> ## Documentation Index > Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt > Use this file to discover all available pages before exploring further. # Replace an event source configuration > Replaces the complete writable webhook configuration while preserving lifecycle state. Connection-managed sources cannot be replaced. Requires the latest strong ETag in If-Match. ## OpenAPI ````yaml /managed-agents/openapi.yaml put /managed-agents/v1/event-sources/{eventSourceId} openapi: 3.1.0 info: title: Managed Agents API version: 0.13.0 description: >- The Recursion Managed Agents REST API. Authenticate with a Recursion API key as a bearer token. An organization-scoped key acts in its own organization and needs nothing else; a tenant-scoped key must also send `x-organization-id` with an organization id or `default`. Field names follow each operation's published schema. servers: - url: https://api.recursion.labelbox.com security: - bearerAuth: [] paths: /managed-agents/v1/event-sources/{eventSourceId}: put: tags: - Event Sources summary: Replace an event source configuration description: >- Replaces the complete writable webhook configuration while preserving lifecycle state. Connection-managed sources cannot be replaced. Requires the latest strong ETag in If-Match. operationId: managedAgentsReplaceEventSource parameters: - description: Stable event-source identifier. in: path name: eventSourceId required: true schema: description: Stable event-source identifier. format: uuid type: string - description: Strong ETag returned by the latest event-source member read. in: header name: If-Match required: true schema: description: Strong ETag returned by the latest event-source member read. type: string requestBody: content: application/json: schema: oneOf: - $ref: '#/components/schemas/ManagedAgentsSlackEventSourceRequest' - $ref: '#/components/schemas/ManagedAgentsGithubEventSourceRequest' - $ref: >- #/components/schemas/ManagedAgentsUnsignedCustomEventSourceRequest - $ref: >- #/components/schemas/ManagedAgentsHmacCustomEventSourceRequest required: true responses: '200': content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsEventSourceResponse' description: >- Configured inbound event source, including its verification policy and lifecycle state. headers: ETag: description: Strong validator for this resource revision. schema: type: string style: simple '400': description: The request was rejected by schema or semantic validation. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorInvalidRequest' '401': description: The caller is unauthenticated. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorUnauthorized' '403': description: The caller lacks a required permission or capability. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorForbidden' '404': description: No such resource is reachable for this caller. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorNotFound' '409': description: >- The request conflicts with the resource state, or with an in-flight idempotent replay. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorConflict' '412': description: A request precondition does not match the current resource state. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorPreconditionFailed' '413': description: The request exceeds a size or transaction budget. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorPayloadTooLarge' '415': description: The request body uses a media type this operation does not accept. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorUnsupportedMediaType' '422': description: The request is well formed but failed semantic validation. content: application/json: schema: $ref: >- #/components/schemas/ManagedAgentsApiErrorSemanticValidationFailed '428': description: The request requires a precondition. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorPreconditionRequired' '429': headers: Retry-After: description: Seconds the caller should wait before retrying. schema: type: string style: simple description: A rate limit is exhausted. Honor `Retry-After`. content: application/json: schema: oneOf: - $ref: >- #/components/schemas/ManagedAgentsApiErrorRateLimitExceeded - $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimited' discriminator: propertyName: code mapping: rate_limit_exceeded: $ref: >- #/components/schemas/ManagedAgentsApiErrorRateLimitExceeded rate_limited: $ref: '#/components/schemas/ManagedAgentsApiErrorRateLimited' '500': description: An unexpected server-side failure. content: application/json: schema: oneOf: - $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError' - $ref: >- #/components/schemas/ManagedAgentsApiErrorInvariantViolation discriminator: propertyName: code mapping: internal_error: $ref: '#/components/schemas/ManagedAgentsApiErrorInternalError' invariant_violation: $ref: >- #/components/schemas/ManagedAgentsApiErrorInvariantViolation '502': description: The service returned an invalid response. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorBadGateway' '503': headers: Retry-After: description: Seconds the caller should wait before retrying. schema: type: string style: simple description: A dependency is unavailable. Retryable. content: application/json: schema: oneOf: - $ref: >- #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable - $ref: >- #/components/schemas/ManagedAgentsApiErrorServiceUnavailable discriminator: propertyName: code mapping: managed_agents_unavailable: $ref: >- #/components/schemas/ManagedAgentsApiErrorManagedAgentsUnavailable service_unavailable: $ref: >- #/components/schemas/ManagedAgentsApiErrorServiceUnavailable '504': headers: Retry-After: description: When to retry, as delay seconds or an HTTP date. schema: type: string description: The service did not respond before the timeout. Retryable. