Produto BaaS (parceiro). Requer Bearer JWT e assinatura HMAC obrigatória. Scope: baas.onboarding-natural-persons.write. Guia: documentação técnica.
stringAssinatura HMAC-SHA256 da requisição (hex).
stringTimestamp Unix (segundos, UTC) usado na assinatura.
stringNonce único por requisição (anti-replay).
stringstringRequer Bearer token e assinatura HMAC obrigatórios.
Scope: baas.onboarding-natural-persons.write.
| Header | Obrigatório | Descrição |
|---|---|---|
Authorization | Sim | Bearer {{access_token}} |
Accept | Sim | application/json |
X-Signature | Sim | Assinatura HMAC |
X-Timestamp | Sim | Timestamp da assinatura |
X-Nonce | Sim | Nonce único por requisição |
| Parâmetro | Descrição |
|---|---|
proposalId | ID da proposta concluída |
| Campo | Obrigatório | Descrição |
|---|---|---|
document | Sim | CPF, 11 dígitos sem máscara |
device.os_version_name | Sim | SO do dispositivo |
birth_date, phone, full_name, social_name, email | Não | Repassados quando enviados |
Objeto da PF com id (personId), status, journey e demais campos do cadastro. Endereço, files e conta aparecem após o PATCH.
404 Customer not found: proposta sem titular criado400: document ou device inválidoscurl --request POST \
--url 'https://api-h.nuvende.com.br/api/v2/baas/onboardings/352/natural-persons' \
--header 'Content-Type: application/json' \
--header 'Accept: application/json' \
--header 'Authorization: Bearer {{access_token}}' \
--header 'X-Timestamp: {{timestamp}}' \
--header 'X-Nonce: {{nonce}}' \
--header 'X-Signature: {{signature}}' \
--data '{"document":"11144477735","device":{"os_version_name":"Android 14"}}'
const axios = require("axios");
const data = {
"document": "11144477735",
"device": {
"os_version_name": "Android 14"
}
};
axios({
method: "post",
url: "https://api-h.nuvende.com.br/api/v2/baas/onboardings/352/natural-persons",
headers: {
"Content-Type": "application/json",
Accept: "application/json",
Authorization: "Bearer {{access_token}}",
"X-Timestamp": "{{timestamp}}",
"X-Nonce": "{{nonce}}",
"X-Signature": "{{signature}}",
},
data,
})
.then((response) => console.log(JSON.stringify(response.data)))
.catch((error) => console.log(error.response?.data || error.message));
import json
import requests
url = "https://api-h.nuvende.com.br/api/v2/baas/onboardings/352/natural-persons"
payload = {
"document": "11144477735",
"device": {
"os_version_name": "Android 14"
}
}
headers = {
"Content-Type": "application/json",
"Accept": "application/json",
"Authorization": "Bearer {{access_token}}",
"X-Timestamp": "{{timestamp}}",
"X-Nonce": "{{nonce}}",
"X-Signature": "{{signature}}",
}
response = requests.post(url, headers=headers, data=json.dumps(payload))
print(response.text)
<?php
$curl = curl_init();
$opts = [
CURLOPT_URL => 'https://api-h.nuvende.com.br/api/v2/baas/onboardings/352/natural-persons',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_CUSTOMREQUEST => 'POST',
CURLOPT_POSTFIELDS => '{"document":"11144477735","device":{"os_version_name":"Android 14"}}',
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
'Accept: application/json',
'Authorization: Bearer {{access_token}}',
'X-Timestamp: {{timestamp}}',
'X-Nonce: {{nonce}}',
'X-Signature: {{signature}}',
],
];
curl_setopt_array($curl, $opts);
$response = curl_exec($curl);
curl_close($curl);
echo $response;
{
"id": "268",
"document": "111***77735",
"status": "pending"
}