app.authorized

Payload

Object: EventAppAuthorized

• idstringrequired

  Event ID (evt_…), also sent as the webhook-id header. Use it to drop duplicate deliveries.

• typestringrequired

  Allowed values: app.authorized

• created_atstring (date-time)required

  When the change happened (UTC).

• org_idintegerrequired
• api_versionstringrequired

  Contract version of the data schema.

• sequenceinteger

  Delivery sequence number within the endpoint (absent for a test event).

• objectWebhookEventObjectrequired
• payloadstringrequired

  thin means no data: read the object through the API.

  Allowed values: fullthin

• dataobject
  Fields

  • appobjectrequired

    The app: ID and name.

    Fields

    • idstring
    • namestring
  • authorization_idintegerrequired

    The employee authorization.

  • user_idintegerrequired

    The employee who authorized the app.

  • scopesarray of stringrequired

    Scopes of the authorization.

• testbooleanrequired

  A test event sent by POST /v1/webhooks/{webhook_id}/test.

{
  "id": "evt_0123456789abcdef0123456789abcdef",
  "type": "app.authorized",
  "created_at": "2026-10-24T10:00:03Z",
  "org_id": 1,
  "api_version": "1.62.0",
  "sequence": 1042,
  "object": {
    "type": "app",
    "id": "app_8f14e45fceea167a5a36dedd4bea2543"
  },
  "payload": "full",
  "data": {
    "app": {
      "id": "app_8f14e45fceea167a5a36dedd4bea2543",
      "name": "CRM sync"
    },
    "authorization_id": 12,
    "user_id": 7,
    "scopes": [
      "cards:read",
      "search"
    ]
  },
  "test": false
}