Enable or rotate the source's hosted inbound endpoint
Enable or rotate the source's hosted inbound endpoint
Mints an inbound URL and signing secret. The plaintext secret is
returned once in this response and never again; calling again
rotates both token and secret, invalidating the old pair
immediately.
Push payloads to the returned `inbound_url` signed with
Kordio-Inbound-Signature: t=<unix_seconds>,v1=<hex>
where `v1 = HMAC-SHA256(secret, "<t>.<raw_body>")`. Timestamps
more than 5 minutes off are rejected. The payload is
`{"items": [...]}` (or one item object) with the same fields as
the batch ingest endpoint; ingestion is idempotent the same way.
The source's `kind` selects the payload adapter; `custom` uses
this generic scheme.
POST
Enable or rotate the source's hosted inbound endpoint
Authorizations
Same flow; ledger:write is required for any mutation.
Path Parameters
Response
201 - application/json
Source with inbound_url and one-time inbound_secret
Available options:
source Example:
"cobo"
Connector kind. Selects the inbound payload adapter.
True for sources the platform created on your behalf.
Available options:
exact, sum_in_window Present once inbound is enabled. Post signed payloads here.
Returned only when inbound is enabled or the secret is rotated. Never returned again.