MQTT Broker Setup

Notificator does not provide a shared or default MQTT broker. MQTT delivery is optional and currently requires your own HiveMQ Cloud cluster.

Dashboard alerts do not need an account, API key, or MQTT broker. Mobile push and account email alerts do not require MQTT; email delivery is enabled or disabled from the mobile app.

Current provider support

HiveMQ Cloud is the only MQTT provider supported by the current Notificator plugin and firmware release.

Create a free HiveMQ Cloud cluster

HiveMQ offers a Serverless FREE plan with no credit card required. HiveMQ currently describes it as including up to 100 connections, 10 GB of monthly traffic, MQTT over TLS, and WebSocket support. These limits and terms are controlled by HiveMQ and may change.

1. Open the HiveMQ Cloud console and create an account or sign in.
2. Select Create Serverless Cluster.
3. When the cluster is ready, select Manage Cluster.
4. In the cluster overview, locate its generated URL and Port (TLS).
5. Copy the URL. Notificator needs only the hostname, without https:// or a port.

See HiveMQ’s Cloud plan page and official quick-start guide for current plan details and console instructions.

Create the credentials

In the cluster’s Access Management area:

1. Open Authentication → Credentials.
2. Create a Publish Only credential for each WordPress or Strapi publisher.
3. Create another Publish Only credential for mobile device commands.
4. Create a separate Publish and Subscribe credential for the device.
5. Save the usernames and passwords securely. HiveMQ notes that credential changes can take up to one minute to become active.

Separating the credentials prevents WordPress, Strapi, and the phone from receiving device subscriptions, allows one client to be revoked without affecting the others, and makes future credential rotation easier.

What you need

• A HiveMQ Cloud cluster with secure MQTT and WebSocket access.
• An enabled Notificator server API key.
• The cluster hostname, usernames, and passwords.
• One topic prefix shared by the source integration and every intended device. New configurations default to notificator-project.

Use separate credentials when possible:

• A separate publisher credential for each WordPress or Strapi installation.
• A separate publisher credential for mobile device commands.
• A device credential limited to the topics that device must subscribe to and publish.

Configure the WordPress plugin

1. Open Notificator → Settings → Connections.
2. Under Remote delivery, add and enable your Notificator API key.
3. Under MQTT broker, turn on Enable MQTT delivery.
4. Enter the HiveMQ Cloud cluster hostname, publisher username, password, and topic prefix.
5. Save the settings.
6. Select Test broker.

The plugin connects through secure WebSockets on port 8884 and path /mqtt. The broker password is encrypted locally, excluded from exports and logs, and added to an HTTPS delivery request only in memory.

Configure the Strapi extension

Add the HiveMQ publisher connection to the Strapi server environment:

NOTIFICATOR_MQTT_ENABLED=true
NOTIFICATOR_MQTT_HOST=your-cluster.s1.eu.hivemq.cloud
NOTIFICATOR_MQTT_USERNAME=your-strapi-publisher
NOTIFICATOR_MQTT_PASSWORD=replace-with-your-password
NOTIFICATOR_MQTT_TOPIC_PREFIX=notificator-project

Restart Strapi, open Notificator, and confirm the MQTT connection card shows the expected hostname and topic prefix. Enable MQTT on the required rules. Strapi uses secure WebSockets on port 8884 and path /mqtt; enter only the HiveMQ hostname in the environment variable.

The extension sends broker details only when an MQTT rule runs. The signed HTTPS request uses the values in memory and the Notificator API does not persist them in its database. See Strapi Extension Setup for its complete environment-variable reference.

Configure the mobile app

1. Open Account → Device connection.
2. Expand HiveMQ Cloud.
3. Enter the cluster hostname, mobile publisher username, password, and the same topic prefix used by the source integration and device.
4. Select Test connection.
5. When the test succeeds, select Save connection.

The mobile app stores this connection in the phone’s operating-system secure credential store. It supplies the details only in memory when sending a device command through an authenticated HTTPS request. MQTT credentials are not saved to the Notificator database or synced between phones, so configure each phone that needs to control devices.

Testing does not save the form or publish a message. The authenticated API validates the HiveMQ Cloud endpoint, opens a short-lived secure WebSocket connection, and closes it immediately. The entered credentials are used only for that request and are not written to Supabase or API logs.

Configure the device

Open the device setup portal and enter:

• the same HiveMQ Cloud cluster hostname;
• the secure MQTT port, normally 8883;
• the device username and password;
• exactly the same topic prefix used by WordPress or Strapi.

The device stores its credentials in local ESP32 preferences and does not send the saved password back to the setup page.

For a device ID such as abc123, the default topic layout is:

• notificator-project/abc123/messages
• notificator-project/abc123/cmd
• notificator-project/abc123/status

Enable MQTT for an event

Open a notification in WordPress or a rule in Strapi and enable its MQTT channel. Local activity, inbox, push, and email choices remain independent.

MQTT is paused when the broker setting is off or incomplete. Notificator will not silently fall back to another broker.

Troubleshooting

The summary says Not configured

Open Settings → Connections, enable MQTT delivery, complete every broker field, and save.

The broker test is disabled

Confirm that the broker configuration is complete and at least one Notificator API key is enabled.

WordPress or Strapi connects but the device receives nothing

• Confirm the source integration, mobile app, and device use the same cluster and topic prefix.
• Check the device ID and broker permissions.
• Make sure the device credential can subscribe to its messages and cmd topics and publish to its status topic.
• Confirm the notification has its MQTT channel enabled.

Mobile device commands ask for a connection

Open Account → Device connection and save the HiveMQ Cloud publisher credential for that phone. The connection is intentionally not restored from Supabase or copied from WordPress.

The app says Connection refused: Not authorized

HiveMQ rejected the username or password before the command reached the device. Re-enter the mobile publisher credential under Account → Device connection, save it, and retry the command. This applies to ordinary device settings and OTA requests.

The mobile connection test fails

• Confirm the hostname ends in .hivemq.cloud and does not include https://, a port, or /mqtt.
• Check the mobile publisher username and password in HiveMQ Access Management.
• Wait briefly after creating or rotating a HiveMQ credential, then test again.
• Make sure the account has an active WordPress or Internal API key for the authenticated request.
• A successful test confirms broker authentication only. The device must still use the same cluster and topic prefix to receive commands.

Current provider support

The current WordPress and Strapi integrations validate HiveMQ Cloud hostnames and its standard secure WebSocket endpoint. Support for other MQTT providers is planned, but is not part of the current configuration.

HiveMQ Cloud is an independent third-party service. Notificator is not affiliated with or endorsed by HiveMQ.

Device guides

• Notificator Base Setup
• Notificator Touch Setup