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorGatewayTimeout' components: schemas: ManagedAgentsSlackEventSourceRequest: additionalProperties: false description: Closed configuration for a Slack Events API source. properties: delivery: $ref: '#/components/schemas/ManagedAgentsProviderWebhookDeliveryRequest' description: Customer-configured webhook delivery and verification. displayName: description: Human-readable source name shown in the automation catalog. maxLength: 256 minLength: 1 type: string type: description: Slack Events API protocol, verified with Slack's request signature. enum: - slack_events_api type: string required: - displayName - type - delivery type: object example: delivery: kind: webhook verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d displayName: example type: slack_events_api ManagedAgentsGithubEventSourceRequest: additionalProperties: false description: Closed configuration for a GitHub webhook source. properties: delivery: $ref: '#/components/schemas/ManagedAgentsProviderWebhookDeliveryRequest' description: Customer-configured webhook delivery and verification. displayName: description: Human-readable source name shown in the automation catalog. maxLength: 256 minLength: 1 type: string type: description: GitHub webhook protocol, verified with GitHub's webhook signature. enum: - github_webhook type: string required: - displayName - type - delivery type: object example: delivery: kind: webhook verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d displayName: example type: github_webhook ManagedAgentsUnsignedCustomEventSourceRequest: additionalProperties: false description: >- Closed custom-webhook configuration that explicitly accepts unsigned deliveries. properties: delivery: $ref: '#/components/schemas/ManagedAgentsUnsignedWebhookDeliveryRequest' description: Customer-configured webhook delivery and verification. displayName: description: Human-readable source name shown in the automation catalog. maxLength: 256 minLength: 1 type: string type: description: Custom webhook protocol. enum: - custom_webhook type: string required: - displayName - type - delivery type: object example: delivery: kind: webhook verification: type: none displayName: example type: custom_webhook ManagedAgentsHmacCustomEventSourceRequest: additionalProperties: false description: >- Closed custom-webhook configuration that verifies HMAC-SHA256 signatures. properties: delivery: $ref: '#/components/schemas/ManagedAgentsHmacWebhookDeliveryRequest' description: Customer-configured webhook delivery and verification. displayName: description: Human-readable source name shown in the automation catalog. maxLength: 256 minLength: 1 type: string type: description: Custom webhook protocol. enum: - custom_webhook type: string required: - displayName - type - delivery type: object example: delivery: kind: webhook verification: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: hmac_sha256 verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d displayName: example type: custom_webhook ManagedAgentsEventSourceResponse: additionalProperties: false description: >- Configured inbound event source, including its verification policy and lifecycle state. properties: createdAt: description: Time the event source was created. format: date-time readOnly: true type: string delivery: $ref: '#/components/schemas/ManagedAgentsEventSourceDelivery' description: Webhook configuration or owning integration connection. displayName: description: Human-readable source name shown in the automation catalog. type: string eventSourceId: description: Stable identifier for the event source. format: uuid readOnly: true type: string revision: description: Monotonic revision represented by the response ETag. format: int64 minimum: 1 readOnly: true type: integer status: description: >- Lifecycle state. Custom webhook sources start paused; connection-managed sources start active. enum: - paused - active readOnly: true type: string type: description: Inbound provider protocol interpreted by this source. enum: - slack_events_api - github_webhook - custom_webhook type: string updatedAt: description: Time the event source was last changed. format: date-time readOnly: true type: string required: - eventSourceId - displayName - type - delivery - status - revision - createdAt - updatedAt type: object example: createdAt: '2026-02-18T09:30:00.000Z' delivery: kind: webhook verification: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: none verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d webhookUrl: example displayName: example eventSourceId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d revision: 1 status: paused type: slack_events_api updatedAt: '2026-02-18T09:30:00.000Z' ManagedAgentsApiErrorInvalidRequest: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - invalid_request message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorUnauthorized: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - unauthorized message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorForbidden: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - forbidden message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorNotFound: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - not_found message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorConflict: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - conflict message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorPreconditionFailed: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - precondition_failed message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorPayloadTooLarge: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - payload_too_large message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorUnsupportedMediaType: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - unsupported_media_type message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorSemanticValidationFailed: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - semantic_validation_failed message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorPreconditionRequired: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - precondition_required message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorRateLimitExceeded: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - rate_limit_exceeded message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorRateLimited: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - rate_limited message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorInternalError: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - internal_error message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorInvariantViolation: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - invariant_violation message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorBadGateway: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - bad_gateway message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorManagedAgentsUnavailable: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - managed_agents_unavailable message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorServiceUnavailable: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - service_unavailable message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorGatewayTimeout: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - gateway_timeout message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsProviderWebhookDeliveryRequest: additionalProperties: false description: Verification configuration for a customer-owned Slack or GitHub webhook. properties: kind: description: Customer-configured webhook