

Note that once you set your webhook the 1-on-1 conversation with your account will become available. Once a set_webhook request is sent Viber will send a callback to the webhook to check its availability and return a response to the user. This action defines the account’s webhook and the type of events the account wants to be notified about. For security reasons only URLs with valid and official SSL certificate from a trusted CA will be allowed. Setting the webhook will be done by calling the set_webhook API with a valid & certified URL. This webhook will be used for receiving callbacks and user messages from Viber. Once you have your token you will be able to set your account’s webhook. Note: Failing to send the authentication token in the header will result in an error with the missing_auth_token message. The authentication token is generated upon account creation and can be viewed by the account’s admins in the “edit info” screen of their Public Account/ bot or on the Viber Admin Panel.

Each API request must include an HTTP Header called X-Viber-Auth-Token containing the account’s authentication token. It is used to authenticate request in the Viber API and to prevent unauthorized persons from sending requests on behalf of a Public Account/ bot. The authentication token (also known as application key) is a unique and secret account identifier. All API requests and callbacks mentioned in the diagram will be explained later in this document. The following diagram describes the flow of sending and receiving messages by the account.

Public Accounts/ bots are currently supported on iOS and Android devices running Viber version 6.5 and above and on desktop from version 6.5.3.
