external_subscription_id when you completed the checkout. You never have to store a kurnl
id to find your own orders again.
This is also how you show a truthful status on your own thank-you or account page. An
order that needs a technician stays PENDING_INSTALL until the visit has happened — often
for days — and nothing in the payment flow tells you when that changes.
Endpoint
Authentication
X-Webhook-Secret header — the same secret as the other external-checkout endpoints. The
secret is verified before the lookup, so a wrong secret cannot be used to discover which
identifiers exist. Rate-limited to 120 requests / minute.
Response — 200 OK
Inside install
No contact or address fields are returned. An anonymous subscription does not have them at
all, and for a non-anonymous one they belong to the subscriber, not to the integration.