> ## Documentation Index
> Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a paused event source

> Creates a customer webhook source in the paused state. delivery.kind must be webhook; integration sources are connection-managed. Verification credentials are referenced from Vault and secret material is never returned.



## OpenAPI

````yaml /managed-agents/openapi.yaml post /managed-agents/v1/event-sources
openapi: 3.1.0
info:
  title: Managed Agents API
  version: 0.13.0
  description: >-
    The Recursion Managed Agents REST API. Authenticate with a Recursion API key
    as a bearer token. An organization-scoped key acts in its own organization
    and needs nothing else; a tenant-scoped key must also send
    `x-organization-id` with an organization id or `default`. Field names follow
    each operation's published schema.
servers:
  - url: https://api.recursion.labelbox.com
security:
  - bearerAuth: []
paths:
  /managed-agents/v1/event-sources:
    post:
      tags:
        - Event Sources
      summary: Create a paused event source
      description: >-
        Creates a customer webhook source in the paused state. delivery.kind
        must be webhook; integration sources are connection-managed.
        Verification credentials are referenced from Vault and secret material
        is never returned.
      operationId: managedAgentsCreateEventSource
      parameters:
        - description: >-
            Replay-protection key in an organization-wide namespace shared by
            keyed mutations. It must contain 1 to 256 visible ASCII characters
            and be sent as exactly one header value. Request identity is the
            exact HTTP method, escaped path, raw query, and raw body bytes. The
            same request replays the original successful response; any different
            request returns 409 idempotency_conflict, and an active matching
            request returns 409 idempotency_in_progress. Completed receipts are
            retained for approximately 24 hours, pending claims may be reclaimed
            after approximately 1 hour, and no deduplication is guaranteed after
            expiry.
          in: header
          name: Idempotency-Key
          required: true
          schema:
            description: >-
              Replay-protection key in an organization-wide namespace shared by
              keyed mutations. It must contain 1 to 256 visible ASCII characters
              and be sent as exactly one header value. Request identity is the
              exact HTTP method, escaped path, raw query, and raw body bytes.
              The same request replays the original successful response; any
              different request returns 409 idempotency_conflict, and an active
              matching request returns 409 idempotency_in_progress. Completed
              receipts are retained for approximately 24 hours, pending claims
              may be reclaimed after approximately 1 hour, and no deduplication
              is guaranteed after expiry.
            maxLength: 256
            minLength: 1
            pattern: ^[!-~]+$
            type: string
      requestBody:
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/ManagedAgentsSlackEventSourceRequest'
                - $ref: '#/components/schemas/ManagedAgentsGithubEventSourceRequest'
                - $ref: >-
                    #/components/schemas/ManagedAgentsUnsignedCustomEventSourceRequest
                - $ref: >-
                    #/components/schemas/ManagedAgentsHmacCustomEventSourceRequest
        required: true
      responses:
        '201':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsEventSourceResponse'
          description: >-
            Configured inbound event source, including its verification policy
            and lifecycle state.
          headers:
            Idempotency-Replayed:
              description: True when this response replays an earlier completed request.
              schema:
                type: boolean
              style: simple
            Location:
              description: Relative URL of the created resource.
              schema:
                type: string
              style: simple
        '400':
          description: The request was rejected by schema or semantic validation.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorInvalidRequest'
        '401':
          description: The caller is unauthenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorUnauthorized'
        '403':
          description: The caller lacks a required permission or capability.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorForbidden'
        '409':
          headers:
            Retry-After:
              description: Seconds to wait when a matching request is still in progress.
              schema:
                type: string
              style: simple
          description: >-
            The request conflicts with the resource state, or with an in-flight
            idempotent replay.
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ManagedAgentsApiErrorConflict'
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorIdempotencyConflict
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorIdempotencyInProgress
                discriminator:
                  propertyName: code
                  mapping:
                    conflict:
                      $ref: '#/components/schemas/ManagedAgentsApiErrorConflict'
                    idempotency_conflict:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorIdempotencyConflict
                    idempotency_in_progress:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorIdempotencyInProgress
        '413':
          description: The request exceeds a size or transaction budget.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorPayloadTooLarge'
        '415':
          description: The request body uses a media type this operation does not accept.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorUnsupportedMediaType'
        '422':
          description: The request is well formed but failed semantic validation.
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/ManagedAgentsApiErrorSemanticValidationFailed
        '429':
          headers:
            Retry-After:
              description: Seconds the caller should wait before retrying.
              schema:
                type: string
              style: simple
          description: A rate limit is exhausted. Honor `Retry-After`.
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorRateLimitExceeded
                  - $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimited'
                discriminator:
                  propertyName: code
                  mapping:
                    rate_limit_exceeded:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorRateLimitExceeded
                    rate_limited:
                      $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimited'
        '500':
          description: An unexpected server-side failure.
