---
title: "Deliver Agent Trigger Webhook"
method: POST
path: "/api/agent-triggers/{trigger_id}/deliver"
tags: ["agent-triggers"]
---

# Deliver Agent Trigger Webhook

`POST /api/agent-triggers/{trigger_id}/deliver`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/api/agent-triggers/{trigger_id}/deliver`
- Auth: none declared

Accept an inbound webhook delivery and enqueue one agent task run (TOS-2025).

Deliberately has NO ``get_identity`` dependency: the caller is an external
system (HubSpot, Stripe, a CI hook) that has no thinqOS identity. It is
authorized by the delivery token plus, when the trigger configures a signing
secret, an HMAC signature over the raw body. This follows the repo's Cloud
Run convention: the service is deployed allow-unauthenticated and every
route gates itself at the application layer.

Returns 202 as soon as the run is enqueued. It does NOT wait for the agent
turn, because a vendor's webhook client times out long before one finishes;
the scheduler's drain executes it out of band.

## Path parameters

- `trigger_id` string, uuid, required

## Headers

- `x-thinqos-delivery-token` string, nullable
- `x-thinqos-signature` string, nullable
- `x-thinqos-delivery-id` string, nullable

## Response `202`

Successful Response

- WebhookDeliveryResponse
  - `status` 'queued' | 'duplicate', required
  - `run_id` string, uuid, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/5387b4ded614?raw)