mailbox.bot bronze

“Custom webhook workspace (operator-enabled): list_webhook_endpoints, create_webhook_endpoint, update_webhook_endpoint, verify_webhook_endpoint, test_webhook_endpoint, rotate_webhook_endpoint_secret, list_webhook_deliveries and replay_webhook_delivery share the REST control plane. Requires webhook.manage and matching key agent/environment. Account endpoints require a member key. Receiver verification, source activation and delivery success are distinct. Never put signing secrets into prompts/logs; deliver them to secure configuration only after explicit setup/rotation intent. Rules match saved OCR literally and grant no mail/handling authority. See https://mailbox.bot/docs/webhooks. Existing update_webhook remains a separate legacy callback. Read assigned inbound mail: load the agent's duties, find matching items, then retrieve their saved page evidence. REST and MCP use the same authorization, services and runtime schemas. The indexed-source workflow requires INBOUND_MAIL_DOCUMENTS_ENABLED; discovery alone do

✓ we checked this   “ the operator says this