Endpoint URL Format for Cloud Function should be in proper format and also @ somethingsomething already mentioned authentication might be turned on for the function, in which case you'll need to configure that for the push subscription as well (and confirm that the pubsub agent SA has rights to trigger the function) .