On This Page

{#jumplink-list}  
[Markdown](/docs/cybs/en-us/webhooks/implementation/all/rest/webhooks/wh-fg-intro-prepare.md)  
Filter  
FILTER BY TAG

How to Prepare Your System to Support Webhooks {#wh-fg-intro-prepare}
=====================================================================

You must complete these prerequisites before beginning to set up your webhooks subscriptions.

Webhooks Server
---------------

You must set up a server with a URL to receive webhook notifications. You can also set up an additional URL for the health check service. For more information about how `Cybersource` uses your health check URL, see [Webhook Health Check URL and Automatic Revalidation](/docs/cybs/en-us/webhooks/implementation/all/rest/webhooks/wh-fg-optional-intro/wh-fg-subscription-health-check-url.md "").

Security Policy Options
-----------------------

Your system must support the *mutual trust* security policy to authenticate webhook notifications. Mutual trust is a simple authentication scheme that is included in the HTTP protocol. It is often used in conjunction with HTTPS to provide confidentiality through encryption.  
In addition to mutual trust, you can also use the *OAuth* or *OAuth JWT* security policy to authenticate your webhook notifications.

`Business Center` Account and Security Keys
-------------------------------------------

You must have an organization or merchant account (MID) and REST API security keys.  
If you do not have an account, you can sign up for *test* account on the Developer Center:  
[`https://developer.cybersource.com/hello-world/sandbox.html`](https://developer.cybersource.com/hello-world/sandbox.md "")  
During the test account signup, you receive a REST API security key to test the APIs.  
To create new REST API security keys, see the [*Creating and Using Security Keys User Guide*](https://developer.cybersource.com/docs/cybs/en-us/security-keys/user/all/ada/security-keys/keys-about-guide.md "").

Getting Started with the REST API
---------------------------------

To begin implementing webhooks through `Cybersource`, you must set up your system to be REST compliant. `Cybersource` uses the REST architecture for developing web services. REST enables communication between a client and server using HTTP protocols.  
If you have not set up secure communications between your client and server using either a **JSON Web Token** or **HTTP signature**, see the  
[Getting Started with the REST API](https://developer.cybersource.com/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-intro.md "").