Enable or rotate the source's hosted inbound endpoint
Mints an inbound URL and signing secret. The plaintext secret is
returned once in this response and never again; calling again
rotates both token and secret, invalidating the old pair
immediately.
Push payloads to the returned `inbound_url` signed with
Kordio-Inbound-Signature: t=<unix_seconds>,v1=<hex>
where `v1 = HMAC-SHA256(secret, "<t>.<raw_body>")`. Timestamps
more than 5 minutes off are rejected. The payload is
`{"items": [...]}` (or one item object) with the same fields as
the batch ingest endpoint; ingestion is idempotent the same way.
The source's `kind` selects the payload adapter; `custom` uses
this generic scheme.
POST
Enable or rotate the source's hosted inbound endpoint
Authorizations
Same flow; ledger:write is required for any mutation.
Path Parameters
Response
201 - application/json
Source with inbound_url and one-time inbound_secret
Available options:
source Example:
"cobo"
Connector kind. Selects the inbound payload adapter.
True for sources the platform created on your behalf.
Available options:
exact, sum_in_window Present once inbound is enabled. Post signed payloads here.
Returned only when inbound is enabled or the secret is rotated. Never returned again.