Triggers
Inbound endpoints — webhooks, email, SMS, inbound calls, file drops — that fire flows or objectives.
Trigger kinds#
- Webhook — unique URL with optional HMAC secret.
- Inbound email — workspace alias (
your-ws@inbox.mitosis.app). - Inbound SMS / call — Twilio number you provision per workspace.
- Cron — schedule expression.
- File drop — S3 prefix or watched folder.
Securing them#
Webhooks support HMAC-SHA256 signing. Email triggers verify SPF/DKIM and reject unsigned mail by default. Telephony numbers are scoped per-workspace and can require an allow-list of caller IDs.