Get every delivery event at your own endpoint.

{
  "id": "call_abc123",
  "type": "email.delivered",
  "version": "2026-01-18",
  "createdAt": "2024-01-15T10:30:00.000Z",
  "teamId": 123,
  "data": {
    "id": "email_123",
    "status": "DELIVERED",
    "from": "sender@example.com",
    "to": ["recipient@example.com"],
    "subject": "Welcome!",
    "occurredAt": "2024-01-15T10:30:00Z"
  },
  "attempt": 1
}

HMAC-SHA256(secret, "${timestamp}.${rawBody}")

npm install notix-js
# or: yarn add notix-js / pnpm add notix-js / bun add notix-js

import { Notix } from "notix-js";

const notix = new Notix(process.env.NOTIX_API_KEY);
const webhooks = notix.webhooks(process.env.NOTIX_WEBHOOK_SECRET!);

export async function POST(request: Request) {
  try {
    const rawBody = await request.text();
    const event = webhooks.constructEvent(rawBody, {
      headers: request.headers,
    });

    switch (event.type) {
      case "email.delivered":
        console.log("Email delivered to:", event.data.to);
        break;
      case "email.bounced":
        console.log("Email bounced:", event.data.id);
        break;
      case "email.opened":
        console.log("Email opened:", event.data.id);
        break;
    }

    return new Response("ok");
  } catch (error) {
    console.error("Webhook error:", error);
    return new Response((error as Error).message, { status: 400 });
  }
}

import express from "express";
import { Webhooks } from "notix-js";

const webhooks = new Webhooks(process.env.NOTIX_WEBHOOK_SECRET!);

const app = express();

// Important: Use raw body parser for webhook routes
app.post("/webhook", express.raw({ type: "application/json" }), (req, res) => {
  try {
    const event = webhooks.constructEvent(req.body, {
      headers: req.headers,
    });

    switch (event.type) {
      case "email.delivered":
        console.log("Email delivered to:", event.data.to);
        break;
      case "email.bounced":
        console.log("Email bounced:", event.data.id);
        break;
    }

    res.status(200).send("ok");
  } catch (error) {
    console.error("Webhook error:", error);
    res.status(400).send((error as Error).message);
  }
});

app.listen(3000);

const isValid = webhooks.verify(rawBody, { headers: request.headers });

if (!isValid) {
  return new Response("Invalid signature", { status: 401 });
}

import { createHmac, timingSafeEqual } from "crypto";

function verifyWebhook(
  secret: string,
  rawBody: string,
  signature: string,
  timestamp: string,
): boolean {
  const expectedSignature = createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");

  const expected = Buffer.from(`v1=${expectedSignature}`, "utf8");
  const received = Buffer.from(signature, "utf8");

  if (expected.length !== received.length) {
    return false;
  }

  return timingSafeEqual(expected, received);
}

// Usage
const signature = request.headers.get("X-Notix-Signature");
const timestamp = request.headers.get("X-Notix-Timestamp");

const isValid = verifyWebhook(secret, rawBody, signature, timestamp);

{
  "test": true,
  "webhookId": "wh_abc123",
  "sentAt": "2024-01-15T10:30:00.000Z"
}

{
  id: string;              // Email ID
  status: string;          // Email status (e.g., "DELIVERED", "BOUNCED")
  from: string;            // Sender email address
  to: string[];            // Recipient email addresses
  occurredAt: string;      // ISO 8601 timestamp
  subject?: string;        // Email subject
  campaignId?: string;     // Campaign ID (if from a campaign)
  contactId?: string;      // Contact ID (if sent to a contact)
  domainId?: number;       // Domain ID
  templateId?: string;     // Template ID (if using a template)
  metadata?: object;       // Custom metadata you attached to the email
}

{
  // ... base email fields
  bounce: {
    type: "Transient" | "Permanent" | "Undetermined";
    subType: "General" | "NoEmail" | "Suppressed" | "OnAccountSuppressionList"
           | "MailboxFull" | "MessageTooLarge" | "ContentRejected" | "AttachmentRejected";
    message?: string;      // Bounce message from the mail server
  }
}

{
  // ... base email fields
  failed: {
    reason: string; // Failure reason
  }
}

{
  // ... base email fields
  suppression: {
    type: "Bounce" | "Complaint" | "Manual";
    reason: string;        // Why the email was suppressed
    source?: string;       // Source of the suppression
  }
}

{
  // ... base email fields
  open: {
    timestamp: string;     // When the email was opened
    userAgent?: string;    // Browser/client user agent
    ip?: string;           // IP address
    platform?: string;     // Detected platform
  }
}

