Auth
API reference for Auth endpoints and webhooks
Retrieve bank account information to set up electronic funds transfers, such as ACH payments in the US, EFT payments in Canada, BACS payments in the UK, and IBAN / SIC payments in the EU.
For how-to guidance, see the Auth documentation.
| Endpoints | |
|---|---|
/auth/get | Fetch account information |
/bank_transfer/event/list | Search for updates on micro-deposit verification statuses based on filter criteria |
/bank_transfer/event/sync | Get updates on micro-deposit verification statuses using a cursor |
| See also | |
|---|---|
/processor/token/create | Create a token for using Auth with a processing partner |
/sandbox/processor_token/create | Create a token for testing Auth with a processing partner |
/processor/stripe/bank_account_token/create | Create a token for using Auth with Stripe as a processing partner |
/sandbox/item/set_verification_status | Change a Sandbox Item's micro-deposit verification status |
| Webhooks | |
|---|---|
DEFAULT_UPDATE | Item has account(s) with updated Auth data |
AUTOMATICALLY_VERIFIED | Item has been verified |
VERIFICATION_EXPIRED | Item verification has failed |
BANK_TRANSFERS_EVENTS_UPDATE | New micro-deposit verification events available |
SMS_MICRODEPOSITS_VERIFICATION | Text message verification status has changed |
Endpoints
/auth/get
Retrieve auth data
The /auth/get endpoint returns the bank account and bank identification numbers (such as routing numbers, for US accounts) associated with an Item's checking, savings, and cash management accounts, along with high-level account data and balances when available.
Versioning note: In API version 2017-03-08, the schema of the numbers object returned by this endpoint is substantially different. For details, see Plaid API versioning.
Request fields
client_idclient_id. The client_id is required and may be provided either in the PLAID-CLIENT-ID header or as part of a request body.secretsecret. The secret is required and may be provided either in the PLAID-SECRET header or as part of a request body.access_tokenoptions/auth/get results.account_idsaccount_ids to retrieve for the Item.
Note: An error will be returned if a provided account_id is not associated with the Item.1const request: AuthGetRequest = {2 access_token: accessToken,3};4try {5 const response = await plaidClient.authGet(request);6 const accountData = response.data.accounts;7 const numbers = response.data.numbers;8} catch (error) {9 // handle error10}Response fields
accountsaccounts for which numbers are being retrieved.account_idaccount_id will be assigned to the account.The
account_id can also change if the access_token is deleted and the same credentials that were used to generate that access_token are used to generate a new access_token on a later date. In that case, the new account_id will be different from the old account_id.If an account with a specific
account_id disappears instead of changing, the account is likely closed. Closed accounts are not returned by the Plaid API.When using a CRA endpoint (an endpoint associated with Plaid Check Consumer Report, i.e. any endpoint beginning with
/cra/), the account_id returned will not match the account_id returned by a non-CRA endpoint.Like all Plaid identifiers, the
account_id is case sensitive.balances/accounts/balance/get or /signal/evaluate (using a Balance-only ruleset).availableFor
credit-type accounts, the available balance typically equals the limit less the current balance, less any pending outflows plus any pending inflows.For
depository-type accounts, the available balance typically equals the current balance less any pending outflows plus any pending inflows. For depository-type accounts, the available balance does not include the overdraft limit.For
investment-type accounts (or brokerage-type accounts for API versions 2018-05-22 and earlier), the available balance is the total cash available to withdraw as presented by the institution.Note that not all institutions calculate the
available balance. In the event that available balance is unavailable, Plaid will return an available balance value of null.Available balance may be cached and is not guaranteed to be up-to-date in realtime unless the value was returned by
/accounts/balance/get, or by /signal/evaluate with a Balance-only ruleset.If
current is null this field is guaranteed not to be null.double currentFor
credit-type accounts, a positive balance indicates the amount owed; a negative amount indicates the lender owing the account holder.For
loan-type accounts, the current balance is the principal remaining on the loan, except in the case of student loan accounts at Sallie Mae (ins_116944). For Sallie Mae student loans, the account's balance includes both principal and any outstanding interest. Similar to credit-type accounts, a positive balance is typically expected, while a negative amount indicates the lender owing the account holder.For
investment-type accounts (or brokerage-type accounts for API versions 2018-05-22 and earlier), the current balance is the total value of assets as presented by the institution.Note that balance information may be cached unless the value was returned by
/accounts/balance/get or by /signal/evaluate with a Balance-only ruleset; if the Item is enabled for Transactions, the balance will be at least as recent as the most recent Transaction update. If you require realtime balance information, use the available balance as provided by /accounts/balance/get or /signal/evaluate called with a Balance-only ruleset_key.When returned by
/accounts/balance/get, this field may be null. When this happens, available is guaranteed not to be null.double limitcredit-type accounts, this represents the credit limit.For
depository-type accounts, this represents the pre-arranged overdraft limit, which is common for current (checking) accounts in Europe.In North America, this field is typically only available for
credit-type accounts.double iso_currency_codeunofficial_currency_code is non-null.unofficial_currency _codeiso_currency_code is non-null. Unofficial currency codes are used for currencies that do not have official ISO currency codes, such as cryptocurrencies and the currencies of certain countries.See the currency code schema for a full listing of supported
unofficial_currency_codes.last_updated_datetimeYYYY-MM-DDTHH:mm:ssZ) indicating the last time the balance was updated.This field is returned only when the institution is
ins_128026 (Capital One).date-time masknameofficial_nametypeinvestment: Investment account. In API versions 2018-05-22 and earlier, this type is called brokerage instead.credit: Credit carddepository: Depository accountloan: Loan accountother: Non-specified account typeSee the Account type schema for a full listing of account types and corresponding subtypes.
