A tool's webhook
Called by the tool, not by you: WhatsApp, Chatwoot and Twilio send customers' messages here (and Stripe its events), each signed with a secret of the connection's (WhatsApp's X-Hub-Signature-256, Chatwoot's X-Chatwoot-Signature, Twilio's X-Twilio-Signature over this address and the form fields). Unsigned or wrongly signed deliveries are refused; each message is kept once, however often it's sent. Hires read them and are woken by them.
connection*stringThe connection's id (from GET /api/workspaces/:ws/connections).
Kept. Twilio gets an empty TwiML answer (text/xml), so nothing is sent back to the customer.
curl -X POST 'https://app.useroster.work/api/hooks/string'A tool's webhook check GET
Called by the tool, not by you: WhatsApp checks the address with its verify token here and gets its challenge back. The address to give it is this path with the connection's id.
Give a hire a Slack identity POST
Makes the hire's own Slack app from a manifest. Slack allows about one a minute.