{
  // ... base email fields
  click: {
    timestamp: string;     // When the link was clicked
    url: string;           // The clicked URL
    userAgent?: string;    // Browser/client user agent
    ip?: string;           // IP address
    platform?: string;     // Detected platform
  }
}

{
  id: string;              // Contact ID
  email: string;           // Contact email address
  contactBookId: string;   // Contact book ID
  subscribed: boolean;     // Subscription status
  properties: object;      // Custom properties
  firstName?: string;      // First name
  lastName?: string;       // Last name
  createdAt: string;       // ISO 8601 timestamp
  updatedAt: string;       // ISO 8601 timestamp
}

{
  "contactId": "cnt_abc123",
  "contactBookId": "cb_abc123",
  "email": "alice@example.com",
  "source": "double_opt_in"
}

{
  "contactId": "cnt_abc123",
  "contactBookId": "cb_abc123",
  "email": "alice@example.com",
  "reason": "UNSUBSCRIBED"
}

{
  "id": "ver_abc123",
  "to": "example.com",
  "expiresAt": "2024-01-15T10:40:00.000Z",
  "risk": {
    "score": 20,
    "level": "MEDIUM",
    "reasons": ["role_account"]
  }
}

{
  "id": "ver_abc123",
  "verifiedAt": "2024-01-15T10:33:00.000Z",
  "attempts": 2
}

{
  "id": "ver_abc123",
  "reason": "max_attempts",
  "attempts": 5
}

{
  "id": "ver_abc123",
  "risk": {
    "score": 70,
    "level": "HIGH",
    "reasons": ["disposable_domain"]
  },
  "refusalCodes": ["disposable_domain"]
}

{
  "id": "ver_abc123",
  "channel": "sms",
  "deliveredAt": "2024-01-15T10:33:05.000Z"
}

{
  "id": "sms_abc123",
  "to": "+234*******5678",
  "status": "sent",
  "segments": 1,
  "occurredAt": "2024-01-15T10:33:00.000Z"
}

{
  "id": "sms_abc123",
  "to": "+234*******5678",
  "status": "delivered",
  "segments": 1,
  "occurredAt": "2024-01-15T10:33:05.000Z"
}

{
  "id": "sms_abc123",
  "to": "+234*******5678",
  "status": "failed",
  "segments": 1,
  "reason": {
    "code": "not_reachable",
    "message": "Recipient number not reachable."
  },
  "occurredAt": "2024-01-15T10:33:05.000Z"
}

{
  "messageId": "inm_8f2k1",
  "conversationId": "cnv_31ad9",
  "inbox": { "id": "ibx_supp", "name": "Support" },
  "from": "Chiamaka Obi <chiamaka@gmail.com>",
  "to": ["acme-support@inbound.usenotix.dev"],
  "cc": [],
  "subject": "Refund for double charge on order 4471",
  "text": "Hello, I was charged twice...",
  "html": "<p>Hello, I was charged twice...</p>",
  "strippedText": "Hello, I was charged twice...",
  "attachments": [
    { "filename": "bank-statement.pdf", "contentType": "application/pdf", "size": 184220, "url": "https://..." }
  ],
  "contactId": "cnt_77ab",
  "inReplyToEmailId": "em_4471receipt",
  "spamVerdict": "PASS",
  "receivedAt": "2026-09-14T09:12:04.000Z"
}

{
  "journeyId": "jrn_abc123",
  "runId": "run_abc123",
  "contactId": "cnt_abc123"
}

{
  "journeyId": "jrn_abc123",
  "runId": "run_abc123",
  "contactId": "cnt_abc123",
  "completedAt": "2024-01-15T10:30:00.000Z"
}

{
  "journeyId": "jrn_abc123",
  "runId": "run_abc123",
  "contactId": "cnt_abc123",
  "exitReason": "UNSUBSCRIBED"
}

{
  "campaignId": "cmp_abc123",
  "total": 4820
}

{
  "campaignId": "cmp_abc123",
  "sent": 4796,
  "failed": 24
}

{
  "kind": "campaign",
  "id": "cmp_abc123",
  "findingIds": ["unsubscribe_missing", "domain_unverified"]
}

{
  id: number;              // Domain ID
  name: string;            // Domain name (e.g., "example.com")
  status: string;          // Domain status
  region: string;          // AWS region
  createdAt: string;       // ISO 8601 timestamp
  updatedAt: string;       // ISO 8601 timestamp
  clickTracking: boolean;  // Click tracking enabled
  openTracking: boolean;   // Open tracking enabled
  subdomain?: string;      // Subdomain for tracking
  dkimStatus?: string;     // DKIM verification status
  spfDetails?: string;     // SPF record details
  dmarcAdded?: boolean;    // DMARC record added
}