investment, credit, depository, loan, brokerage, othersubtype401a, 401k, 403B, 457b, 529, auto, brokerage, business, cash isa, cash management, cd, checking, commercial, construction, consumer, credit card, crypto exchange, ebt, education savings account, fixed annuity, gic, health reimbursement arrangement, home equity, hsa, isa, ira, keogh, lif, life insurance, line of credit, lira, loan, lrif, lrsp, money market, mortgage, mutual fund, non-custodial wallet, non-taxable brokerage account, other, other insurance, other annuity, overdraft, paypal, payroll, pension, prepaid, prif, profit sharing plan, rdsp, resp, retirement, rlif, roth, roth 401k, rrif, rrsp, sarsep, savings, sep ira, simple ira, sipp, stock plan, student, thrift savings plan, tfsa, trust, ugma, utma, variable annuityverification_statuspending_automatic_verification: The Item is pending automatic verification.pending_manual_verification: The Item is pending manual micro-deposit verification. Items remain in this state until the user successfully verifies the code.automatically_verified: The Item has successfully been automatically verified.manually_verified: The Item has successfully been manually verified.verification_expired: Plaid was unable to automatically verify the deposit within 7 calendar days and will no longer attempt to validate the Item. Users may retry by submitting their information again through Link.verification_failed: The Item failed manual micro-deposit verification because the user exhausted all 3 verification attempts. Users may retry by submitting their information again through Link.unsent: The Item is pending micro-deposit verification, but Plaid has not yet sent the micro-deposit.database_insights_pending: The Database Auth result is pending and will be available upon Auth request.database_insights_fail: The Item's numbers have been verified using Plaid's data sources and have signal for being invalid and/or have no signal for being valid. Typically this indicates that the routing number is invalid, the account number does not match the account number format associated with the routing number, or the account has been reported as closed or frozen. Only returned for Auth Items created via Database Auth.database_insights_pass: The Item's numbers have been verified using Plaid's data sources: the routing and account number match a routing and account number of an account recognized on the Plaid network, and the account is not known by Plaid to be frozen or closed. Only returned for Auth Items created via Database Auth.database_insights_pass_with_caution: The Item's numbers have been verified using Plaid's data sources and have some signal for being valid: the routing and account number were not recognized on the Plaid network, but the routing number is valid and the account number is a potential valid account number for that routing number. Only returned for Auth Items created via Database Auth.database_matched: (deprecated) The Item has successfully been verified using Plaid's data sources. Only returned for Auth Items created via Database Match.null or empty string: Neither micro-deposit-based verification nor database verification are being used for the Item.automatically_verified, pending_automatic_verification, pending_manual_verification, unsent, manually_verified, verification_expired, verification_failed, database_matched, database_insights_pass, database_insights_pass_with_caution, database_insights_failverification_nameuser.legal_name request field in /link/token/create for the Link session that created the Item.verification_insightsname_match_scoreverification_name field) and matched Plaid network accounts. If defined, will be a value between 0 and 100. Will be undefined if name matching was not enabled for the database verification session or if there were no eligible Plaid network matches to compare the given name with.network_statushas_numbers_matchis_numbers_match _verifiedprevious_returnshas_previous _administrative_returnaccount_number_formatvalid: indicates that the account number has a correct format for the institution.invalid: indicates that the account number has an incorrect format for the institution.unknown: indicates that there was not enough information to determine whether the format is correct for the institution.valid, invalid, unknownpersistent_account_idins_56, ins_13) as well as the OAuth Sandbox institution (ins_127287); in Production, it will only be populated for accounts at applicable institutions.holder_categorybusiness, personal, unrecognizednumbersaccounts. The identifying number type (ACH, EFT, IBAN, or BACS) used will depend on the country of the account. An account may have more than one number type. If a particular identifying number type is not used by any accounts for which data has been requested, the array for that type will be empty.achaccount_idaccountAt certain institutions, including Chase, PNC, and (coming May 2025) US Bank, you will receive "tokenized" routing and account numbers, which are not the user's actual account and routing numbers. For important details on how this may impact your integration and on how to avoid fraud, user confusion, and ACH returns, see Tokenized account numbers.
