subscription.created

This event does not fire for paid checkouts. A card, wallet, or crypto purchase emits subscription.activated instead. If you are building access control for a paying audience, subscribe to both.

When this fires

Exactly two paths emit this event:

Access-code redemption — a subscriber redeems a code against a plan.
Cardless trial start — a subscriber begins a trial that took no payment method.

Both are zero-payment acquisitions. Every paid acquisition — every payment provider, both recurring subscriptions and one-time passes — emits subscription.activated instead, and never emits subscription.created.

Required ability

project-subscription:view — token must carry this at mint time to subscribe an endpoint to this event.

Payload

The data keys differ by path. Absent keys are omitted entirely, not sent as null.

Access-code redemption

{
  "id": "evt_01HX...",
  "type": "subscription.created",
  "created_at": "2026-05-18T10:05:00Z",
  "api_version": "2026-05-01",
  "project_id": "7f3d1c92-8b45-4e6a-9d21-5c8e0a4b6f13",
  "data": {
    "subscription_id": "5b7e2d40-1a86-4c39-97f2-e83d0b16c5a4",
    "project_id": "7f3d1c92-8b45-4e6a-9d21-5c8e0a4b6f13",
    "plan_id": "c4e82f16-93a7-4d5b-b81c-6e0f27a94d3b",
    "subscriber_id": "2a91c4e7-6f38-4b52-8e0d-9c1a7b3f5d80",
    "access_code": "SLATE-SUNDAY-4F2A9"
  }
}

Cardless trial start

{
  "id": "evt_01HX...",
  "type": "subscription.created",
  "created_at": "2026-05-18T10:05:00Z",
  "api_version": "2026-05-01",
  "project_id": "7f3d1c92-8b45-4e6a-9d21-5c8e0a4b6f13",
  "data": {
    "subscription_id": "5b7e2d40-1a86-4c39-97f2-e83d0b16c5a4",
    "plan_id": "c4e82f16-93a7-4d5b-b81c-6e0f27a94d3b",
    "subscriber_id": "2a91c4e7-6f38-4b52-8e0d-9c1a7b3f5d80",
    "trial_ends_at": "2026-05-25T10:05:00Z"
  }
}

Field reference

Field	Type	Notes
`id`	string ULID	Unique event id, prefixed `evt_`. Use for idempotent processing.
`type`	string	Always `subscription.created` for this event.
`created_at`	ISO 8601 timestamp	Server-side emission time.
`api_version`	string	Webhook API contract version.
`project_id`	string UUID	Project this event belongs to.
`data.subscription_id`	string UUID	Subscription identifier.
`data.project_id`	string UUID	Access-code path only. Duplicates the envelope `project_id`.
`data.plan_id`	string UUID	Plan the subscription is on.
`data.subscriber_id`	string UUID	The subscriber's project-scoped user id.
`data.trial_ends_at`	ISO 8601 timestamp	Cardless-trial path only. Absent on the access-code path.
`data.access_code`	string	Access-code path only. The full redeemed code, not masked. Absent on the trial path.

access_code carries the complete code. It is already consumed and cannot be redeemed again, but treat it as you would any other customer identifier and avoid logging it into systems you do not control.

Caveats

Do not treat this as the universal "a subscription exists" signal. For paid projects it never fires. The reliable pattern is to subscribe to both subscription.created and subscription.activated and de-duplicate on data.subscription_id.
The access-code path also emits access_code.redeemed and either member.joined or member.trial_joined for the same subscription.
The cardless-trial path also emits subscription.trial_started and member.trial_joined.
The POST /v1/webhook-endpoints/{endpoint}/test endpoint sends a synthetic subscription.created payload regardless of your project's payment configuration. A successful test does not prove this event will fire in production.

subscription.activated — the paid-checkout equivalent.
access_code.redeemed — fires alongside on the access-code path.
subscription.trial_started — fires alongside on the cardless-trial path.
Subscription events overview — back to family overview.