Skip to main content

Inbound routes and webhooks

Routes let outside systems call into your app: payment providers, messaging platforms, mobile clients, and similar. You describe the external event and what should happen in the app (for example, mark paid when checkout completes). GenieForge maps that to a protected route and handler. Find routes under App Blueprint → Routes. Always pair the route with a secret.

How to verify

  1. Find the route under App Blueprint → Routes.
  2. Confirm bearer token or signed-webhook protection is configured.
  3. Send a test event from the provider (or a signed test) and check Executions / project data.
  4. Confirm an unsigned or wrong-secret call fails.

Limits and notes

  • Open endpoints with no secret are not available. Prefer a bearer token or signed webhook.
  • Keep follow-ups safe to retry so a duplicate delivery does not corrupt state.
  • See Launch checklist.