200 OK response with a unique id. Once the file has been generated and stored, Kushki sends a POST notification to each URL configured in the webhooks array, including the download link and its expiration timestamp.POST /data/v1/chargebacks/search, with the addition of the webhooks field.Note: The download URL is an S3 pre-signed URL valid for 4 hours from the moment of generation. Check expiration_timestampin the webhook notification before attempting the download.
| Header | Description |
|---|---|
X-Kushki-Id | Unix timestamp (13 digits, milliseconds) of when the notification was sent. |
X-Kushki-Signature | HMAC SHA256 signature of private-merchant-id|request|X-Kushki-Id. The signing secret is the merchant's own private-merchant-id. |
HMAC-SHA256({private-merchant-id}, "{private-merchant-id}|{request}|{X-Kushki-Id}")X-Kushki-Signature. If they match, the notification is authentic.curl --location --request POST 'https://api-uat.kushkipagos.com/data/v1/chargebacks/export' \
--header 'private-merchant-id: <api-key>' \
--header 'Content-Type: application/json' \
--data-raw '{
"filters": {
"time": {
"request_date": {
"from": "2026-01-15",
"to": "2026-03-15"
}
}
},
"webhooks": [
"https://merchant.example.com/webhooks/chargebacks"
]
}'{
"id": "1339b164-9298-4ea1-a52a-a9c053879194"
}