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError'
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorInvariantViolation
                discriminator:
                  propertyName: code
                  mapping:
                    internal_error:
                      $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError'
                    invariant_violation:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorInvariantViolation
        '502':
          description: The service returned an invalid response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorBadGateway'
        '503':
          headers:
            Retry-After:
              description: Seconds the caller should wait before retrying.
              schema:
                type: string
              style: simple
          description: A dependency is unavailable. Retryable.
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorIdempotencyUnavailable
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable
                  - $ref: >-
                      #/components/schemas/ManagedAgentsApiErrorServiceUnavailable
                discriminator:
                  propertyName: code
                  mapping:
                    idempotency_unavailable:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorIdempotencyUnavailable
                    managed_agents_unavailable:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable
                    service_unavailable:
                      $ref: >-
                        #/components/schemas/ManagedAgentsApiErrorServiceUnavailable
        '504':
          headers:
            Retry-After:
              description: When to retry, as delay seconds or an HTTP date.
              schema:
                type: string
          description: The service did not respond before the timeout. Retryable.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ManagedAgentsApiErrorGatewayTimeout'
components:
  schemas:
    ManagedAgentsSlackEventSourceRequest:
      additionalProperties: false
      description: Closed configuration for a Slack Events API source.
      properties:
        delivery:
          $ref: '#/components/schemas/ManagedAgentsProviderWebhookDeliveryRequest'
          description: Customer-configured webhook delivery and verification.
        displayName:
          description: Human-readable source name shown in the automation catalog.
          maxLength: 256
          minLength: 1
          type: string
        type:
          description: Slack Events API protocol, verified with Slack's request signature.
          enum:
            - slack_events_api
          type: string
      required:
        - displayName
        - type
        - delivery
      type: object
      example:
        delivery:
          kind: webhook
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        displayName: example
        type: slack_events_api
    ManagedAgentsGithubEventSourceRequest:
      additionalProperties: false
      description: Closed configuration for a GitHub webhook source.
      properties:
        delivery:
          $ref: '#/components/schemas/ManagedAgentsProviderWebhookDeliveryRequest'
          description: Customer-configured webhook delivery and verification.
        displayName:
          description: Human-readable source name shown in the automation catalog.
          maxLength: 256
          minLength: 1
          type: string
        type:
          description: GitHub webhook protocol, verified with GitHub's webhook signature.
          enum:
            - github_webhook
          type: string
      required:
        - displayName
        - type
        - delivery
      type: object
      example:
        delivery:
          kind: webhook
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        displayName: example
        type: github_webhook
    ManagedAgentsUnsignedCustomEventSourceRequest:
      additionalProperties: false
      description: >-
        Closed custom-webhook configuration that explicitly accepts unsigned
        deliveries.
      properties:
        delivery:
          $ref: '#/components/schemas/ManagedAgentsUnsignedWebhookDeliveryRequest'
          description: Customer-configured webhook delivery and verification.
        displayName:
          description: Human-readable source name shown in the automation catalog.
          maxLength: 256
          minLength: 1
          type: string
        type:
          description: Custom webhook protocol.
          enum:
            - custom_webhook
          type: string
      required:
        - displayName
        - type
        - delivery
      type: object
      example:
        delivery:
          kind: webhook
          verification:
            type: none
        displayName: example
        type: custom_webhook
    ManagedAgentsHmacCustomEventSourceRequest:
      additionalProperties: false
      description: >-
        Closed custom-webhook configuration that verifies HMAC-SHA256
        signatures.
      properties:
        delivery:
          $ref: '#/components/schemas/ManagedAgentsHmacWebhookDeliveryRequest'
          description: Customer-configured webhook delivery and verification.
        displayName:
          description: Human-readable source name shown in the automation catalog.
          maxLength: 256
          minLength: 1
          type: string
        type:
          description: Custom webhook protocol.
          enum:
            - custom_webhook
          type: string
      required:
        - displayName
        - type
        - delivery
      type: object
      example:
        delivery:
          kind: webhook
          verification:
            signatureHeader: example
            signaturePrefix: example
            signedParts:
              - kind: body
            type: hmac_sha256
            verificationCredential:
              credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
              vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        displayName: example
        type: custom_webhook
    ManagedAgentsEventSourceResponse:
      additionalProperties: false
      description: >-
        Configured inbound event source, including its verification policy and
        lifecycle state.
      properties:
        createdAt:
          description: Time the event source was created.
          format: date-time
          readOnly: true
          type: string
        delivery:
          $ref: '#/components/schemas/ManagedAgentsEventSourceDelivery'
          description: Webhook configuration or owning integration connection.
        displayName:
          description: Human-readable source name shown in the automation catalog.
