Every order is a POST to your URL with Content-Type: application/json, event vehicle.order.created.
{
"event": "vehicle.order.created",
"eventId": "…delivery uuid…",
"createdAt": "2026-10-03T10:00:00.000Z",
"tenant": { "id": "…", "slug": "casa-auto-bot", "companyName": "Casa Auto" },
"order": { "id": "…", "number": 17, "comment": "…" },
"vehicleId": "encar_42365346",
"provider": "encar",
"vehicle": { "title": "…", "brand": "BMW", "model": "3 Series", "year": 2021,
"mileageKm": 88003, "price": { "amount": 18198, "currency": "EUR" }, "url": "…" },
"customer": { "telegramId": 123456, "username": "max", "firstName": "Max",
"languageCode": "ru", "phone": "+373…" }
}
Headers:
X-MotorFeed-Event — the event type;X-MotorFeed-Delivery — the delivery id; use it so a retry never creates a deal twice;X-MotorFeed-Timestamp — when it was sent;X-MotorFeed-Signature — the request signature:
sha256=HMAC_SHA256(secret, "<timestamp>.<raw body>")
Answer with a 2xx status, otherwise the delivery is retried. Redirects are not followed and private network addresses are refused.