API reference

Registers one declared event on the channel identified by the API key. The synchronous acknowledgment is the client's receipt: it commits the event's position in the channel sequence.

Idempotency: client_ref must be unique per channel. Retrying with the same client_ref and identical content returns 200 with the original event; same client_ref with different content returns 409 and never overwrites.

Exhausted balance: events are still registered, sealed and chained with status: unpaid, up to the back-office unpaid limit; past it, 402 unpaid_limit_exceeded.

Content modality only (modality: content): returns the declared content exactly as Safe Creative holds it — the JSON in its canonical form, the one that was hashed, or the file, with its original name in Content-Disposition. Its digest is the event's hash. A hash-only event has no content: 404 not_found.

Lets client systems self-monitor (low balance, unpaid events, operational status).

Starts the issuance of the signed certification reports (one in Spanish and one in English) plus their evidence archive for a range of this channel, by dates or by sequence numbers.

Rejected with 402 account_not_operational while the owner account has any unpaid event ("cuenta sin saldo operativo").

The certification is completed: the reports, the evidence ZIP and the verification code are ready. data.verification_code is present; fetch GET /certifications/{certification_id} for fresh download URLs. mode is the certification's mode.

The certification could not be issued (status: failed): any issuance charge is refunded and data.incident_id identifies the incident for support. The same range can be requested again. mode is the certification's mode.

Sent once per downward crossing of each alert threshold set in the console; the threshold re-arms when a purchase or an adjustment takes the balance back above it. Always live.

The balance ran out and an event was registered as unpaid (it is still sealed and chained). From now on certifications are rejected with 402 account_not_operational until a purchase settles the unpaid events. Sent once per exhaustion. Always live.

The account reached its unpaid-events limit: from now on POST /events answers 402 unpaid_limit_exceeded until a purchase settles the debt. Always live.

A consumption limit set in the console (per channel or per key, daily or monthly in UTC) reached its maximum. With action block further registrations answer 422 limit_blocked until the next period; with warn they keep going through. Sent once per limit and period. Test events do not count. Always live.

The balance dropped below the automatic top-up threshold set in the console and the chosen pack was bought with the default payment method at Safe Creative; its credits are already in the balance (after settling any unpaid events). Safe Creative sends the invoice. Always live.

The automatic top-up could not be made (data.reason) and has been turned off, keeping its settings: it can be turned back on in the console. If the purchase was created but not charged, data.payment_url lets the owner pay it manually. Always live.

Only sent when the account owner asks for a test delivery of an endpoint from the console: a single attempt, no retries, and it never counts towards disabling the endpoint. Always live.

Content modality — JSON token generated by the client's process.

Hash-only modality — the content never leaves the client's perimeter.

Content modality — file attachment. Max 10 MB.

Qualified-timestamp coverage of an event (Event.timestamp).

A sealed, immutable configuration version. Changes create new versions; none is rewritten.

Range by dates or by sequence numbers (exactly one pair).

One signed PDF report of a certification (Certification.reports).

Range of a certification (Certification.range), as requested: exactly one pair is set, the reception dates (from, to) or the sequence numbers (seq_from, seq_to); the other pair is null.

One ZIP part of the declared content of a certification (Certification.content_parts).

Balance in credits. One live event consumes one credit; credits are bought in packs in the console, priced per region and currency. The balance itself has no currency.

Common webhook body, sent as POST with Content-Type: application/json. Headers: X-SC-Webhook-Id (the envelope id, stable across retries: use it to de-duplicate), X-SC-Timestamp (Unix seconds) and X-SC-Signature: v1=<hex>, where <hex> is HMAC-SHA256 with the endpoint secret over <X-SC-Timestamp>.<raw body>. Verify the signature and reject old timestamps (e.g. more than 5 minutes) before processing. Any 2xx acknowledges; otherwise retries with exponential backoff (1 min, 5 min, 30 min, 2 h, 6 h, 12 h, 24 h). An endpoint whose deliveries keep failing is disabled and the account is notified by email. webhook.test is only sent when the account owner asks for a test delivery from the console: a single attempt, no retries, and it never counts towards disabling the endpoint.

The model of data depends on type. New fields may be added to data over time: ignore the ones you do not know.

Example (balance.low):

{"id": "ntc_…", "type": "balance.low", "created_at": "2026-09-28T07:00:16.526317Z", "mode": "live",
 "data": {"threshold_id": "thr_…", "threshold": 1000, "balance": 999}}

data of certification.completed and certification.failed.

data of balance.low.

data of balance.exhausted.

data of events.unpaid_limit_reached.

data of consumption.limit_reached.

data of recharge.auto_completed and recharge.auto_failed.

data of webhook.test.