Webhooks

Inbound secrets for clrTech apps to call clrAI; outbound subscriptions for clrAI to call them back.

Inbound

Apps POST to /v1/webhooks/invoke with an HMAC-signed body. Replay protection via nonce + 5-min timestamp window.

0 inbound secrets configured.
Outbound

Events: job.completed, quota.warning, credential.expired, provider.down. Retries with exponential backoff; dead-letter after 8 attempts.

0 outbound subscriptions configured.