Invoke endpoint tokens and rate limits
The per-agent HTTP invoke endpoint now accepts a token, answers before the agent runs, and is rate limited. Outbound webhooks no longer hold a database connection while calling your endpoint.
Invoke tokens
POST /api/webhooks/{agent_id} now takes an X-Maritime-Webhook-Token header or a ?token= query parameter. Fetch the token and a ready-to-paste URL from GET /api/webhooks/{agent_id}/token while signed in. Calls without a token keep working during a deprecation window; once it closes they return 401, so add the token to your integrations now.
API referenceAccept first, deliver in the background
The endpoint answers as soon as the payload is accepted and delivers it to the agent afterwards, waking the agent if it is asleep. A burst of calls returns 429 with a Retry-After header (30 per minute per agent and caller) instead of piling up.
Outbound webhook delivery
Deliveries to your webhook endpoints now run concurrently and never hold a database connection open while waiting on your server, so a slow endpoint cannot affect anyone else.