webhook-subscriptions

Webhook Subscriptions

Create webhook subscriptions so external services can trigger agent runs by POSTing events to Moltis.

Webhooks are available as soon as the Moltis gateway is running — no extra setup needed.

Ingress Endpoint

Each webhook gets a unique URL:

POST https://<moltis-host>/api/webhooks/ingest/{public_id}

The public_id is a high-entropy identifier like wh_a1b2c3d4... assigned at creation.

Managing Webhooks

Webhooks are managed via RPC or the web UI. The RPC namespace is webhooks.*.

Create a webhook

// RPC: webhooks.create
{
  "name": "github-issues",
  "description": "Triage new GitHub issues",
  "source_profile": "github",
  "auth_mode": "github_hmac_sha256",
  "auth_config": { "secret": "your-github-webhook-secret" },
  "event_filter": { "allow": ["issues.opened", "issues.reopened"] },
  "session_mode": "per_entity",
  "system_prompt_suffix": "Triage this issue: assign a priority label and suggest next steps."
}

Returns the webhook with its public_id (the URL slug) and all configuration.

List webhooks

// RPC: webhooks.list

Get webhook details

// RPC: webhooks.get
{ "id": 123 }

Update a webhook

// RPC: webhooks.update
{
  "id": 123,
  "patch": {
    "enabled": false,
    "event_filter": { "allow": ["issues.opened"], "deny": ["issues.closed"] }
  }
}

Delete a webhook

// RPC: webhooks.delete
{ "id": 123 }

View deliveries

// RPC: webhooks.deliveries
{ "webhookId": 123, "limit": 50, "offset": 0 }

// RPC: webhooks.delivery_get
{ "id": 456 }

// RPC: webhooks.delivery_payload
{ "id": 456 }

Source Profiles

Each webhook has a source_profile that determines how events are parsed and authenticated. Use the profile that matches the sending service for best results.

Profile	Auth Mode	Event Parsing	Dedup Header
github	github_hmac_sha256	x-github-event + action	x-github-delivery
gitlab	gitlab_token	Event from headers	GitLab delivery ID
stripe	stripe_webhook_signature	Event type from JSON body	Stripe event ID
linear	linear_webhook_signature	Event from headers	Linear delivery ID
pagerduty	pagerduty_v2_signature	Event from headers	PagerDuty dedup key
sentry	sentry_webhook_signature	Event from headers	Sentry event ID
generic	none (or any)	x-event-type header	x-delivery-id / idempotency-key