is_tokenized_account _numberroutingwire_routingnull.eftaccount_idaccountinstitutionbranchinternationalaccount_idibanbicbacsaccount_idaccountsort_codeitemitem_iditem_id is always unique; linking the same account at the same institution twice will result in two Items with different item_id values. Like all Plaid identifiers, the item_id is case-sensitive.institution_idnull for Items created without an institution connection, such as Items created via Same Day Micro-deposits.institution_namenull for Items created without an institution connection, such as Items created via Same Day Micro-deposits.webhookauth_methodnull otherwise. For info about the various flows, see our Auth coverage documentation.INSTANT_AUTH: The Item's Auth data was provided directly by the user's institution connection.INSTANT_MATCH: The Item's Auth data was provided via the Instant Match fallback flow.AUTOMATED_MICRODEPOSITS: The Item's Auth data was provided via the Automated Micro-deposits flow.SAME_DAY_MICRODEPOSITS: The Item's Auth data was provided via the Same Day Micro-deposits flow.INSTANT_MICRODEPOSITS: The Item's Auth data was provided via the Instant Micro-deposits flow.DATABASE_MATCH: The Item's Auth data was provided via the Database Match flow.DATABASE_INSIGHTS: The Item's Auth data was provided via the Database Insights flow.TRANSFER_MIGRATED: The Item's Auth data was provided via /transfer/migrate_account.INVESTMENTS_FALLBACK: The Item's Auth data for Investments Move was provided via a fallback flow.INSTANT_AUTH, INSTANT_MATCH, AUTOMATED_MICRODEPOSITS, SAME_DAY_MICRODEPOSITS, INSTANT_MICRODEPOSITS, DATABASE_MATCH, DATABASE_INSIGHTS, TRANSFER_MIGRATED, INVESTMENTS_FALLBACK, nullerrorerror_code and categorized by error_type. Use these in preference to HTTP status codes to identify and handle specific errors. HTTP status codes are set and provide the broadest categorization of errors: 4xx codes are for developer- or user-related errors, and 5xx codes are for Plaid-related errors, and the status will be 2xx in non-error cases. An Item with a non-null error object will only be part of an API response when calling /item/get to view Item status. Otherwise, error fields will be null if no error has occurred; if an error has occurred, an error code will be returned instead.error_typeINVALID_REQUEST, INVALID_RESULT, INVALID_INPUT, INSTITUTION_ERROR, RATE_LIMIT_EXCEEDED, API_ERROR, ITEM_ERROR, ASSET_REPORT_ERROR, RECAPTCHA_ERROR, OAUTH_ERROR, PAYMENT_ERROR, BANK_TRANSFER_ERROR, INCOME_VERIFICATION_ERROR, MICRODEPOSITS_ERROR, SANDBOX_ERROR, PARTNER_ERROR, TRANSACTIONS_ERROR, TRANSACTION_ERROR, TRANSFER_ERROR, CHECK_REPORT_ERROR, CONSUMER_REPORT_ERRORerror_codeerror_code_reasonnull will be returned otherwise. Safe for programmatic use.Possible values:
OAUTH_INVALID_TOKEN: The user’s OAuth connection to this institution has been invalidated.OAUTH_CONSENT_EXPIRED: The user's access consent for this OAuth connection to this institution has expired.OAUTH_USER_REVOKED: The user’s OAuth connection to this institution is invalid because the user revoked their connection.error_messagedisplay_messagenull if the error is not related to user action.This may change over time and is not safe for programmatic use.