          type: string
        eventSourceId:
          description: Stable identifier for the event source.
          format: uuid
          readOnly: true
          type: string
        revision:
          description: Monotonic revision represented by the response ETag.
          format: int64
          minimum: 1
          readOnly: true
          type: integer
        status:
          description: >-
            Lifecycle state. Custom webhook sources start paused;
            connection-managed sources start active.
          enum:
            - paused
            - active
          readOnly: true
          type: string
        type:
          description: Inbound provider protocol interpreted by this source.
          enum:
            - slack_events_api
            - github_webhook
            - custom_webhook
          type: string
        updatedAt:
          description: Time the event source was last changed.
          format: date-time
          readOnly: true
          type: string
      required:
        - eventSourceId
        - displayName
        - type
        - delivery
        - status
        - revision
        - createdAt
        - updatedAt
      type: object
      example:
        createdAt: '2026-02-18T09:30:00.000Z'
        delivery:
          kind: webhook
          verification:
            signatureHeader: example
            signaturePrefix: example
            signedParts:
              - kind: body
            type: none
            verificationCredential:
              credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
              vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          webhookUrl: example
        displayName: example
        eventSourceId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        revision: 1
        status: paused
        type: slack_events_api
        updatedAt: '2026-02-18T09:30:00.000Z'
    ManagedAgentsApiErrorInvalidRequest:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - invalid_request
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorUnauthorized:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - unauthorized
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorForbidden:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - forbidden
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorConflict:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - conflict
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorIdempotencyConflict:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - idempotency_conflict
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorIdempotencyInProgress:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - idempotency_in_progress
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorPayloadTooLarge:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - payload_too_large
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorUnsupportedMediaType:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - unsupported_media_type
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorSemanticValidationFailed:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - semantic_validation_failed
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorRateLimitExceeded:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - rate_limit_exceeded
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorRateLimited:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - rate_limited
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorInternalError:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - internal_error
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorInvariantViolation:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - invariant_violation
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorBadGateway:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - bad_gateway
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorIdempotencyUnavailable:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - idempotency_unavailable
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorManagedAgentsUnavailable:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - managed_agents_unavailable
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorServiceUnavailable:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - service_unavailable
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsApiErrorGatewayTimeout:
      type: object
      properties:
        code:
          type: string
          minLength: 1
          description: Stable machine-readable error code.
          enum:
            - gateway_timeout
        message:
          type: string
          minLength: 1
          description: Human-readable error message.
        details:
          description: Optional structured error details.
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
      required:
        - code
        - message
      additionalProperties: false
      description: Standard flat error response.
    ManagedAgentsProviderWebhookDeliveryRequest:
      additionalProperties: false
      description: Verification configuration for a customer-owned Slack or GitHub webhook.
      properties:
        kind:
          description: Customer-configured webhook delivery.
          enum:
            - webhook
          type: string
        verificationCredential:
          $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef'
          description: Credential containing the provider signing secret.
      required:
        - kind
        - verificationCredential
      type: object
      example:
        kind: webhook
        verificationCredential:
          credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
    ManagedAgentsUnsignedWebhookDeliveryRequest:
      additionalProperties: false
      description: Custom webhook delivery without cryptographic verification.
      properties:
        kind:
          description: Customer-configured webhook delivery.
          enum:
            - webhook
          type: string
        verification:
          $ref: >-
            #/components/schemas/ManagedAgentsUnsignedCustomEventSourceVerification
          description: Explicit unsigned-delivery policy.
      required:
        - kind
        - verification
      type: object
      example:
        kind: webhook
        verification:
          type: none
    ManagedAgentsHmacWebhookDeliveryRequest:
      additionalProperties: false
      description: Custom webhook delivery authenticated by HMAC-SHA256.
      properties:
        kind:
          description: Customer-configured webhook delivery.
          enum:
            - webhook
          type: string
        verification:
          $ref: '#/components/schemas/ManagedAgentsHmacCustomEventSourceVerification'
          description: HMAC verification rules applied to every delivery.
      required:
        - kind
        - verification
      type: object
      example:
        kind: webhook
        verification:
          signatureHeader: example
          signaturePrefix: example
          signedParts:
            - kind: body
          type: hmac_sha256
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
    ManagedAgentsEventSourceDelivery:
      description: 'Delivery identity: a customer webhook or an integration connection.'
      oneOf:
        - $ref: '#/components/schemas/ManagedAgentsWebhookEventSourceDelivery'
        - $ref: '#/components/schemas/ManagedAgentsIntegrationEventSourceDelivery'
      type: object
      example:
        kind: webhook
        verification:
          signatureHeader: example
          signaturePrefix: example
          signedParts:
            - kind: body
          type: none
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        verificationCredential:
          credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        webhookUrl: example
    ManagedAgentsEventSourceCredentialRef:
      additionalProperties: false
      description: Reference to a managed credential; secret material is never returned.
