Incoming Events

Introduction

You can receive your incoming events for channels supported by the CM.com Business Messaging API in your own systems, by registering a webhook in the Channels-app. After registering an HTTPS web address you will start receiving the incoming events.

Note These events do not include the receiving of messages; please refer to the following docs for that: Incoming messages.

Note In the case of offboarding, the registered webhook(s) are removed and any incoming events will therefore not be forwarded to the webhook(s) any longer.

Receiving events

In order to receive the incoming events, you need to build a web service where our systems can deliver the events. This is called a webhook. Via the webhook, you will be notified by CM.com of the new event content and metadata using a POST call to your registered web service in the JSON content format. To indicate you have received the events you need to reply with an HTTP 200 OK status code. You do not need to send any content back in the reply. You can receive incoming events from Instagram using these webhooks.

If your web service doesn’t return a 2xx status code or the request times out, we’ll retry sending the event. More information about retries can be found on the incoming events page.

Contents format

Webhook calls are made using HTTP POST with the Content-Type application/json and are in the UTF-8 character set. You will receive a JSON object like this on the registered URLs:

From:

To:

📘

Note

Not all channels support the same events. For details and documentation on an event type, we ask you to refer to documentation of the specific channel.

Example event

{
    "reference": "121c38a5-cf77-424a-9ea9-d6c044a845f8",
    "messageContext": "msg$abeade67-de9c-45ba-bcfd-abcae1d1879f",
    "from": {
        "number": "0031612345678"
    },
    "to": {
        "number": "003222556611"
    },
    "event": {
        "type": "SuggestionClick",
        "custom": {
          "postbackdata": "btn$123456",
          "label": "View on our website"
    }
    },
    "groupings": [
        "Marketing",
        "Campaign_Party_2025",
        "Target_Group_A"
    ],
    "timeUtc": "2025-09-03T08:00:05",
    "channel": "RCS"
}

Whitelisting

If you want your systems to be certain that requests are sent from CM.com's systems and are not initiated by a spoofing third party, you can limit the reception of events to those originating from our IP ranges.

The IP ranges of the services that send events and could be used for our outbound traffic are:

• 31.169.56.0/21
• 85.119.48.0/21
• 188.94.184.0/22

Note You should whitelist all these IP ranges. We cannot guarantee an exact IP address of specific services within these ranges as the servers can change IP within this range at any time.