Skip to main content

Inbound VCS webhook receiver

POST 
/api/v1/vcs/webhooks/:provider

Receive, verify, and route an inbound PR-lifecycle or push webhook.

Returns 202 with a short envelope so an operator can correlate the persisted dedup row to the upstream delivery. Failure modes:

  • 401 invalid_signature — verify_webhook returned False (missing secret, bad HMAC, or unexpected header).

  • 400 invalid_payload — body couldn't be parsed into a PR event (wraps WebhookParseError).

  • 413 body_too_large — raw body exceeded.

  • **422 ** — unknown provider path parameter.

  • Rate-limit tier: webhook (default 120 req/min; provider redelivery storms surface as 429s rather than starving the rest of the API).

Request​

Responses​

Successful Response