Sms Gateway Codecanyon Webhook: In-Depth Guide

SMS gateway CodeCanyon webhook — in-depth guide is for buyers evaluating marketplace panels and for teams comparing them to a maintained Android SIM API. CodeCanyon hub · Our webhook overview. Docs: Developer Center.

Devices and send volume. CodeCanyon ≠ us.

CodeCanyon is not SMS Gateway

Envato/CodeCanyon listings are third-party PHP/panels you host. sms-gateway.app is Secuno LLC’s SaaS: Android app + cloud queue + Bearer API. Do not paste our docs into a random script’s support thread as if they were the same product.

If the seller vanished and the webhook secret lives in a shared FTP folder, that is the risk model — not “webhooks are hard.”

Webhook checklist

Marketplace script realities

You own PHP upgrades, TLS certs, and the handset/modem the script drives. Webhook bugs are yours at 2am. Use licensed purchases only — no piracy mirrors.

Maintained SaaS webhooks

{
  "id": "evt_01K2F8QW3N4RXB7M",
  "type": "message.delivered",
  "createdAt": "2026-08-12T14:04:09Z",
  "apiVersion": "2026-08-12",
  "data": {
    "message": {
      "id": 41823,
      "number": "+14155552671",
      "text": "Your verification code is 481920",
      "status": "Delivered",
      "campaignId": 17,
      "deviceId": 3,
      "metadata": { "orderId": "1234" },
      "sentAt": "2026-08-12T14:04:02Z",
      "deliveredAt": "2026-08-12T14:04:09Z"
    }
  }
}

Illustrative shape — confirm live JSON in Developer Center. Register endpoints via the panel/API; verify X-SmsGateway-Signature.

Signatures and dedupe

Reject unsigned bodies. Unique-constrain event ids so retries do not double-apply state. Never mark login from webhook alone without your hash check.

Next steps

If you are still on a CodeCanyon panel, inventory webhook secrets and update channels. If you want a maintained path, canary staff SMS on Free (300 lifetime). Downloads.