Workflows
How lifecycles move quotes, invoices, tasks, orders, purchase orders and shipments through their stages, and how automations react to events, schedules and webhooks.
Organizations
How organizations work as the tenant boundary in CentraKit, and how to create, switch between, transfer and delete them.
Workflows
How lifecycles move quotes, invoices, tasks, orders, purchase orders and shipments through their stages, and how automations react to events, schedules and webhooks.
Organizations
How organizations work as the tenant boundary in CentraKit, and how to create, switch between, transfer and delete them.
How the integrations marketplace connects WhatsApp Business inbox channels, Google Calendar and signed incoming and outgoing webhooks to an organization.
Integrations connect the organization to outside services. The marketplace lists what is available, and each integration has a detail page where you set up its connections.
| Route | Purpose |
|---|---|
/{orgSlug}/integrations | Marketplace of all integrations. |
/{orgSlug}/integrations/{integrationSlug} | Detail page with resources and the configuration section. |
/{orgSlug}/integrations/whatsapp/create | New WhatsApp connection. |
/{orgSlug}/integrations/whatsapp/{connectionId} | Edit a WhatsApp connection. |
/{orgSlug}/integrations/webhooks/incoming/create | New incoming webhook endpoint. |
/{orgSlug}/integrations/webhooks/incoming/{endpointId} | Edit an incoming endpoint. |
/{orgSlug}/integrations/webhooks/outgoing/create | New outgoing webhook destination. |
/{orgSlug}/integrations/webhooks/outgoing/{destinationId} | Edit an outgoing destination. |
The marketplace shows Featured, Recently Added, Native Integrations and All Integrations. You can search, sort by popularity and filter by category and availability. Each integration has one availability:
| Availability | Meaning |
|---|---|
| Available | You can set it up now. |
| Coming soon | Being built. |
| Planned | On the roadmap. |
| Deprecated | Still works, but will be removed. |
| Unavailable | Cannot be used in this deployment. |
These integrations are available today:
| Integration | Slug | What it does |
|---|---|---|
| WhatsApp Business | whatsapp | Receives and sends WhatsApp messages as Inbox conversations. |
| Google Calendar | google-calendar | Imports Google calendars into the Agenda. |
| Webhooks | webhooks | Receives JSON that starts workflows and posts signed events to your own systems. |
Not yet available: Slack and Resend are coming soon. Email, Stripe, Exact Online, Microsoft Teams, Google Drive and OneDrive are planned.
For an integration that is not available yet, select Request this integration to help prioritize it. The detail page also lists integration resources such as the website, documentation, support, terms and privacy policy, and whether it installs for the organization or per user.
A connection is one configured instance of an integration, such as one WhatsApp phone number. Inbox connections show a health status: Healthy, Degraded, Unhealthy, Error or Unknown.
Incoming messages then create or continue conversations in the inbox. To change the access token or app secret later, enter a new value; leave the field blank to keep the current one.
Google Calendar connects per user. On the Google Calendar detail page, connect your Google account and choose which calendars to import. Imported calendars are read-only in the agenda and sync in the background. See Agenda for sync behavior and reconnecting.
The Webhooks detail page has three sections: Incoming endpoints, Outgoing destinations and Recent deliveries.
An incoming endpoint is a public URL that receives JSON and starts matching workflows. A workflow uses it through a webhook trigger, and only published workflows start runs.
POST /api/v1/public/webhooks/{token}.Each request must prove it knows the secret. Sign the request with the secret as X-Centrakit-Signature over timestamp.body, or send the secret as X-Webhook-Secret or a Bearer token.
Rotate URL issues a new public token and invalidates the previous one immediately. Rotate secret issues a new shared secret.
An outgoing destination is a signed HTTPS URL that receives domain events and workflow webhook actions.
Each delivery is JSON signed with X-CentraKit-Timestamp and X-CentraKit-Signature, so your system can verify it with the signing secret. Send test queues a delivery with event kind webhook.test, which does not start a workflow. Rotate secret issues a new signing secret.
Recent deliveries lists each outgoing delivery with its status: pending, processing, completed, failed, dead lettered or canceled. Failed deliveries are retried automatically, and you can retry one by hand.
| Key | Grants |
|---|---|
organization.integrations.manage | Open the marketplace and integration detail pages, and create and edit WhatsApp connections and Google Calendar import settings. |
organization.webhooks.view | View incoming endpoints, outgoing destinations and deliveries. |
organization.webhooks.create | Create endpoints and destinations. |
organization.webhooks.update | Edit endpoints and destinations, rotate URLs and secrets, send tests and retry deliveries. |
organization.webhooks.delete | Delete endpoints and destinations. |
Any member can request an integration. Platform administrators manage the marketplace catalog in Admin integrations. See Access control for roles.
Workflows use webhooks in two ways: a webhook trigger starts a run when an incoming endpoint receives JSON, and a webhook action posts to an outgoing destination. See Workflows.
The assistant and MCP clients can manage webhooks with these tools:
| MCP tool | Access |
|---|---|
listWebhookEndpoints, getWebhookEndpoint | Read |
createWebhookEndpoint, updateWebhookEndpoint, deleteWebhookEndpoint | Write |
rotateWebhookEndpointSecret, rotateWebhookEndpointToken | Write |
listWebhookDestinations, getWebhookDestination | Read |
createWebhookDestination, updateWebhookDestination, deleteWebhookDestination | Write |
rotateWebhookDestinationSecret | Write |
listWebhookDeliveries, getWebhookDelivery | Read |
WhatsApp connections and Google Calendar have no MCP tools.
Paths are relative to /api/v1/organizations/{organizationId}.
| Method | Path | Permission |
|---|---|---|
| GET, POST | /webhooks/endpoints | organization.webhooks.view, organization.webhooks.create |
| GET, PATCH, DELETE | /webhooks/endpoints/{endpointId} | view, update, delete |
| POST | /webhooks/endpoints/{endpointId}/rotate-secret | organization.webhooks.update |
| POST | /webhooks/endpoints/{endpointId}/rotate-token | organization.webhooks.update |
| GET, POST | /webhooks/destinations | organization.webhooks.view, organization.webhooks.create |
| GET, PATCH, DELETE | /webhooks/destinations/{destinationId} | view, update, delete |
| POST | /webhooks/destinations/{destinationId}/rotate-secret | organization.webhooks.update |
| GET | /webhooks/deliveries | organization.webhooks.view |
| GET | /webhooks/deliveries/{deliveryId} | organization.webhooks.view |
Meta calls GET and POST /channels/{connectionId}/webhook under the same organization path to verify and deliver WhatsApp messages. Background jobs process channel messages and outgoing deliveries every minute.
See Webhooks for developers for payloads and signature verification, and OpenAPI for schemas.
Last updated on
Workflows
How lifecycles move quotes, invoices, tasks, orders, purchase orders and shipments through their stages, and how automations react to events, schedules and webhooks.
Organizations
How organizations work as the tenant boundary in CentraKit, and how to create, switch between, transfer and delete them.