Treat the URL as a credential
Anyone with the URL can post to the channel. Rotate it immediately if exposure is suspected.
The shortest path from issuing a secret URL in a channel to configuring an external service to send a JSON message.
Open Incoming webhooks in the destination Briar channel. Organization owners and admins, plus the channel owner, can manage them.
Use a source-specific name such as “Deployment alerts” so the message author is recognizable in the channel.
The full URL is shown only at that moment. Save it in a secret manager, never in source, issues, chat, or logs.
Send a POST request to the issued URL. There is no separate Authorization header; the full URL is the credential.
POSThttps://briar-api.wbai.workers.dev/hooks/channels/{webhook_id}/{secret}application/json{"text":"Production deployment completed."}Anyone with the URL can post to the channel. Rotate it immediately if exposure is suspected.
If an event can be retried, send Idempotency-Key and keep the same value for every attempt of the same logical event.
A new message returns 201. An event already received returns 200 with duplicate: true. Treat both as success.
The body is at most 64KiB, text is 1–10,000 characters, blocks contains at most 50 items, and each webhook accepts up to 60 requests per 60 seconds.