> This page is for Afterpay Online Developer, version Main (default).
> For other versions, use one of these documentation indexes:
> - Main (default): https://developers.afterpay.com/afterpay-online-developer/main/llms.txt
> - v1: https://developers.afterpay.com/afterpay-online-developer/v-1/llms.txt
> - Chinese: https://developers.afterpay.com/afterpay-online-developer/chinese/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://developers.afterpay.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.afterpay.com/_mcp/server.

# Grant status updated

POST 

Webhook notification sent when a grant's status changes

Reference: https://developers.afterpay.com/afterpay-online-developer/api-reference/reference/grants/grant-status-updated

## Request

### Payload

- `type` (string, required)
- `eventId` (string, required)
- `createdAt` (string, required)
- `data` (GrantStatusUpdatedData, required)

## Types

### GrantStatusUpdatedData

- `id` (string, required)
- `type` (enum, required)
  - Allowed values: `ON_FILE_GRANT`
- `object` (GrantStatusUpdatedDataObject, required)

### GrantStatusUpdatedDataObject

- `grant` (Grant, optional)

### Grant

- `id` (string, required) — Unique id identifying the grant
- `type` (enum, required) — Type of grant
  - Allowed values: `ON_FILE`
- `status` (enum, required) — Current status of the grant
  - Allowed values: `ACTIVE`, `CANCELLED`
- `created` (string, required) — Timestamp when the grant was created
- `merchantReference` (string, optional, nullable) — Merchant's reference for this grant
- `cancelled` (string, optional) — If present, indicates when the grant was cancelled
- `expires` (string, optional) — If present, indicates when the grant's status will become EXPIRED, preventing a client from using it to create payments
- `consumerReference` (string, optional, nullable) — Reference identifier for the consumer
- `email` (string, optional, nullable) — Masked email address of the consumer
- `requestId` (string, optional, nullable) — If present, unique identifier for the request