---
title: Webhooks
slug: fourkites-api-reference/webhooks
description: Learn how to integrate FourKites webhooks into your API and receive real-time data. Choose from three authentication methods, define your API endpoint, and subscribe to recommended callbacks for detailed information. Whitelist FourKites' static IP ranges
icon: {"faIcon":"fa-solid fa-folder-open"}
createdAt: 2023-04-14T06:03:47.000Z
---

FourKites offers a suite of callbacks (also referred to as "webhooks") that can deliver real-time data to a subscribed API. Typically, it is best to outline which data points your organization may be interested in consuming first, then select which specific messages may best match those data points.

:::hint{type="info"}
Please note that **FourKites' Standard Webhooks** is a licensed solution.
:::

Would you be interested in acquiring the** Standard Webhooks **license? Request a demo by filling out the below form:

:::Iframe{iframeHeight="0" code="<form id=&#x22;mktoForm_2259&#x22;></form>"}

:::

Each callback acts as an application event for which a customer’s URL is subscribed. When a customer requests to be subscribed to callback events, a real-time JSON payload will be sent in an HTTP POST to the customer endpoint when that event(s) occurs. As such, any customer who wishes to receive real-time events must define an API endpoint which FourKites can store.

:::hint{type="info"}
**Note**: If you have purchased the Network Visibility product and are interested in how to consume events from those loads, please visit the **Network Visibility Callbacks** folder for payload samples, field definitions, and event triggers
:::

# Authentication and Subscriptions

FourKites supports 3 types of authentication on callbacks:

- **Basic**
- **API Key / Auth Header (using keys or secrets inside HTTP headers)**
- **Oauth2 (client\_credentials flow)**

The following information needs to be supplied to FourKites in order to subscribe an API to FourKites callbacks:

| **Field**             | **Description**                                                                                                                                                                 |
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| URL                   | URL of the API listening to FourKites callbacks                                                                                                                                 |
| Callback Message(s)   | Specific messages which you'd like to subscribe to                                                                                                                              |
| Authentication Method | Authentication method used for the callback configuration. Supported options include:<br />• Basic Auth<br />• API Key / Auth Header<br />• Oauth2 (\*see oauth2 section below) |
| Additional Headers    | Any additional headers which may need to be passed in the request                                                                                                               |

:::hint{type="info"}
If using oauth2, FourKites will need to know the token URL, `client_id`, and `client_secret` associated with the oauth2 service. Additionally, the token must be presented in a JSON key with the name `access_token`
:::

# Which Callbacks to Use?

Refer to the below visual for the recommended callbacks to receive the most detail from the FourKites platform. Within [this table](https://docs.fourkites.com/api-reference/callbacks-data-dictionary-table) is a mention of which modes each message corresponds to along with other high-level information. For field-level specifications, please visit each message individually in the sections on the left pane.

![](https://api.archbee.com/api/optimize/2iLZ8zq0u-v-CPzk98WTR/cG2dOG4gcFaZOJ0-ni9PY_ezcom-video-to-converter.gif)

## IP Ranges

FourKites does have a static range of IP addresses which you can whitelist to restrict traffic to your API. If you are interested in obtaining the ranges for both FourKites staging and production, please ask your FourKites Implementation Manager or Customer Success Manager so they may supply the list.

## Responses and Retries

While FourKites does not actively monitor success/failure of HTTP responses from customer endpoints, it is recommended that customers have monitors in place to log the success/failure of requests received from FourKites. If assistance is needed regarding callback questions, please submit a ticket with FourKites support.

In the case of `5XX` code responses (e.g. an external service is unavailable), FourKites will retry the transaction(s) with an exponential back-off:

- 1 minute
- 15 minutes
- 1 hour
- 24 hours

For any `4XX` code responses, retries will not be applied from FourKites.