request_idcausescauses will return an array of errors containing a breakdown of these errors on the individual Item level, if any can be identified.causes will be provided for the error_type ASSET_REPORT_ERROR or CHECK_REPORT_ERROR. causes will also not be populated inside an error nested within a warning object.statusdocumentation_urlsuggested_actionavailable_productsbilled_products.assets, auth, balance, balance_plus, beacon, identity, identity_match, investments, investments_auth, liabilities, payment_initiation, identity_verification, transactions, credit_details, income, income_verification, standing_orders, transfer, employment, recurring_transactions, transactions_refresh, signal, statements, processor_payments, processor_identity, profile, cra_base_report, cra_income_insights, cra_partner_insights, cra_network_insights, cra_cashflow_insights, cra_monitoring, cra_lend_score, cra_plaid_credit_score, layer, pay_by_bank, protect_linked_bankbilled_productsavailable_products. Note - billed_products is populated in all environments but only requests in Production are billed. Also note that products that are billed on a pay-per-call basis rather than a pay-per-Item basis, such as balance, will not appear here.assets, auth, balance, balance_plus, beacon, identity, identity_match, investments, investments_auth, liabilities, payment_initiation, identity_verification, transactions, credit_details, income, income_verification, standing_orders, transfer, employment, recurring_transactions, transactions_refresh, signal, statements, processor_payments, processor_identity, profile, cra_base_report, cra_income_insights, cra_partner_insights, cra_network_insights, cra_cashflow_insights, cra_monitoring, cra_lend_score, cra_plaid_credit_score, layer, pay_by_bank, protect_linked_bankproductsbilled_products field. For some products, it is possible for the product to be added to an Item but not yet billed (e.g. Assets, before /asset_report/create has been called, or Auth or Identity when added as Optional Products but before their endpoints have been called), in which case the product may appear in products but not in billed_products.assets, auth, balance, balance_plus, beacon, identity, identity_match, investments, investments_auth, liabilities, payment_initiation, identity_verification, transactions, credit_details, income, income_verification, standing_orders, transfer, employment, recurring_transactions, transactions_refresh, signal, statements, processor_payments, processor_identity, profile, cra_base_report, cra_income_insights, cra_partner_insights, cra_network_insights, cra_cashflow_insights, cra_monitoring, cra_lend_score, cra_plaid_credit_score, layer, pay_by_bank, protect_linked_bankconsented_productsassets, auth, balance, balance_plus, beacon, identity, identity_match, investments, investments_auth, liabilities, transactions, income, income_verification, transfer, employment, recurring_transactions, signal, statements, processor_payments, processor_identity, cra_base_report, cra_income_insights, cra_lend_score, cra_partner_insights, cra_cashflow_insights, cra_monitoring, layerconsent_expiration _timenull. Currently, only institutions in Europe and a small number of institutions in the US have expiring consent. For a list of US institutions that currently expire consent, see the OAuth Guide.date-time update_typebackground - Item can be updated in the backgrounduser_present_required - Item requires user interaction to be updatedbackground, user_present_requiredrequest_id1{2 "accounts": [3 {4 "account_id": "vzeNDwK7KQIm4yEog683uElbp9GRLEFXGK98D",5 "balances": {6 "available": 100,7 "current": 110,8 "limit": null,9 "iso_currency_code": "USD",10 "unofficial_currency_code": null11 },12 "mask": "9606",13 "name": "Plaid Checking",14 "official_name": "Plaid Gold Checking",15 "subtype": "checking",16 "type": "depository"17 }18 ],19 "numbers": {20 "ach": [21 {22 "account": "9900009606",23 "account_id": "vzeNDwK7KQIm4yEog683uElbp9GRLEFXGK98D",24 "routing": "011401533",25 "wire_routing": "021000021",26 "is_tokenized_account_number": false27 }28 ],29 "eft": [30 {31 "account": "111122223333",32 "account_id": "vzeNDwK7KQIm4yEog683uElbp9GRLEFXGK98D",33 "institution": "021",34 "branch": "01140"35 }36 ],37 "international": [38 {39 "account_id": "vzeNDwK7KQIm4yEog683uElbp9GRLEFXGK98D",40 "bic": "NWBKGB21",41 "iban": "GB29NWBK60161331926819"42 }43 ],44 "bacs": [45 {46 "account": "31926819",47 "account_id": "vzeNDwK7KQIm4yEog683uElbp9GRLEFXGK98D",48 "sort_code": "601613"49 }50 ]51 },52 "item": {53 "available_products": [54 "balance",55 "identity",56 "payment_initiation",57 "transactions"58 ],59 "billed_products": [60 "assets",61 "auth"62 ],63 "consent_expiration_time": null,64 "error": null,65 "institution_id": "ins_117650",66 "institution_name": "Royal Bank of Plaid",67 "item_id": "DWVAAPWq4RHGlEaNyGKRTAnPLaEmo8Cvq7na6",68 "update_type": "background",69 "webhook": "https://www.genericwebhookurl.com/webhook",70 "auth_method": "INSTANT_AUTH"71 },72 "request_id": "m8MDnv9okwxFNBV"73}/bank_transfer/event/list
List bank transfer events
Use the /bank_transfer/event/list endpoint to get a list of Plaid-initiated ACH or bank transfer events based on specified filter criteria. When using Auth with micro-deposit verification enabled, this endpoint can be used to fetch status updates on ACH micro-deposits. For more details, see micro-deposit events.
