API reference

Webhook delivery and retries

Credicorp expects a 2xx within 10 seconds. Return one to acknowledge, then process asynchronously. Any non-2xx or timeout triggers a retry on exponential backoff — roughly a dozen attempts spread over 72 hours. Delivery is at-least-once, so build for redelivery. After 7 consecutive days of failure an endpoint is disabled.

2 min read

10 sAcknowledgement timeout
72 hRetry window
At-least-onceDelivery semantics

The acknowledgement contract

Any 2xx status means "received" — the body is ignored. Do the minimum synchronously: verify the signature, enqueue the event, return 200. If you run business logic inline and it exceeds the 10-second timeout, the delivery is marked failed and retried even though you processed it, which is why idempotency is not optional.

Retry schedule

Failed deliveries back off exponentially. The schedule is approximately:

AttemptDelay after previousElapsed
1— (immediate)0
2~1 min~1 min
3~5 min~6 min
4~30 min~36 min
5~2 h~2.5 h
6–12~6–12 h eachup to 72 h

Retries stop once the endpoint returns a 2xx or the 72-hour window closes.

What counts as a failure

ResponseTreated as
2xxSuccess — no retry
3xxFailure — redirects are not followed
4xx / 5xxFailure — retried on backoff
Timeout (>10 s)Failure — retried on backoff
Connection refused / TLS errorFailure — retried on backoff

Ordering

Events are not guaranteed to arrive in order. A retried event can land after a newer one. Never assume sequence; use each event’s created timestamp and the resource’s own state to reconcile. See Handle out-of-order webhooks.

Frequently asked questions

Can I make Credicorp retry immediately?

You can trigger a manual redelivery of a specific event from the partner dashboard, but you cannot compress the automatic backoff schedule. The schedule is designed to give a recovering endpoint time to come back.

What happens after 72 hours of failure?

The event is dropped from the retry queue. If your endpoint was down, re-fetch current state from the read API once it recovers. Seven consecutive days of all-failed deliveries additionally disables the endpoint.

Are events delivered in order?

No. Treat delivery as unordered and reconcile using the created timestamp and current resource state. See Handle out-of-order webhooks.

Funding for UK limited companies

Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.