
For security reasons only URLs with valid and official SSL certificate from a trusted CA will be allowed. Setting the webhook will be done by calling the set_webhook API with a valid & certified URL. This webhook will be used for receiving callbacks and user messages from Viber. Once you have your token you will be able to set your account’s webhook. Note: Failing to send the authentication token in the header will result in an error with the missing_auth_token message. The authentication token is generated upon account creation and can be viewed by the account’s admins in the “edit info” screen of their Public Account/ bot or on the Viber Admin Panel. Each API request must include an HTTP Header called X-Viber-Auth-Token containing the account’s authentication token. It is used to authenticate request in the Viber API and to prevent unauthorized persons from sending requests on behalf of a Public Account/ bot. The authentication token (also known as application key) is a unique and secret account identifier.

All API requests and callbacks mentioned in the diagram will be explained later in this document. The following diagram describes the flow of sending and receiving messages by the account. Public Accounts/ bots are currently supported on iOS and Android devices running Viber version 6.5 and above and on desktop from version 6.5.3. Setup account webhook – this needs to be done once during the account setup process to define your webhook and the type of responses you would like to receive.Each request posted to Viber by the account will need to contain the token. Once your account is created your authentication token will appear in the account’s “edit info” screen (for admins only). Account authentication token - unique account identifier used to validate your account in all API requests.