Request fields
client_idclient_id. The client_id is required and may be provided either in the PLAID-CLIENT-ID header or as part of a request body.secretsecret. The secret is required and may be provided either in the PLAID-SECRET header or as part of a request body.start_date2019-12-06T22:35:49Z)date-time end_date2019-12-06T22:35:49Z)date-time bank_transfer_idaccount_idbank_transfer_typedebit or credit. A debit indicates a transfer of money into your origination account; a credit indicates a transfer of money out of your origination account.debit, credit, nullevent_typespending, cancelled, failed, posted, reversedcountcount, the most recent events will be returned.25 25 1 offsetcount=25 and offset=0, the first 25 events will be returned. When count=25 and offset=25, the next 25 bank transfer events will be returned.0 0 origination_account_iddirectionoutbound: for API-initiated transfers
inbound: for payments received by the FBO account.inbound, outbound, null1const request: BankTransferEventListRequest = {2 start_date: start_date,3 end_date: end_date,4 bank_transfer_id: bank_transfer_id,5 account_id: account_id,6 bank_transfer_type: bank_transfer_type,7 event_types: event_types,8 count: count,9 offset: offset,10 origination_account_id: origination_account_id,11 direction: direction,12};13try {14 const response = await plaidClient.bankTransferEventList(request);15 const events = response.data.bank_transfer_events;16 for (const event of events) {17 // iterate through events18 }19} catch (error) {20 // handle error21}Response fields
bank_transfer_eventsevent_id0 timestamp2006-01-02T15:04:05Z.date-time event_typepending: A new transfer was created; it is in the pending state.cancelled: The transfer was cancelled by the client.failed: The transfer failed, no funds were moved.posted: The transfer has been successfully submitted to the payment network.reversed: A posted transfer was reversed.pending, cancelled, failed, posted, reversedaccount_idbank_transfer_idorigination_account_idbank_transfer_typedebit or credit. A debit indicates a transfer of money into the origination account; a credit indicates a transfer of money out of the origination account.debit, creditbank_transfer_amountbank_transfer_iso _currency_codefailure_reason"failed" or "reversed". Null value otherwise.ach_return_codeR01. A return code will be provided if and only if the transfer status is reversed. For a full listing of ACH return codes, see Bank Transfers errors.descriptiondirectionoutbound for API-initiated transfers, or inbound for payments received by the FBO account.outbound, inbound, nullrequest_id1{2 "bank_transfer_events": [3 {4 "account_id": "6qL6lWoQkAfNE3mB8Kk5tAnvpX81qefrvvl7B",5 "bank_transfer_amount": "12.34",6 "bank_transfer_id": "460cbe92-2dcc-8eae-5ad6-b37d0ec90fd9",7 "bank_transfer_iso_currency_code": "USD",8 "bank_transfer_type": "credit",9 "direction": "outbound",10 "event_id": 1,11 "event_type": "pending",12 "failure_reason": null,13 "origination_account_id": "",14 "timestamp": "2020-08-06T17:27:15Z"15 }16 ],17 "request_id": "mdqfuVxeoza6mhu"18}/bank_transfer/event/sync
Sync bank transfer events
/bank_transfer/event/sync allows you to request up to the next 25 Plaid-initiated bank transfer events that happened after a specific event_id. When using Auth with micro-deposit verification enabled, this endpoint can be used to fetch status updates on ACH micro-deposits. For more details, see micro-deposit events.
