set_webhook
Register or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body). Returns the signing secret.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Public https URL that receives the signed POST. | |
| token | No | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. | |
| inbox_id | Yes | Inbox UUID. |