subscription.* events

A paid subscription is acquired. Fires once, at first activation.

When this fires

On the first successful payment for a subscription, across every payment provider: Stripe, PayPal, Paystack, Razorpay, Skrill, CeyPay, and CoinPayments. It covers both recurring subscriptions and one-time (non-recurring) passes.

It fires once per subscription, at acquisition. It is not a general "became active" signal:

TransitionEvent actually emitted
First paid checkoutsubscription.activated
Recurring renewal chargesubscription.renewed
Paused → resumedsubscription.unpaused
Cancelled → reinstated before ends_atsubscription.reactivated
Past-due → collectedsubscription.renewed
Trial → payingmember.converted
Access code / cardless trialsubscription.created

A Stripe subscription that begins in a trial still emits subscription.activated at acquisition, because the provider creates the subscription at that moment. The later trial-to-paid transition emits member.converted only.

This is the paid-acquisition event. If you only subscribe to one subscription event for a paying audience, subscribe to this one, not subscription.created, which never fires for paid checkouts.

data.provider is never access_code on this event; code redemptions emit subscription.created instead.

Caveats

  • Once per subscription. Stripe and PayPal de-duplicate with a persistent guard key; the remaining providers emit only on the non-renewal branch of their payment handler. Renewals never re-emit it.
  • To capture every acquisition path (paid, comped code, and cardless trial) subscribe to both subscription.activated and subscription.created, then de-duplicate on data.subscription_id.
  • Paid acquisitions do not emit member.joined. That event is access-code-only. Use subscription.activated as the paid-audience join signal.
  • payment.succeeded fires for the same charge and carries the amount, currency, and external payment id, which this event does not.
  • The POST /v1/webhook-endpoints/{endpoint}/test endpoint sends a synthetic subscription.created payload, never subscription.activated. Testing an endpoint does not exercise this event.

Related events

  • subscription.created: the zero-payment acquisition equivalent.
  • payment.succeeded: the charge behind this activation.
  • subscription.renewed: every subsequent cycle.
  • member.converted: trial-to-paying transition.
postWebhooksubscription.activated

Headers

SB-Signaturestring required

t=<unix seconds>,v1=<hex>: the HMAC-SHA256 of "<t>.<raw body>" under the endpoint's secret. Verify it before acting, and refuse a t more than 300 seconds from now. During a secret rotation a v0= signature under the previous secret may precede v1=.

SB-Event-Idstring required

The event's ULID, bare. The envelope's id is the same ULID prefixed evt_, so strip the prefix before comparing. Deduplicate on it: a retry carries the same id.

SB-Event-Namestring required

The event name, the same as the envelope's type.

Content-Typestring required

Always application/json.

User-Agentstring required

Always Subscriby-Webhooks/1.0.

Payload

idstring required

A ULID unique to the event, prefixed evt_. Every retry carries the same id, so it is the key to deduplicate on.

type'subscription.activated' required

The event name, always subscription.activated here.

created_atstring date-time required

When the event was emitted, server time, ISO 8601.

api_versionstring required

The contract version of the payload shape, 2026-05-01 today. A breaking change to a shape ships under a new version.

project_idstring uuid nullable required

The project the event belongs to; null for team-scoped and billing events.

Response

Your endpoint acknowledged the delivery. Any 2xx status within 30 seconds marks it delivered; the response body is ignored.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.