API & WEBHOOKS
Webhooks and an API for your event registration data
Key features
Fifteen events to subscribe to
Registrations, cancellations, check-ins, orders, refunds, invoices, speaker decisions, and event updates. Subscribe each webhook to only the events it needs, for every event you run or just the ones you pick.
Check-ins as they happen
A check-in webhook carries who arrived and at which check-in point. It is the one signal your CRM cannot get anywhere else — not who registered, but who was actually in the room.
Signed, with a timestamp
Every delivery carries an HMAC-SHA256 signature over the timestamp and the body, so your endpoint can reject forged requests and refuse a captured delivery that is replayed later.
Retries and a delivery log
A failed delivery is retried automatically, and every attempt is logged with the request, the response, and how long it took. Resend any delivery from the log once your endpoint is fixed.
Test before live traffic
Send a sample payload for any event type before a single real registration exists, and see exactly what reached your endpoint. Test sends never count against the webhook's health.
An API that respects permissions
Read an event's attendees and orders with a signed API key. A key never sees more than the person who created it: masked emails and phones stay masked, and check-in barcodes are withheld by default.
How it works
- 1
Add an endpoint
Paste the URL your CRM or automation platform gives you, and choose which events it receives.
- 2
Send a test
Fire a sample payload at the endpoint and check what arrived before any real attendee does.
- 3
Go live
Real events flow as they happen; failures retry on their own and show up in the log.
Frequently asked questions
Yes, through webhooks. Point a webhook at your CRM's inbound endpoint, or at an automation platform that accepts webhooks, and each registration, payment, and check-in arrives as it happens. There are no built-in one-click CRM connectors: webhooks are how data leaves BagEvent, and they work with anything that can receive an HTTPS request.
Fifteen: attendee.registered, attendee.updated, attendee.cancelled, attendee.checked_in; order.created, order.paid, order.refunded, order.cancelled; invoice.issued, invoice.voided; speaker.submitted, speaker.accepted, speaker.declined; event.published and event.updated. Each webhook subscribes to the ones it needs.
Each delivery is signed with HMAC-SHA256 using a secret shown once when you create the webhook. The signature covers a timestamp as well as the body, so your endpoint can check both that the request is genuine and that it is recent — a delivery captured and resent later fails the check.
Each event is tried up to three times, 10 seconds and then 60 seconds apart. If a webhook fails ten times in a row it is paused and marked as erroring, so it stops sending to an endpoint that is not there. Resume it once the endpoint is fixed, and resend any missed delivery from the log.
Today it reads: the attendees and the orders for an event, authenticated with an API key and a signed request. It does not create registrations or change orders. Most integrations use webhooks to receive changes as they happen and the API to backfill or reconcile.
Business and Enterprise. Within an organisation, the person setting them up also needs the API and webhooks permission, because an API key can read attendee data.
Field guides
- How do you turn an enterprise offline event into a measurable revenue system?Four breaks that kill event ROI, three enterprise event types with different scorecards, and a before / during / after operating model marketers can defend.
- What does GDPR actually require of an event organiser?You are the controller; your platform is the processor. The eight clauses a DPA must contain, why a dietary field is special-category data, and the deadlines.
0% platform fee on every plan — from $99 a month billed annually, with a 14-day free trial, no credit card, fair use on paid tickets (50 registrations / $500).
See pricingReady to run your next event?
Get started in minutes — or try the live demo to see what your attendees get.
- No credit card required
- GDPR-ready
- Multi-currency