delivery. enum: - webhook type: string verificationCredential: $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef' description: Credential containing the provider signing secret. required: - kind - verificationCredential type: object example: kind: webhook verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsUnsignedWebhookDeliveryRequest: additionalProperties: false description: Custom webhook delivery without cryptographic verification. properties: kind: description: Customer-configured webhook delivery. enum: - webhook type: string verification: $ref: >- #/components/schemas/ManagedAgentsUnsignedCustomEventSourceVerification description: Explicit unsigned-delivery policy. required: - kind - verification type: object example: kind: webhook verification: type: none ManagedAgentsHmacWebhookDeliveryRequest: additionalProperties: false description: Custom webhook delivery authenticated by HMAC-SHA256. properties: kind: description: Customer-configured webhook delivery. enum: - webhook type: string verification: $ref: '#/components/schemas/ManagedAgentsHmacCustomEventSourceVerification' description: HMAC verification rules applied to every delivery. required: - kind - verification type: object example: kind: webhook verification: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: hmac_sha256 verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsEventSourceDelivery: description: 'Delivery identity: a customer webhook or an integration connection.' oneOf: - $ref: '#/components/schemas/ManagedAgentsWebhookEventSourceDelivery' - $ref: '#/components/schemas/ManagedAgentsIntegrationEventSourceDelivery' type: object example: kind: webhook verification: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: none verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d webhookUrl: example ManagedAgentsEventSourceCredentialRef: additionalProperties: false description: Reference to a managed credential; secret material is never returned. properties: credentialId: description: Credential within the vault that contains the verification secret. format: uuid type: string vaultId: description: Vault containing the secret used to verify inbound deliveries. format: uuid type: string required: - vaultId - credentialId type: object example: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsUnsignedCustomEventSourceVerification: additionalProperties: false description: Explicit unsigned-delivery policy for a custom webhook. properties: type: description: Accept deliveries without a cryptographic signature. enum: - none type: string required: - type type: object example: type: none ManagedAgentsHmacCustomEventSourceVerification: additionalProperties: false description: HMAC-SHA256 verification policy for a custom webhook. properties: signatureHeader: description: HTTP header carrying the delivery signature. maxLength: 256 minLength: 1 type: string signaturePrefix: default: '' description: >- Optional literal prefix removed from the signature header before comparison. maxLength: 256 type: string signedParts: description: >- The raw request body used as the HMAC input; v1 requires exactly one body part. items: $ref: '#/components/schemas/ManagedAgentsEventSourceSignedPart' maxItems: 1 minItems: 1 type: array type: description: >- Verify a hexadecimal HMAC-SHA256 signature before admitting the delivery. enum: - hmac_sha256 type: string verificationCredential: $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef' description: Credential containing the HMAC secret. required: - type - verificationCredential - signatureHeader - signedParts type: object example: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: hmac_sha256 verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsWebhookEventSourceDelivery: additionalProperties: false description: >- Customer-owned webhook endpoint and its non-secret verification configuration. properties: kind: description: Customer-configured webhook delivery. enum: - webhook type: string verification: $ref: '#/components/schemas/ManagedAgentsEventSourceVerificationResponse' description: Verification policy for custom webhook delivery. verificationCredential: $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef' description: Signing-secret reference for Slack or GitHub webhook delivery. webhookUrl: description: Relative public endpoint to configure at the event provider. readOnly: true type: string required: - kind - webhookUrl type: object example: kind: webhook verification: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: none verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d webhookUrl: example ManagedAgentsIntegrationEventSourceDelivery: additionalProperties: false description: >- Connection-managed delivery; no customer webhook or verification credential is required. properties: connectionId: description: Owning integration connection in the same workspace. format: uuid readOnly: true type: string kind: description: Delivery through the platform integration callback. enum: - integration type: string required: - kind - connectionId type: object example: connectionId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d kind: integration ManagedAgentsEventSourceSignedPart: additionalProperties: false description: One ordered component of the HMAC signature input. properties: kind: description: >- Delivery component included in the signature input; currently the exact request body. enum: - body type: string required: - kind type: object example: kind: body ManagedAgentsEventSourceVerificationResponse: additionalProperties: false description: Verification policy for a custom webhook event source. properties: signatureHeader: description: HTTP header carrying the signature for signed deliveries. type: string signaturePrefix: description: Literal prefix removed before comparing a signature. type: string signedParts: description: Ordered delivery components used as the signature input. items: $ref: '#/components/schemas/ManagedAgentsEventSourceSignedPart' type: array type: description: Verification algorithm configured for custom webhook deliveries. enum: - none - hmac_sha256 type: string verificationCredential: $ref: '#/components/schemas/ManagedAgentsEventSourceCredentialRef' description: >- Credential reference used by signed deliveries; omitted when verification is none. required: - type type: object example: signatureHeader: example signaturePrefix: example signedParts: - kind: body type: none verificationCredential: credentialId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d vaultId: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d securitySchemes: bearerAuth: type: http scheme: bearer description: A Recursion API key, created in the console under API keys. ````