Skip to main content

​
Prepare access and your callback

Obtain an integration access token from the Nimbo API host using Authentication. Webhook management uses a separate host, supplied by Nimbo as NIMBO_WEBHOOKS_BASE_URL. Do not send the OAuth request to that host just because the webhook reference also lists /oauth/token. Prepare an HTTPS callback and confirm the topic prefix and events enabled for your organization. Keep the shared secret private. The callback verification algorithm, retry schedule, and delivery-order guarantees need confirmation with Nimbo before relying on them in production.

​
Register a subscription

Send POST /webhooks to the webhook-management host. This JSON uses placeholders; replace every placeholder and the example callback URL in your own environment.
The subscription request carries nimbo_access_token in its body. Read operations document bearer authentication; check each operation instead of assuming one authentication placement for the entire service.

​
Choose an event

These names appear in the integration guide. Confirm availability and your assigned topic prefix before subscribing. A suffix alone is not a complete topic. For a tool such as n8n or Zapier, use its HTTPS webhook receiver as the callback and check that your workflow can verify callbacks and handle repeated deliveries. Confirm the event and payload before mapping it to an action. The table does not document a dedicated appointment-cancellation event. Confirm how cancellations are represented before using events to stop reminders. Do not normalize these spellings: consultation-schedule-create and prescription-cancel differ from the past-tense names used by other events.

​
Inspect delivery and remove subscriptions

Use GET /webhooks to list subscriptions and retain the subscription ID. Use GET /events to inspect emitted events and their delivery logs, including response codes and retry-related fields. This endpoint is not a catalog of all available event names. Inspect payloads for the specific event you subscribe to. The integration guide shows both wrapped value objects and top-level identifier objects; do not assume a universal callback envelope or treat the event-log response as the callback contract. Verify callback authentication before accepting a payload, and handle repeated deliveries without duplicating work. Remove a subscription with DELETE /webhooks/{webhook_id}, using the documented request body containing nimbo_access_token. Do not log that body or callback secrets while diagnosing a delivery failure. See Webhooks in the Browse endpoints and the webhook specification.