member.* events

A subscriber joins by redeeming an access code against a paid plan.

When this fires

A subscriber redeems an access code against a plan with no trial window, gaining access to the project.

That is the only path that emits this event. A card, wallet, or crypto checkout emits subscription.activated and payment.succeeded, but no member.* join event at all. If the redeemed plan carries a trial, member.trial_joined fires instead of this event.

This event is access-code-only. Paid checkouts do not emit it. For a paying audience, use subscription.activated as the join signal.

Caveats

  • The payload does not carry the subscriber's connected accounts. Resolve them with the member endpoint using data.subscriber_id, which embeds identities, one row per connected account with the connector key and the platform's own id.
  • Resource-level grants emit separate member.resource_added events as the dispatcher processes each invite.
  • This event always accompanies subscription.created and access_code.redeemed for the same subscription.

Related events

  • subscription.activated: the paid-checkout join signal.
  • subscription.created: fires alongside on this path.
  • member.trial_joined: trial counterpart.
postWebhookmember.joined

Headers

SB-Signaturestring required

t=<unix seconds>,v1=<hex>: the HMAC-SHA256 of "<t>.<raw body>" under the endpoint's secret. Verify it before acting, and refuse a t more than 300 seconds from now. During a secret rotation a v0= signature under the previous secret may precede v1=.

SB-Event-Idstring required

The event's ULID, bare. The envelope's id is the same ULID prefixed evt_, so strip the prefix before comparing. Deduplicate on it: a retry carries the same id.

SB-Event-Namestring required

The event name, the same as the envelope's type.

Content-Typestring required

Always application/json.

User-Agentstring required

Always Subscriby-Webhooks/1.0.

Payload

idstring required

A ULID unique to the event, prefixed evt_. Every retry carries the same id, so it is the key to deduplicate on.

type'member.joined' required

The event name, always member.joined here.

created_atstring date-time required

When the event was emitted, server time, ISO 8601.

api_versionstring required

The contract version of the payload shape, 2026-05-01 today. A breaking change to a shape ships under a new version.

project_idstring uuid nullable required

The project the event belongs to; null for team-scoped and billing events.

Response

Your endpoint acknowledged the delivery. Any 2xx status within 30 seconds marks it delivered; the response body is ignored.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.