Request fields
client_idclient_id. The client_id is required and may be provided either in the PLAID-CLIENT-ID header or as part of a request body.secretsecret. The secret is required and may be provided either in the PLAID-SECRET header or as part of a request body.after_idevent_id fetched via the sync endpoint, or 0 initially.0 count25 1 25 1const request: BankTransferEventListRequest = {2 after_id: afterID,3 count: 25,4};5try {6 const response = await plaidClient.bankTransferEventSync(request);7 const events = response.data.bank_transfer_events;8 for (const event of events) {9 // iterate through events10 }11} catch (error) {12 // handle error13}Response fields
bank_transfer_eventsevent_id0 timestamp2006-01-02T15:04:05Z.date-time event_typepending: A new transfer was created; it is in the pending state.cancelled: The transfer was cancelled by the client.failed: The transfer failed, no funds were moved.posted: The transfer has been successfully submitted to the payment network.reversed: A posted transfer was reversed.pending, cancelled, failed, posted, reversedaccount_idbank_transfer_idorigination_account_idbank_transfer_typedebit or credit. A debit indicates a transfer of money into the origination account; a credit indicates a transfer of money out of the origination account.debit, creditbank_transfer_amountbank_transfer_iso _currency_codefailure_reason"failed" or "reversed". Null value otherwise.ach_return_codeR01. A return code will be provided if and only if the transfer status is reversed. For a full listing of ACH return codes, see Bank Transfers errors.descriptiondirectionoutbound for API-initiated transfers, or inbound for payments received by the FBO account.outbound, inbound, nullrequest_id1{2 "bank_transfer_events": [3 {4 "account_id": "6qL6lWoQkAfNE3mB8Kk5tAnvpX81qefrvvl7B",5 "bank_transfer_amount": "12.34",6 "bank_transfer_id": "460cbe92-2dcc-8eae-5ad6-b37d0ec90fd9",7 "bank_transfer_iso_currency_code": "USD",8 "bank_transfer_type": "credit",9 "direction": "outbound",10 "event_id": 1,11 "event_type": "pending",12 "failure_reason": null,13 "origination_account_id": "",14 "timestamp": "2020-08-06T17:27:15Z"15 }16 ],17 "request_id": "mdqfuVxeoza6mhu"18}Webhooks
Updates are sent for Items that are linked using micro-deposits (excluding Instant Micro-deposits).
When an automated micro-deposit is created, Plaid sends a webhook upon successful verification. If verification does not succeed after seven days for an automated micro-deposit, Plaid sends a VERIFICATION_EXPIRED webhook. If you attempt to retrieve an automated micro-deposit Item before verification succeeds, you’ll receive a response with the HTTP status code 400 and a Plaid error code of PRODUCT_NOT_READY. For Same-Day micro-deposits, Plaid does not send AUTOMATICALLY_VERIFIED or VERIFICATION_EXPIRED webhooks, but you may instead use the BANK_TRANSFERS_EVENTS_UPDATE webhook to access the underlying ACH events of micro-deposits.
Plaid will trigger a DEFAULT_UPDATE webhook for Items that undergo a change in Auth data. This is generally caused by data partners notifying Plaid of a change in their account numbering system or to their routing numbers. To avoid returned transactions, customers that receive a DEFAULT_UPDATE webhook with the account_ids_with_updated_auth object populated should immediately discontinue all usages of existing Auth data for those accounts and call /auth/get or /processor/auth/get to obtain updated account and routing numbers.
DEFAULT_UPDATE
Plaid will trigger a DEFAULT_UPDATE webhook for Items that undergo a change in Auth data. This is generally caused by data partners notifying Plaid of a change in their account numbering system or to their routing numbers. To avoid returned transactions, customers that receive a DEFAULT_UPDATE webhook with the account_ids_with_updated_auth object populated should immediately discontinue all usages of existing Auth data for those accounts and call /auth/get or /processor/auth/get to obtain updated account and routing numbers.
Properties
webhook_typeAUTHwebhook_codeDEFAULT_UPDATEitem_iditem_id of the Item associated with this webhook, warning, or erroraccount_ids_with_new _authaccount_id's for accounts that contain new auth.account_ids_with _updated_authaccount_id's that are mapped to their respective auth attributes that changed. ACCOUNT_NUMBER and ROUTING_NUMBER are the two potential values that can be flagged as updated.Example:
{ "XMBvvyMGQ1UoLbKByoMqH3nXMj84ALSdE5B58": ["ACCOUNT_NUMBER"] }errorerror_code and categorized by error_type. Use these in preference to HTTP status codes to identify and handle specific errors. HTTP status codes are set and provide the broadest categorization of errors: 4xx codes are for developer- or user-related errors, and 5xx codes are for Plaid-related errors, and the status will be 2xx in non-error cases. An Item with a non-null error object will only be part of an API response when calling /item/get to view Item status. Otherwise, error fields will be null if no error has occurred; if an error has occurred, an error code will be returned instead.error_typeINVALID_REQUEST, INVALID_RESULT, INVALID_INPUT, INSTITUTION_ERROR, RATE_LIMIT_EXCEEDED, API_ERROR, ITEM_ERROR, ASSET_REPORT_ERROR, RECAPTCHA_ERROR, OAUTH_ERROR, PAYMENT_ERROR, BANK_TRANSFER_ERROR, INCOME_VERIFICATION_ERROR, MICRODEPOSITS_ERROR, SANDBOX_ERROR, PARTNER_ERROR, TRANSACTIONS_ERROR, TRANSACTION_ERROR, TRANSFER_ERROR, CHECK_REPORT_ERROR, CONSUMER_REPORT_ERRORerror_codeerror_code_reasonnull will be returned otherwise. Safe for programmatic use.Possible values:
OAUTH_INVALID_TOKEN: The user’s OAuth connection to this institution has been invalidated.OAUTH_CONSENT_EXPIRED: The user's access consent for this OAuth connection to this institution has expired.OAUTH_USER_REVOKED: The user’s OAuth connection to this institution is invalid because the user revoked their connection.error_messagedisplay_messagenull if the error is not related to user action.This may change over time and is not safe for programmatic use.
