Webhooks

A webhook sends a subscription event to a URL you choose. When the event happens, such as a new or paused subscription, Subrise posts the subscription's details to that URL. Use webhooks to keep your own systems, such as a CRM or a warehouse tool, in step with Subrise.

These are Subrise webhooks. They are separate from Shopify's own webhooks.

Create a webhook

1. Go to Settings > Webhooks.
2. Click Create webhook.
3. In Event, choose the event to send.
4. In URL, enter your endpoint. It must be a public https:// address.
5. Click Add webhook.

The webhook appears in Your webhooks with its event and callback URL. To remove it, click the delete button on its row.

Each event has one URL. To send an event to a new URL, remove its webhook and create it again.

If your plan doesn't include webhooks, the page shows Webhooks aren't on your plan and an upgrade button.

Events

Payload

Subrise sends a POST request with a JSON body. Every event has the same body: the subscription as it is after the event.

The body doesn't name the event. The request headers do:

You can also give each event its own URL, such as https://example.com/subrise/paused.

{
  "shop": "your-store.myshopify.com",
  "id": "28845637871",
  "email": "jane@example.com",
  "customerId": "7212345678901",
  "customerPhone": "+15555550123",
  "totalPrice": 39.9,
  "totalDiscount": 0,
  "totalShipping": 0,
  "billingFirstName": "Jane",
  "billingLastName": "Doe",
  "billingAddress1": "1 Main St",
  "billingCity": "Austin",
  "billingState": "Texas",
  "billingZip": "78701",
  "billingCountry": "United States",
  "billingProvinceCode": "TX",
  "shippingFirstName": "Jane",
  "shippingLastName": "Doe",
  "shippingAddress1": "1 Main St",
  "shippingAddress2": "",
  "shippingCity": "Austin",
  "shippingState": "Texas",
  "shippingZip": "78701",
  "shippingCountry": "United States",
  "shippingTelephone": "+15555550123",
  "shippingProvinceCode": "TX",
  "nextBillingDate": "2026-11-18T14:00:00.000Z",
  "originOrder": { "id": "gid://shopify/Order/6123456789012", "legacyResourceId": "6123456789012", "name": "#1042" },
  "createdAt": "2026-08-18T13:57:02.000Z",
  "isPrepaid": false,
  "lastOrderDate": "2026-10-18T14:00:05.000Z",
  "status": "ACTIVE",
  "paymentMaskedNumber": "•••• •••• •••• 4242",
  "note": "",
  "customAttributes": [],
  "currencyCode": "USD",
  "frequency": "Charges 1 times a month",
  "remainingOrders": "Recurring",
  "lines": [
    {
      "productId": "gid://shopify/Product/8107112694039",
      "variantId": "gid://shopify/ProductVariant/44612345678901",
      "productTitle": "Coffee",
      "variantTitle": "1lb",
      "fullTitle": "Coffee - 1lb",
      "image": "https://cdn.shopify.com/s/files/coffee.jpg",
      "productHandle": "coffee",
      "quantity": 2,
      "sku": "COF-1LB",
      "price": "19.95",
      "discountedPrice": "17.96",
      "customAttributes": [],
      "requiresShipping": true
    }
  ],
  "addons": []
}

Fields

Respond and retry

Answer with any 2xx status as soon as you receive the request, then do your own work. If your server returns another status or doesn't answer within 15 seconds, Subrise tries again later, waiting longer each time, up to 12 attempts in all.

Because of retries, the same event can arrive more than once. Make your handler safe to run twice: skip a Subrise-Event-Id you've already handled.

Secure your endpoint

Subrise doesn't sign webhook requests with a secret you can check. To make sure a request came from your Subrise webhook:

• Put a long random token in the URL, such as https://example.com/subrise/paused/8f3c9e1a..., and reject requests without it.
• Check that shop is your store's domain.
• Treat the body as a notification. Before you act on something important, read the current state from the Developer API.

The payload holds customer names, emails, phone numbers and addresses. Store it as carefully as you store your other customer data.