---
title: "Google Risc Webhook"
method: POST
path: "/webhooks/google-risc"
tags: ["webhooks"]
---

# Google Risc Webhook

`POST /webhooks/google-risc`

## Request

- Base URL: `https://api.meetadmiral.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.meetadmiral.com/webhooks/google-risc`
- Auth: none declared

Google Cross-Account Protection push delivery.

The body is a Security Event Token — a JWT, not JSON — and its signature
is the authentication. Reject anything that doesn't verify; acknowledge
everything that does with 202 so Google's retry budget is saved for real
outages. jwt.PyJWTError covers signature, issuer, and audience failures
in one catch because the caller can't act on the distinction anyway.

## Response `202`

Successful Response

- unknown

---

[API](https://skmtc.dev/meetadmiral/apis/admiral-api.md) · [All operations](https://skmtc.dev/meetadmiral/apis/admiral-api/llms.txt) · [OpenAPI document](https://skmtc.dev/meetadmiral/apis/admiral-api/revisions/3cf1ee58ce50?raw)