Create external event
Inbound provider webhook. The raw JSON body is verified with HMAC-SHA256 against the source’s mapping secret — send the hex digest in any *-signature header (X-Pile-Signature, Finix-Signature, sha256=<hex>, or t=…,v1=<hex> envelopes all work). The provider event id for dedupe comes from a *-Event-Id header or the payload’s id field.
POST
/workspaces/{organizationId}/external-events/{source}Path parameters
organizationIdstringrequiredsourcestringrequiredRequest body
application/jsonobjectResponses
200
Event received and recorded
okbooleanrequiredstatusstringrequireddeliveryIdstringoutcomestringcompletedIssueIdsstring[]401
Invalid webhook signature
404
External event source not configured