      properties:
        credentialId:
          description: Credential within the vault that contains the verification secret.
          format: uuid
          type: string
        vaultId:
          description: Vault containing the secret used to verify inbound deliveries.
          format: uuid
          type: string
      required:
        - vaultId
        - credentialId
      type: object
      example:
        credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
    ManagedAgentsUnsignedCustomEventSourceVerification:
      additionalProperties: false
      description: Explicit unsigned-delivery policy for a custom webhook.
      properties:
        type:
          description: Accept deliveries without a cryptographic signature.
          enum:
            - none
          type: string
      required:
        - type
      type: object
      example:
        type: none
    ManagedAgentsHmacCustomEventSourceVerification:
      additionalProperties: false
      description: HMAC-SHA256 verification policy for a custom webhook.
      properties:
        signatureHeader:
          description: HTTP header carrying the delivery signature.
          maxLength: 256
          minLength: 1
          type: string
        signaturePrefix:
          default: ''
          description: >-
            Optional literal prefix removed from the signature header before
            comparison.
          maxLength: 256
          type: string
        signedParts:
          description: >-
            The raw request body used as the HMAC input; v1 requires exactly one
            body part.
          items:
            $ref: '#/components/schemas/ManagedAgentsEventSourceSignedPart'
          maxItems: 1
          minItems: 1
          type: array
        type:
          description: >-
            Verify a hexadecimal HMAC-SHA256 signature before admitting the
            delivery.
          enum:
            - hmac_sha256
          type: string
        verificationCredential:
          $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef'
          description: Credential containing the HMAC secret.
      required:
        - type
        - verificationCredential
        - signatureHeader
        - signedParts
      type: object
      example:
        signatureHeader: example
        signaturePrefix: example
        signedParts:
          - kind: body
        type: hmac_sha256
        verificationCredential:
          credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
    ManagedAgentsWebhookEventSourceDelivery:
      additionalProperties: false
      description: >-
        Customer-owned webhook endpoint and its non-secret verification
        configuration.
      properties:
        kind:
          description: Customer-configured webhook delivery.
          enum:
            - webhook
          type: string
        verification:
          $ref: '#/components/schemas/ManagedAgentsEventSourceVerificationResponse'
          description: Verification policy for custom webhook delivery.
        verificationCredential:
          $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef'
          description: Signing-secret reference for Slack or GitHub webhook delivery.
        webhookUrl:
          description: Relative public endpoint to configure at the event provider.
          readOnly: true
          type: string
      required:
        - kind
        - webhookUrl
      type: object
      example:
        kind: webhook
        verification:
          signatureHeader: example
          signaturePrefix: example
          signedParts:
            - kind: body
          type: none
          verificationCredential:
            credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
            vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        verificationCredential:
          credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        webhookUrl: example
    ManagedAgentsIntegrationEventSourceDelivery:
      additionalProperties: false
      description: >-
        Connection-managed delivery; no customer webhook or verification
        credential is required.
      properties:
        connectionId:
          description: Owning integration connection in the same workspace.
          format: uuid
          readOnly: true
          type: string
        kind:
          description: Delivery through the platform integration callback.
          enum:
            - integration
          type: string
      required:
        - kind
        - connectionId
      type: object
      example:
        connectionId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
        kind: integration
    ManagedAgentsEventSourceSignedPart:
      additionalProperties: false
      description: One ordered component of the HMAC signature input.
      properties:
        kind:
          description: >-
            Delivery component included in the signature input; currently the
            exact request body.
          enum:
            - body
          type: string
      required:
        - kind
      type: object
      example:
        kind: body
    ManagedAgentsEventSourceVerificationResponse:
      additionalProperties: false
      description: Verification policy for a custom webhook event source.
      properties:
        signatureHeader:
          description: HTTP header carrying the signature for signed deliveries.
          type: string
        signaturePrefix:
          description: Literal prefix removed before comparing a signature.
          type: string
        signedParts:
          description: Ordered delivery components used as the signature input.
          items:
            $ref: '#/components/schemas/ManagedAgentsEventSourceSignedPart'
          type: array
        type:
          description: Verification algorithm configured for custom webhook deliveries.
          enum:
            - none
            - hmac_sha256
          type: string
        verificationCredential:
          $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef'
          description: >-
            Credential reference used by signed deliveries; omitted when
            verification is none.
      required:
        - type
      type: object
      example:
        signatureHeader: example
        signaturePrefix: example
        signedParts:
          - kind: body
        type: none
        verificationCredential:
          credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
          vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A Recursion API key, created in the console under API keys.

````