Push notifications

Verify delivery

Check that pushes work with a test send, app health counts and a live credential check.

APNs and FCM send no delivery receipts: they answer at send time, and accepted is the strongest signal a native token gives.

The dashboard runs the same three checks under Setup & docs → Push notifications setup → Verification.

1. Send a test push

POST https://app.nativenotify.com/api/universal/test-send

Target a registered device:

{
  "appId": 123,
  "appToken": "yourAppToken",
  "title": "Test from the dashboard",
  "message": "If you can read this, APNs/FCM accepted it.",
  "deviceId": "A1B2C3D4-install-key"
}

Or one raw token. tokenType is "apns", "fcm" or "web"; for web, token is the subscription's endpoint URL:

{
  "appId": 123,
  "appToken": "yourAppToken",
  "title": "Test to one token",
  "message": "Hello from the credentials probe.",
  "tokenType": "apns",
  "token": "0c9d8e…"
}

pushData, bigPictureURL and the rich fields work as in a normal send. A deviceId test also writes the send record and one notification inbox entry for that device. A raw token writes nothing.

{
  "ok": true,
  "accepted": true,
  "transport": "apns",
  "result": "accepted",
  "reasonCode": null,
  "reasonPlainEnglish": "Apple accepted the notification for delivery to this device. APNs has no delivery receipts — whether the device displayed it is not knowable from the server, so 'accepted' is the strongest signal a native token can give.",
  "attempted": 1,
  "testSendId": 8841,
  "target": {
    "mode": "deviceId",
    "deviceId": "A1B2C3D4-install-key",
    "platform": "ios",
    "subscriberId": "user_8241",
    "tokenType": "apns",
    "tokenMasked": "…0c9d8e",
    "tokenSource": "universal"
  }
}

Field	Meaning
`accepted`, `result`	`true` and `"accepted"`, or `false` and `"failed"`, straight from the real send pipeline. The request answers `200` either way.
`reasonCode`, `reasonPlainEnglish`	Why it failed, in Apple's, Google's or the browser push service's words. A credential reason on every token means fix the credentials first.
`target`	`mode` is `"deviceId"` or `"token"`. `tokenSource` is `"universal"` (the registered token) or `"explicit"`. `tokenMasked` is `…` plus the last six characters; responses never carry a full token.

Errors

Status	Code	Meaning
`400`	`missing_field`, `invalid_field`, `invalid_body`	Missing `appId`, `title` or `message`, or an invalid `appId` or rich field.
`400`	`missing_target`, `invalid_target`	No target, both a `deviceId` and a token, or only one of `tokenType` and `token`.
`400`	`invalid_token_type`, `invalid_token_format`	`tokenType` isn't `apns`, `fcm` or `web`, or the token doesn't match its shape.
`403`	`trial_expired`	The free trial ended, or sending is paused for an unpaid invoice. Nothing was sent.
`404`	`app_not_found`, `device_not_found`	The app isn't accessible to this caller, or no device has that `deviceId`.
`409`	`no_deliverable_target`	The device has no live token for its platform, or the app has no credentials for it.

2. Check health

GET https://app.nativenotify.com/api/universal/health/:appId/:appToken

{
  "ok": true,
  "appId": 123,
  "checkedAt": "2026-09-23T09:45:00.000Z",
  "devices": { "total": 1349, "mass": 1228, "subscriber": 121 },
  "tokens": { "apns": 640, "fcm": 660, "web": 45, "totalLive": 1345 },
  "retired": {
    "apns": 1,
    "fcm": 2,
    "web": 1,
    "total": 4,
    "note": "dead = true — excluded from every future send. Web push subscriptions are retired on the first 404/410 the push service reports; native tokens after 2+ dead-class failures behind DELETE_DEAD_TOKENS=1."
  }
}

Counts are exact and carry no token material. devices splits registered devices into mass (no subscriber id) and subscriber. tokens counts live tokens per type, and retired the ones excluded from future sends.

3. Validate credentials

POST /api/universal/credentials/validate   (owner / admin)

Checks the stored FCM and APNs credentials live. See Push credentials.

Reading failures

Symptom	Usually	Do this
`failed` with a credential reason on every token	Wrong or expired FCM service account or APNs key	Re-run the credential check and re-save from the dashboard.
`failed` with a per-token reason (`BadDeviceToken`, `Unregistered`, `UNREGISTERED`, web `NotFound` or `Gone`)	That install is gone: uninstalled, token rotated or browser unsubscribed	Re-register on the next launch. Registration clears the dead flag.
`failed` with web `EndpointNotAllowed`	The endpoint isn't a public push service, so the server refused to connect (never a strike)	Register the browser's real `PushSubscription` endpoint.
`skipped` counters in a send	No credentials for that transport	Save the missing credential set.
`devices: 0` on an `all` send	No device is registered in the send's environment, or none has a live token	Check the `environment` and the health counts.
`accepted`, but the device shows nothing	Android: the app never posted the FCM data message. Otherwise OS delivery: focus, Do Not Disturb or a revoked permission	Add the display code from your recipe, and check the device's notification permission.

Strikes and dead tokens on both paths are covered in Tokens & receipts.

PreviousPush credentials Next Web push