> ## Documentation Index
> Fetch the complete documentation index at: https://docs.genieforge.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Inbound routes and webhooks

> Inbound routes let outside systems call your tools, protected by bearer tokens or signed webhooks.

# Inbound routes and webhooks

**Routes** let outside systems call into your app: payment providers, messaging platforms, mobile clients, and similar. Each route points at a tool that handles the request.

Protect every route with a secret:

* A **bearer token** checked before your handler runs, or
* A **signed webhook** when the provider signs its payloads (common for Stripe, GitHub, and similar)

Open endpoints with no secret are not available. Prefer a token or signed webhook.

Find routes under **App Blueprint → Routes**.