UpsertIncomingWebhookInput

Type: Input

Input for creating or updating an incoming webhook

Fields

Name	Type	Default	Description
active	Boolean		Enable/disable the endpoint (default: true)
allowedMethods	[WebhookHTTPMethod!]		Allowed HTTP methods (default: [POST])
authConfig	String		Non-secret authentication settings (JSON), e.g. hmacHeaderName. Supplying a secret key here is an error naming authSecret — this field is returned by reads, so a secret in it can be echoed back over the stored one.
authSecret	String		The API key (API_KEY) or HMAC secret (HMAC). Write-only: never returned by any query. Omit — or send an empty string, which is what a blank password box submits — to leave the stored secret unchanged. To remove one, switch authStrategy to a strategy that does not use it.
authStrategy	WebhookAuthStrategy		Authentication strategy (default: NONE)
botUserId	UserID		Bot user ID for webhook execution identity
controllerId	ControllerID		Controller ID for on-premise binding
id	IncomingWebhookID		ID for update; omit for create
name	String!		Display name (required)
scriptBody	String!		Lua script source code (required)
slug	String!		URL path segment (required, unique per tenant)
timeoutMs	Int		Execution timeout in milliseconds (default: 5000)