returned_at": "2023-11-07T05:31:56Z",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z"
},
"test": true
}Headers
Proves the event came from us. The value is t=<unix seconds>,v1=<hex>,
where the hex is an HMAC-SHA256, keyed on your signing secret, over the
string "<t>.<raw request body>".
To verify: split the header on the comma, rebuild "<t>.<body>" from
the RAW bytes you received (never a parsed and re-serialized object, or
whitespace and escape sequences will change the digest), compute the
HMAC, and compare it to v1 in constant time. Reject anything that does
not match.
Then check the clock. Reject an event whose t is more than 5 minutes
away from now in EITHER direction: a t far in the past is the replay
this scheme exists to stop, and one far in the future is the same attack
with a clock nobody checked.
Two secrets can be active at once so you can rotate without downtime: add the new one, accept either, promote it, then drop the old one. We always sign with the primary.
"t=1753728063,v1=8d2f4a1b6c7e9f0a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f607182"
Body
The fields every event shares. Delivery is at-least-once and unordered
by design: dedupe on id, and order by created_at or by the object's
own timestamps rather than by arrival. type and data are added by
each event, because their values depend on which event it is.
The event id, evt_ prefixed. Dedupe on this.
"evt_9pQ2vX7mKdR4tYb1nZ3sLwCe"
When the event was recorded, ISO-8601 in UTC.
"2026-07-28T18:41:03Z"
Which event this is.
delivery.updated The shape of a delivery: every field the object can carry, with the
nullability each one really has. It is the response of every operation
that answers a delivery (the create, the fetch, a list row, the
reschedule, the cancel, the retry and the refund) and the data of
every full delivery event, so ONE type holds all of them.
Every operation returns the whole object. A field that a given call
cannot yet have is present and null rather than missing: a create
response has a null courier, because no courier has been assigned
yet, and a reschedule only ever answers with a still-scheduled order,
so its delivered_at is null.
Money is integer centavos, timestamps are ISO-8601 in UTC, and every enum below is ours rather than a passthrough of anyone else's.
Show child attributes
Show child attributes
Present, and true, only on a test event you asked for with
POST /v1/test_webhooks. A real event does not carry the field at
all. A test event's data is a sample whose ids resolve to nothing.
true
Response
Return any 2xx to acknowledge the event.