Custom Commands

Last Edit: Jan 14 2021
This is an old version of the webhooks documentation. Please see Webhooks Overview page


By using Custom Commands, you can receive all messages sent using a specific slash command, eg. /ticket, in your application. When configured, every slash command message happening in a Stream Chat application will propagate to an endpoint via an HTTP POST request.

const message = {
    text: '/ticket suspicious transaction with id 1234'
const response = await channel.sendMessage(message);

Setting up your Custom Command consists of the following steps:

  1. Registering your Custom Command

  2. Configure a Channel Type

  3. Configuring a Custom Action Handler URL

  4. Implement a handler for your Custom Command

Registering Custom Commands

The API provides methods to create, list, get, update, and delete Custom Command definitions. These determine which commands are allowed to be used and how they're presented to the user by providing a description of the command.

Command Fields

Name Type Description Default Optional
name string name of the command -
description string description, shown in commands auto-completion -
args string arguments help text, shown in commands auto-completion -
set string set name used for grouping commands -

Creating a Command

await client.createCommand({
	name: "ticket",
	description: "Create a support ticket",
	args: "[description]",
	set: "support_commands_set",

Please note that applications have a hard limit of 50 custom commands. If you need more than this please have a look at the Multi-tenant & Teams section.

List Commands

You can retrieve the list of all custom commands defined for your application.

await client.listCommands();

Get a Command

You can retrieve a custom command definition.

await client.getCommand("ticket");

Edit a Command

Custom command description, args & set can be changed. Only the fields that must change need to be provided, fields that are not provided to this API will remain unchanged.

await client.updateCommand("ticket", {
	description: 'Create customer support tickets',

Remove a Command

You can remove a custom command definition.

await client.deleteCommand("ticket");
You cannot delete a custom command if there are any active channel configurations referencing it explicitly.

Configure a Channel Type

In order to be able to use this command in a channel, we’ll need to create, or update an existing, channel type to include the ticket command.

await client.createChannelType({
    name: "support-channel-type",
    commands: ["ticket"],

Configure a Custom Action URL

In order to use the defined custom commands, you will first have to set an endpoint URL in the App Settings.

await client.updateAppSettings({
	custom_action_handler_url: "{type}",
You can use a {type} variable substitution in the URL to pass on the name of the command that was triggered.

Webhook Requirements

In order to use Custom Commands, the endpoint responding to the request must:

  • Be reachable from public internet, tunneling services like Ngrok are supported
  • Respond with a 200 HTTP code in less than 3 seconds
  • Handle HTTP requests with POST body
  • Able to parse JSON payloads
  • Support HTTP/1.1

While not required, we recommend following these best-practices for production environments:

  • Use HTTPS with a certificate from a trusted authority (eg. Let's Encrypt)
  • Verify the "x-signature" header
  • Support Keep-Alive
  • Be highly available
  • Offload the processing of the message (read, store, and forget)

Verify Requests via X-Signature and X-Api-Key

All HTTP requests can be verified as coming from Stream (and not tampered by a 3rd party) by analyzing the signature attached to the request. Every request includes an HTTP header called "x-signature" containing a cryptographic signature of the message. Your webhook endpoint can validate that payload and signature match.

// first argument is the request body as a string, second the signature header
const valid = client.verifyWebhook(req.rawBody, req.headers['x-signature']);
If your application uses more than one API Key, you can use the HTTP Header x-api-key to match the signature to the correct secret. Stream will always use the most recently created API Key to sign payloads.

Request format

Your endpoint will receive a POST request with a JSON encoded body containing: message, user and form_data objects. The form_data object will contain values of the interactions initiated by either Attachment or MML actions.

      "text":"/ticket suspicious transaction with id 1234",
      "command": "ticket",
      "args": "suspicious transaction with id 1234",
      "name": "John Doe",
      "email": ""

Response format

If you intend to make any change to the message, you should return a JSON encoded response with the same message structure. Please note that not all message fields can be changed, the full list of fields that can be modified is available in the rewriting messages section.

Discarding messages

Your endpoint can decide to reject the command and return a user message. To do that the endpoint must return a regular message with type set to error.

      "text":"invalid arguments for command /ticket"

Rewriting messages

You can also decide to modify the message, in that case you return the updated version of the message and it will overwrite the user input.

      "text":"Ticket #85736 has been created"

Interactions can be initiated either using Attachment actions:

   "message": {
    "text": "Ticket #85736 has been created",
    "attachments": [
            "type": "text",
            "actions": [
                    "name": "action",
                    "text": "Send",
                    "style": "primary",
                    "type": "button",
                    "value": "submit"
                    "name": "action",
                    "text": "Cancel",
                    "style": "default",
                    "type": "button",
                    "value": "cancel"

Or by using MML formatted messages:

   "message": {
   "text": "this message contains a MML message."
   "mml": "<mml><text>Ticket #85736 has been created</text><button name=\"action\" value=\"submit\">Send</button></mml>",

Rewritable message fields

Not all message fields can be rewritten by your hook handler, fields such as created_at or updated_at for instance are reserved and can only be set by Stream Chat APIs. Any non custom field that is not listed here will be ignored and not updated on the final message.

  1. text

  2. mml

  3. i18n

  4. show_in_channel

  5. silent

  6. type

  7. attachments

  8. any custom field

Example code

An example of how to handle incoming Custom Command requests can be found in this repo here.