Manage your event subscriptions

You can create, view and manage all aspects of your event subscriptions using either the Infobip web interface (opens in a new tab) or the Subscriptions API (opens in a new tab). Subscriptions define which events trigger notifications and how those notifications are delivered.

Each subscription must include:

A selected category and a set of events
A notification profile with a webhook URL
(Optional) Filters such as application ID, entity ID, or user
(Optional) Authentication settings and a certificate

For a comprehensive list of available events per category, refer to Event subscriptions.

Create and manage subscriptions

Use either our web interface or the API to create, manage, or delete a subscription.

Create a subscription

To create a subscription over our web interface:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Subscriptions tab.
- This tab display all existing subscriptions created through the web interface or API. You can filter the list using the Search bar.
In the Subscriptions tab, select Create subscription.
On the Choose category screen, select a category. Categories are grouped as follows:
- Channels: Email, Facebook, Kakao - Alim, Kakao - Chingu, LINE, Mobile push, RCS, SMS, MMS, Viber, WhatsApp, Zalo, Voice and WebRTC, Open Channel
- Numbers and senders: Registration, Mobile identity, Number lookup
- Tools: Blocklist, Customer engagement
Enter a subscription name and subscription ID. Then, select Next.
- For subscription ID, use letters, numbers, dashes, or underscores only. No spaces or special symbols.
On the Select events screen, choose the events you want to subscribe to and select Next.

NOTE
If a selected event already has an inbound configuration defined at the number level, it will not follow your new subscription automatically. To ensure the subscription applies, update the number-level configuration and set Follow subscription as the forwarding action.
- The available events depend on the selected category. See Event subscriptions for the full reference.
On the Set filter screen (optional), filter traffic by:
- Users: Filter events generated for specific users.
- Entity: Entity ID representing a unique object, such as customer or department within your organization.
- Application: Application ID representing a specific use case or environment on the Infobip platform.
- Resources: A sender name, number, domain, or other ID used for sending messages.
NOTE
You can use on or more of these filters together. A subscription will trigger only if all filter conditions match the event.
- If no filters are applied, the subscription will apply to all events in the selected category.
- Once you are ready, select Next.
Select an existing notification profile or create a new one:
- If creating a new one, enter its name and webhook URL.
- Optionally, add response body regex or response regex to validate HTTP response body and headers.
- You can also create a notification profile separately, on the Notification profile tab.
IMPORTANT
A subscription must have a corresponding notification profile to function correctly.
(Optional) Under Security settings, select an existing authentication setting or create a new one.
- Choose Basic, HMAC, or 0Auth.
- Provide the required credentials or settings for the selected type.
(Optional) Apply an existing certificate, if needed.
(Optional) Configure advanced settings:
- Max bucket size (1–2000): Maximum messages per request
- Window size (20–10000): Concurrent connections
- Connect timeout (300–30000 ms): Connection timeout
- Read timeout (1000–90000 ms): Read timeout
- Enabled SSL protocols: TLS v1.2, TLS v1.3
- Headers: Key-value pairs sent as headers
- Rate limit (1–5000): Requests per second
Select Next to view the summary of your subscription. Then, select Save.
- Your new subscriptions is now created.

To create a subscription using our Subscriptions API (opens in a new tab), use the following API request:

API	Information
Create new subscription (opens in a new tab)	Creates a new subscription. You can provide an existing profile ID or submit a full definition of the profile and authentication settings if you wish to create new ones.

Manage a subscription

To view or modify a subscription over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Subscriptions tab and find the subscription using the Search bar.
Select the three-dot menu next to the subscription and select Edit.
- To view a summary of your subscription, select View.
Make the necessary changes.
- You can change events, filters, authentication setting, notification profiles.
- You cannot change the subscription's category or channel.
Select Save.

To view or modify a subscription using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Get subscriptions (opens in a new tab)	Retrieves a list of all subscriptions for the specified channel with pagination. By default, the results are sorted in descending order by the creation date.
Get single subscription (opens in a new tab)	Retrieves a subscription specified by its ID.
Update subscription (opens in a new tab)	Updates a subscription. You can modify its properties and provide a new profile ID to change the associated profile.

Delete a subscription

If you want to delete a subscription, be aware that this action may impact other configured settings. It is important to review the Subscription hierarchy to understand the deletion rules. Be cautious, as deleting a subscription could affect other components tied to it.

To delete a subscription over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Subscriptions tab and find the subscription using the Search bar.
Select the three-dot menu next to the subscription and select Delete.

