Abstract: A cloud application programming interface (API) executing on one or more processors may receive a subscription request from an application, the subscription request includes indications of an authentication token, an event, an entity, and a callback link. A security platform may encrypt, the authentication token and provide the encrypted authentication token to the cloud API. An entity server associated with the entity may generate, a subscription that includes indications of the event, the callback link, the application, and the encrypted authentication token. The subscription may be stored in a subscription repository.

Abstract: An entity server may determine a change in the status of an event, which includes one or more attributes of the event. The entity server identifies a subscription associated with an application in a subscription repository, which comprises indications of the event, a callback link, the application, and an encrypted authentication token. The entity server provides the subscription and the one or more attributes of the event to a cloud hub. A security platform decrypts the encrypted authentication token. The security platform then provides the response and the decrypted authentication token to the application.