deliverWebhook

POST

/api/v1/hooks/{token}

Inbound webhook (no session or token: the URL is the secret). The request body (up to 256 KiB) becomes part of the prompt, clearly marked as untrusted. If the webhook has a signing secret, the signature header must hold the HMAC-SHA256 of the body ("sha256=<hex>" or hex).

deliverWebhook

curl --request POST \
  --url '<base-url>/api/v1/hooks/<token>' \
  --header 'Content-Type: */*' \
  --data-raw 'string'

const url = '<base-url>/api/v1/hooks/<token>';
const options = {
  method: 'POST',
  headers: {'Content-Type': '*/*'},
  body: 'string'
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));

Response example

{
  "error": "string"
}

{
  "error": "string"
}

{
  "error": "string"
}

{
  "error": "string"
}

Path parameters

token
string
required

Request body /

Type:string

format: binary

Returns

202

The turn started.

401

Error.

JSON

error
string
required

404

Error.

JSON

error
string
required

409

Error.

JSON

error
string
required

413

Error.

JSON

error
string
required

deliverWebhook

Path parameters

Request body */*

Returns

202

401

404

409

413

Request body /