To delete a subscription using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Delete subscription (opens in a new tab)	Deletes a subscription specified by its ID.

Create and manage notification profiles

A notification profile defines where notifications are sent and how they are delivered. Every subscription must include a valid notification profile to function correctly. You can create, update, or delete notification profiles using the Infobip web interface or the Subscriptions API. A profile typically contains a webhook URL and may include advanced delivery and authentication settings.

Depending on your use case, you may create a notification profile when setting up a new subscription. In this case, the notification profile will appear in the Notifications tab of the Subscriptions Management area once the subscription is created.

You can create a standalone notification profile for scenarios where you want to use a single notification profile across multiple subscriptions.

Create a notification profile

To create a notification over our web interface:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Notification profiles tab.
Select Create notification profile.
Enter the profile info:
- Notification profile name: Use letters, dashes, or underscores. No spacings or special symbols allowed.
- Webhook URL: The destination URL that will receive the event notifications.
(Optional) Add expert parameters:
- Response body regex: Text pattern that must appear in the response body
- Response regex: Expected HTTP status codes
(Optional) Under Security settings, select an existing authentication setting or create a new one.
- Choose Basic, HMAC, or 0Auth.
- Provide the required credentials or settings for the selected type.
NOTE
We recommend using at least basic authentication to protect your webhook endpoint. Refer to the Create authentication settings section for more information.
(Optional) Apply an existing certificate, if needed.
(Optional) Configure advanced settings:
- Max bucket size (1–2000): Maximum messages per request
- Window size (20–10000): Concurrent connections
- Connect timeout (300–30000 ms): Connection timeout
- Read timeout (1000–90000 ms): Read timeout
- Enabled SSL protocols: TLS v1.2, TLS v1.3
- Headers: Key-value pairs sent as headers
- Rate limit (1–5000): Requests per second
Select Save to save your notification profile.

To create a notification profile using our Subscriptions API (opens in a new tab), use the following API request:

API	Information
Create new notification profile (opens in a new tab)	Creates a new notification profile. You can provide an existing security settings ID, or submit a full definition if you wish to create a new one.

Manage a notification profile

To view a summary of or modify a notification profile over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Notifications profile tab and find the subscription using the Search bar.
Select the three-dot menu next to the authentication settings and select Edit.
- To see a summary of your authentication settings, select View.
Make the necessary changes.
Select Update.

To modify or view authentication settings using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Get single notification profile (opens in a new tab)	Retrieves a notification profile specified by its ID.
Get notification profiles (opens in a new tab)	Retrieves a list of all notification profiles for your account with pagination.
Update notification profile (opens in a new tab)	Updates the notification profile. You can modify its properties and provide an ID for the security settings if you wish to update them.

Delete a notification profile

If you plan to delete a notification profile, be aware that this action may impact other configured settings. It is important to review the Subscription hierarchy to understand the deletion rules. Be cautious, as deleting a notification profile could affect other components tied to it.

To delete a subscription over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Notification profile tab and find the subscription using the Search bar.
Select the three-dot menu next to the subscription and select Delete.

To delete a subscription using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Delete notification profile (opens in a new tab)	Deletes a notification profile specified by its ID.

Create and manage authentication settings

Authentication settings define how Infobip authenticates when sending notifications to your webhook endpoint. You can use basic authentication, HMAC signing, or 0Auth, depending on your system requirements.

You can create, reuse, or delete authentication settings using Infobip web interface or the Subscription API. Authentication settings are applied through notification profiles.

Depending on your use case, you may choose to create an authentication setting when setting up a new notification profile. In this case, the authentication setting will appear in the Authentication settings tab of the Subscriptions Management area once the authentication setting is created.

For scenarios where you want to use a single authentication setting across multiple notification profiles, you can create a standalone authentication setting.

NOTE

A notification profile must include either no authentication, or a valid authentication setting.

Create authentication settings

To create authentication settings over our web interface:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Authentication settings tab.
Select Create authentication settings.
Enter the security settings name:
- Use letters, dashes, or underscores. No spacings or special symbols allowed.
Select an authentication type:
- Basic: Enter username and password.
- HMAC: Provide the secret key used to compute the HMAC signature and the HMAC algorithm.
- 0Auth: Add the token URL to retrieve the access token and grant type (a method to retrieve the access token). Optionally, add the client ID, client secret, client scope, and resource. You can also add custom headers as required by your system.
Select Save to save your authentication settings.

