# order.applicant.visited

Sent when the applicant visits the apply link for an order at any time
before they complete the application.

Endpoint: POST order.applicant.visited
Version: 1.0
Security: bearer-token

## Security:

  - `bearer-token` (unknown)
    http bearer

## Header parameters:

  - `Tenant-Signature` (string, required)
    Signature header in the form `t=<unix_ts>,v1=<hmac_sha256_hex>`.
See [Verifying signatures](webhooks.md#verifying-signatures).

  - `User-Agent` (string, required)
    Always `CheckrTenant/1`.

## Request fields (application/json):

  - `id` (string)
    Unique event id. Stable across retries — use it for idempotency on the receiving side.
    Example: evt_K9dM2pXqR4vN8tLZbWyHJa

  - `object` (string)
    Always `event` for webhook payloads.
    Enum: "event"

  - `type` (string)
    Enum: "order.applicant.visited"

  - `created_at` (string)
    UTC timestamp the event was created, in ISO-8601 format.

  - `data` (object)
    Reference to the applicant and order.

  - `data.id` (string)
    Id of the applicant.
    Example: ap_9f8e7d6c5b4a3210

  - `data.order_id` (string)
    Id of the order.
    Example: ord_WHImYp5RjqUxBowWilloQ

## Response 2XX:

  - `2XX` (unknown)
    Any 2xx response acknowledges the delivery. Non-2xx responses, network
errors, and timeouts are treated as failures and retried with exponential
backoff.