Inbound Postmark

Postmark inbound webhook + Cloudflare Email Worker target.

Shared-secret validation: Postmark is configured to POST to /inbound/postmark?token=<TANDEM_POSTMARK_INBOUND_TOKEN>. The query-string token matches the TANDEM_POSTMARK_INBOUND_TOKEN env var. Any mismatch returns 401 without parsing. Empty env var = accept unauthenticated (dev-mode only — do NOT run in prod with the token unset).

Flow:

  1. Validate shared-secret query param
  2. Parse Postmark inbound JSON → envelope dict (tandem.api.inbound)
  3. Persist via repository.save_envelope()
  4. Return the created message_id/thread_id so Postmark's retry logic can see a 2xx and move on.
post/inbound/postmark

Request

  • Base URL: https://www.tandem-cc.com (the document declares no server; this is the origin it was published from)
  • URL: https://www.tandem-cc.com/inbound/postmark
  • Auth: none declared

Response

Successful Response

object required

Changes

No recorded changes to this operation across all 1 revision of this API.