To create authentication settings using our Subscriptions API (opens in a new tab), use the following API request:

API	Information
Create security settings (opens in a new tab)	Creates new security settings.

Manage authentication settings

To view a summary of or modify notification settings over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Authentication settings tab and find the settings using the Search bar.
Select the three-dot menu next to the subscription and select Edit.
- To see a summary of your notification profile, select View.
Make the necessary changes.
Select Update.

To modify or view a notification profile using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Get single security setting (opens in a new tab)	Retrieves a security setting specified by its ID.
Get security settings (opens in a new tab)	Retrieves a list of all security settings for your account with pagination.
Update security setting (opens in a new tab)	Updates the security setting.

Delete authentication settings

If you plan to delete the authentication settings, be aware that this action may impact other configured settings. It is important to review the Subscription hierarchy to understand the deletion rules. Be cautious, as deleting an authentication setting could affect other components tied to it.

To delete authentication settings over the web interface, follow the steps below:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Authentication settings tab and find the subscription using the Search bar.
Select the three-dot menu next to the authentication settings and select Delete.

To delete a subscription using the Subscriptions API (opens in a new tab), use the following API requests:

API	Information
Delete security settings (opens in a new tab)	Deletes a security setting specified by its ID.

Create and manage certificates

Certificates allow you to secure webhook communication through Mutual Transport Layer Security (mTLS). When enabled, both Infobip and your system authenticate each other using digital certificates. This ensures that event notifications are exchanged only with trusted endpoints.

Mutual TLS (mTLS) allows both parties to authenticate each other during the initial SSL/TLS handshake. In standard TLS, only the client authenticates the server by verifying the server's certificate, but the server does not verify the client. This means the server trusts any client that connects, even though additional authentication mechanisms like username/password may be in place. With mTLS, both the server and the client exchange certificates, allowing each to verify the other's authenticity.

cpaasx-subscriptions-certificates-tls-mtls

In a typical subscription, Infobip sends event notifications to your webhook URL using standard HTTPS. When mTLS is enabled:

Infobip acts as the client.
Your system acts as the server.
Your system validates Infobip's certificate, and Infobip validates yours.

To do this, you must upload your client certificate to Infobip and attach it to a notification profile.

Certificates are attached to notification profiles and can be managed through the Subscriptions Management interface or the Subscriptions API (opens in a new tab).

NOTE

mTLS operates at the connection level between Infobip and your webhook endpoint. This is separate from application-level authentication such as basic authentication, HMAC, or OAuth.

Create a certificate

To create a certificate over our web interface:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Certificates tab.
Select Create certificate.
Enter the certificate info.
- Enter the certificate name. Use letters, numbers, dashes, or underscores. No spacings or special symbols.
- Paste in the certificate content.
- Add your passphrase.
Select Save to save your certificate.

To upload a certificate using our Subscriptions API (opens in a new tab), use the following API request:

API	Information
Upload certificate (opens in a new tab)	Uploads the certificate.

Once the certificate has synced with the Infobip platform (you can verify this using the Get certificate status (opens in a new tab) API request), apply it to a subscription notification profile where a webhook is configured.

Any events sent to that webhook will now use the uploaded certificate to establish the mTLS connection.

Manage and delete certificates

To view certificates on our web interface:

Log in to the Infobip web interface (opens in a new tab).
Go to Developer Tools > Subscriptions Management.
Open the Certificates tab.
- You will see a list of all created or uploaded certificates.
To delete a certificate, select the three-dot menu next to the certificate and then select Delete.

To manage, view or delete certificates using the Subscriptions API (opens in a new tab), use the following API requests:

API	Request
Get filtered certificate details page (opens in a new tab)	Returns a page containing certificate details based on filtering conditions.
Get certificate details by identifier (opens in a new tab)	Returns certificate details by certificate ID.
Get filtered certificates statuses page (opens in a new tab)	Returns a page containing certificate statuses based on filtering conditions.
Get certificate status by identifier (opens in a new tab)	Returns the status of a certificate by its ID.
Test connection to a webhook (opens in a new tab)	Performs a connectivity check to the provided webhook using the given certificate.
Delete certificate (opens in a new tab)	Deletes a single certificate.

NOTE

Be careful when deleting certificates. You cannot delete a certificate that is linked to a notification profile, so ensure that you update the notification profile before proceeding with deletion.

What are subscriptions Configure your inbound messages