AEOS
--:--:--

Webhook

ConnectedInstalled

Protocol · Generic (inbound) · v1.0.0 · manifest schema 1.0

The generic inbound transport, and one half of the extensibility escape hatch this file exists for. An external system with no manifest of its own registers an endpoint here, and its deliveries enter the internal event bus exactly as a named connector's would. Permanent, because uninstalling the inbound door would strand every system using it.

Last sync
4h ago
Health
95/100
Rate ceiling
1200/min
Webhooks
supported

Add to the estate and begin the authentication handshake. Every operation is a state transition inside AI-EOS — no external service is contacted.

Health

95/100

95/100 — 850ms mean round trip, above the 800ms threshold.

  • 5Latency850ms mean round trip, above the 800ms threshold.

Authentication

Not required
Method
No Authentication
Credential
Last verified
Principal
Expires
Does not expire
Scopes held
0/0
Handshake · No Authentication
  1. 1.InitiateThe Hub prepares a No Authentication request for Generic (inbound).
  2. 2.VerifyThe Hub performs one authenticated read to confirm the grant, then records the reference.

Nothing is contacted. The Hub stores no credential material — only a masked reference, the granted scopes and an expiry. There is no field on the auth record a secret could go in, which is a stronger guarantee than a policy of not putting one there.

Capabilities2

  • Receive deliverieswebhook.receive

    Accept a signed POST and raise it on the internal bus.

  • Verify signatureswebhook.verify

    Check delivery signatures before routing.

Modules request capabilities, never connectors. A capability offered by two connectors gives the requesting module a fallback it does not have to know about.

Usage · 24h

172,800
Calls
1,555,200
Records
850ms
Mean latency
0.1%
Error rate
1200/min
Rate ceiling
declared by the manifest
40%
Peak usage
saturates at 80%
Peak consumption against ceiling

Event Subscriptions0

This connector subscribes to no internal topics. It is called directly through the gateway rather than driven by events.

Publisher

First party
Name
AI-EOS
Publisher ID
aeos
Platform vendor
Generic (inbound)
Support
operations@ai-eos.internal

Published by the platform itself. These manifests ship with the build rather than being fetched.

Generic (inbound) owns the platform this plugin reaches. AI-EOS authored the manifest.

Version and changelog

Up to date
Installed
1.0.0
Published
1.0.0
Minimum platform
1.0.0
Compatibility
Compatible
Manifest schema
1.0
First published
16 months ago

Requires platform 1.0.0 or newer. This build is 1.0.0.

  • 1.0.0major · 2 months ago
    • Signature verification over raw bytes across five schemes.
    • Scoped delivery paths, so two tenants sharing one path cannot cross-deliver.
    • Permanent: the inbound door cannot be uninstalled.

Permissions and scopes

operator+

AI-EOS permissions are what this plugin may do insidethe platform, resolved against the API Gateway’s own table. Scopes are what the external platform is asked to allow. They are different systems and neither substitutes for the other.

  • integration:read4 roles

    The connector estate, its health and its event routing.

  • integration:write3 roles

    Route a capability call through the Integration Hub to a connector.

Requested external scopes

Requests no external scopes.

Dependencies0

Declares no dependencies. It can be installed against an empty estate.

Whether each is satisfied is resolved against the live estate at install time, not here.

Security

Authentication
No Authentication
Credential storage
Never stored
External scopes
0
AI-EOS permissions
2
Minimum role
operator
Inbound deliveries
2 endpoints unverified
Tenant isolation
Installation state is tenant-scoped

A plugin is a data literal. Nothing in the marketplace executes plugin code, and a plugin cannot bypass the Authentication Manager, the Integration Hub, the API Gateway or a permission check, because it has no code path — the host performs every transition.

The auth state type has no field a credential fits in, so the guarantee is enforced by the type checker rather than by convention.

Privacy

Data leaving AI-EOS
0 capabilities
Data entering AI-EOS
2 capabilities
Modules served
3
Event topics received
0

Direction is declared per capability, so what this plugin can send and what it can receive are both enumerable rather than a matter of trust. It reaches only the modules listed above, and only through capabilities the Integration Hub resolves.

Documentation1

Webhook Manager2

2 active

2 endpoints are accepting deliveries without signature verification. The generic inbound door ships this way because its signing secret is per-sender — configure one per registered sender before treating the path as trusted.

Logs3

  • Sync3h agoSynchronisation completed — 1,555,200 records reconciled in 24h.
  • Gatewayjust now172,800 gateway calls in 24h at 850ms mean latency.
  • Registry19h agoConnector v1.0.0 installed against manifest schema 1.0.

Roadmap

  • Per-endpoint replay of failed deliveries from the error queue
  • Operator-defined mapping from payload shape to internal topic

What this connector would gain next. Mirrors the Future Integrations list every module carries in the Navigator registry.