request_idcausescauses will return an array of errors containing a breakdown of these errors on the individual Item level, if any can be identified.causes will be provided for the error_type ASSET_REPORT_ERROR or CHECK_REPORT_ERROR. causes will also not be populated inside an error nested within a warning object.statusdocumentation_urlsuggested_actionenvironmentsandbox, production1{2 "webhook_type": "AUTH",3 "webhook_code": "DEFAULT_UPDATE",4 "item_id": "wz666MBjYWTp2PDzzggYhM6oWWmBb",5 "account_ids_with_updated_auth": {6 "BxBXxLj1m4HMXBm9WZZmCWVbPjX16EHwv99vp": [7 "ACCOUNT_NUMBER"8 ]9 },10 "error": null,11 "environment": "production"12}AUTOMATICALLY_VERIFIED
Fired when an Item is verified via automated micro-deposits. We recommend communicating to your users when this event is received to notify them that their account is verified and ready for use.
Properties
webhook_typeAUTHwebhook_codeAUTOMATICALLY_VERIFIEDaccount_idaccount_id of the account associated with the webhookitem_iditem_id of the Item associated with this webhook, warning, or errorenvironmentsandbox, productionerrorerror_code and categorized by error_type. Use these in preference to HTTP status codes to identify and handle specific errors. HTTP status codes are set and provide the broadest categorization of errors: 4xx codes are for developer- or user-related errors, and 5xx codes are for Plaid-related errors, and the status will be 2xx in non-error cases. An Item with a non-null error object will only be part of an API response when calling /item/get to view Item status. Otherwise, error fields will be null if no error has occurred; if an error has occurred, an error code will be returned instead.error_typeINVALID_REQUEST, INVALID_RESULT, INVALID_INPUT, INSTITUTION_ERROR, RATE_LIMIT_EXCEEDED, API_ERROR, ITEM_ERROR, ASSET_REPORT_ERROR, RECAPTCHA_ERROR, OAUTH_ERROR, PAYMENT_ERROR, BANK_TRANSFER_ERROR, INCOME_VERIFICATION_ERROR, MICRODEPOSITS_ERROR, SANDBOX_ERROR, PARTNER_ERROR, TRANSACTIONS_ERROR, TRANSACTION_ERROR, TRANSFER_ERROR, CHECK_REPORT_ERROR, CONSUMER_REPORT_ERRORerror_codeerror_code_reasonnull will be returned otherwise. Safe for programmatic use.Possible values:
OAUTH_INVALID_TOKEN: The user’s OAuth connection to this institution has been invalidated.OAUTH_CONSENT_EXPIRED: The user's access consent for this OAuth connection to this institution has expired.OAUTH_USER_REVOKED: The user’s OAuth connection to this institution is invalid because the user revoked their connection.error_messagedisplay_messagenull if the error is not related to user action.This may change over time and is not safe for programmatic use.
request_idcausescauses will return an array of errors containing a breakdown of these errors on the individual Item level, if any can be identified.causes will be provided for the error_type ASSET_REPORT_ERROR or CHECK_REPORT_ERROR. causes will also not be populated inside an error nested within a warning object.statusdocumentation_urlsuggested_action1{2 "webhook_type": "AUTH",3 "webhook_code": "AUTOMATICALLY_VERIFIED",4 "item_id": "eVBnVMp7zdTJLkRNr33Rs6zr7KNJqBFL9DrE6",5 "account_id": "dVzbVMLjrxTnLjX4G66XUp5GLklm4oiZy88yK",6 "environment": "production",7 "error": null8}VERIFICATION_EXPIRED
Fired when an Item was not verified via automated micro-deposits after seven days since the automated micro-deposit was made.
