Key Takeaways
- Scenario 973 is digital-download / license-key ready webhooks — not pre-auth holds, custom-proof approval, line-item cancels, warranty, store credit, price-match, try-on kits, subscription skips, BOPIS, waitlist restocks, preorder drops, gift-card sales, COD, split-ship, refunds, or renewals.
- “License L-41 is ready — download in 24h” is transactional. “Buy more packs” is marketing. Split SIMs.
- Cap SMS per license id. Store retries of download.ready will empty prepaid.
- Priced by devices and SMS send volume. You use your own phone and operator SMS credit. Free is 1 / 300 / 300. Developer is 25,000 SMS per year.
- Verify HMAC. A forged download.ready event nags people whose file already fetched.
- REST fields live in Developer Center — not a CodeCanyon digital-goods plugin. MCP, if you use it, is only a REST wrapper.
Summary
Scenario 973 is ecommerce webhooks for digital-download ready. The store owns the license. Your worker texts ready / expired — not the whole “buy more packs” segment. Priced by devices and SMS send volume. You use your own phone and operator SMS credit.
If you key SMS on SKU instead of license+build, the second store ping will re-open a 24-hour clock that already fetched.
Digital download ready
Map download.ready / download.expired hooks to a worker. Shopify overview · gateway webhooks. Fields: Developer Center. Industry context: GSMA.
Event map
| Shop event | SMS job | Idempotency | SIM |
|---|---|---|---|
| download.ready | Fetch + clock | License + build | Transactional |
| download.expired | Once | License + build | Transactional |
| buy more packs | Promo | Consent + quiet hours | Promo MSISDN |
| staff login | OTP | — | Dedicated OTP phone |
One SMS per license
Store retries. Your key is license+build. Idempotent send. DLR ≠ fetched — DLR.
Cost
Priced by devices and SMS send volume. You use your own phone and operator SMS credit. Free: 1 device, 300 SMS lifetime, 300 contacts. Developer: 25,000 SMS per year. Paid plans uncap platform volume; devices still meter. Pricing.
Ops
Spare radio before a launch weekend. Doze · setup.
Security
Separate store secrets from gateway callbacks. Never SMS the raw license key — portal link only. Trust Center · OTP. Buy-more STOP off the download inbox. STOP.
Checklist
- HMAC required.
- Idempotency on license+build.
- No raw key on SMS.
- OTP isolated.
- Airtime for launch weekend.
Next steps
Ecommerce templates · SMS API documentation.
Related product pages
Jump to the live product docs for this topic—not another long-form article.
- SMS webhook integrationInbound and status events
- transactional SMS for orders and alertsEvent-driven messages
- SMS API documentationLive endpoint reference
- PHP REST send samplesPHP code examples
