Skip to docs content
Browse documentation
On this page

External HTTP knock

Call a package export over HTTP with inbound webhooks. One webhook name binds one export; mint a handle with webhooks.mint, register GitHub hooks with webhooks.apply, and POST JSON.

Inbound webhooks are the external HTTP knock. Minion has no package invocation tokens, so there is no second bearer grant to set up.

Destination map

  • Vendor POST (Sentry, GitHub, Stripe) — Destination: inbound webhooks; How: minion.webhooks with inputMode: "request", optional HMAC + replay, webhooks.mint, then webhooks.apply for GitHub
  • First-party trusted client — Destination: inbound webhooks; How: inputMode: "params", Idempotency-Key, sync or ack, one webhook per export
  • Multi-export client — Destination: one webhook per export; How: No wildcard URL. Declare each export the client actually calls.
  • Author composition — Destination: import / workflows; How: Static import, or workflows. Not HTTP.

A client that needs to call several exports mints one webhook handle per export and POSTs JSON. Vendor HMAC handlers stay on inputMode: "request".

See Inbound webhooks . webhooks.mint returns a handle; register the URL with webhooks.apply.