Properties
webhook_typeAUTHwebhook_codeVERIFICATION_EXPIREDitem_iditem_id of the Item associated with this webhook, warning, or erroraccount_idaccount_id of the account associated with the webhookenvironmentsandbox, productionerrorerror_code and categorized by error_type. Use these in preference to HTTP status codes to identify and handle specific errors. HTTP status codes are set and provide the broadest categorization of errors: 4xx codes are for developer- or user-related errors, and 5xx codes are for Plaid-related errors, and the status will be 2xx in non-error cases. An Item with a non-null error object will only be part of an API response when calling /item/get to view Item status. Otherwise, error fields will be null if no error has occurred; if an error has occurred, an error code will be returned instead.error_typeINVALID_REQUEST, INVALID_RESULT, INVALID_INPUT, INSTITUTION_ERROR, RATE_LIMIT_EXCEEDED, API_ERROR, ITEM_ERROR, ASSET_REPORT_ERROR, RECAPTCHA_ERROR, OAUTH_ERROR, PAYMENT_ERROR, BANK_TRANSFER_ERROR, INCOME_VERIFICATION_ERROR, MICRODEPOSITS_ERROR, SANDBOX_ERROR, PARTNER_ERROR, TRANSACTIONS_ERROR, TRANSACTION_ERROR, TRANSFER_ERROR, CHECK_REPORT_ERROR, CONSUMER_REPORT_ERRORerror_codeerror_code_reasonnull will be returned otherwise. Safe for programmatic use.Possible values:
OAUTH_INVALID_TOKEN: The user’s OAuth connection to this institution has been invalidated.OAUTH_CONSENT_EXPIRED: The user's access consent for this OAuth connection to this institution has expired.OAUTH_USER_REVOKED: The user’s OAuth connection to this institution is invalid because the user revoked their connection.error_messagedisplay_messagenull if the error is not related to user action.This may change over time and is not safe for programmatic use.
request_idcausescauses will return an array of errors containing a breakdown of these errors on the individual Item level, if any can be identified.causes will be provided for the error_type ASSET_REPORT_ERROR or CHECK_REPORT_ERROR. causes will also not be populated inside an error nested within a warning object.statusdocumentation_urlsuggested_action1{2 "webhook_type": "AUTH",3 "webhook_code": "VERIFICATION_EXPIRED",4 "item_id": "eVBnVMp7zdTJLkRNr33Rs6zr7KNJqBFL9DrE6",5 "account_id": "BxBXxLj1m4HMXBm9WZZmCWVbPjX16EHwv99vp",6 "environment": "production",7 "error": null8}BANK_TRANSFERS_EVENTS_UPDATE
Fired when new ACH events are available. To begin receiving this webhook, you must first register your webhook listener endpoint via the webhooks page in the Dashboard. The BANK_TRANSFERS_EVENTS_UPDATE webhook can be used to track the progress of ACH transfers used in micro-deposit verification. Receiving this webhook indicates you should fetch the new events from /bank_transfer/event/sync. Note that Transfer customers should use Transfer webhooks instead of using BANK_TRANSFERS_EVENTS_UPDATE; see micro-deposit events documentation for more details.
Properties
webhook_typeBANK_TRANSFERSwebhook_codeBANK_TRANSFERS_EVENTS_UPDATEenvironmentsandbox, production1{2 "webhook_type": "BANK_TRANSFERS",3 "webhook_code": "BANK_TRANSFERS_EVENTS_UPDATE",4 "environment": "production"5}SMS_MICRODEPOSITS_VERIFICATION
Contains the state of a SMS same-day microdeposits verification session.
Properties
webhook_typeAUTHwebhook_codeSMS_MICRODEPOSITS_VERIFICATIONstatusMANUALLY_VERIFIED or VERIFICATION_FAILED.item_iditem_id of the Item associated with this webhook, warning, or erroraccount_idenvironmentsandbox, production1{2 "webhook_type": "AUTH",3 "webhook_code": "SMS_MICRODEPOSITS_VERIFICATION",4 "status": "MANUALLY_VERIFIED",5 "item_id": "eVBnVMp7zdTJLkRNr33Rs6zr7KNJqBFL9DrE6",6 "account_id": "dVzbVMLjrxTnLjX4G66XUp5GLklm4oiZy88yK",7 "environment": "sandbox"8}