scf_create_webhook
Create an evidence-inbox webhook endpoint for ingestion. Returns the HMAC secret once—store it immediately.
Instructions
Create a webhook endpoint for evidence-inbox ingestion (write — admin role). Returns the plaintext HMAC signing secret exactly once — store it immediately; it cannot be retrieved later.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Human-readable label (e.g., 'Splunk SIEM', 'AWS Config') | |
| org_id | Yes | Organization UUID — obtain from scf_list_organizations | |
| description | No | Free-text description of what this endpoint is for | |
| allowed_evidence_ids | No | Restrict ingestion to specific evidence IDs (e.g., ['ERL-IAM-001']); omit to allow any | |
| rate_limit_per_minute | No | Per-endpoint rate limit in requests/min (1–10000); omit to use the org default |