Register a flow callback endpoint

POST

/api/v4/ai/duo_workflows/flow_callbacks

• GitLab REST API

Registers an HTTPS endpoint for Duo flow lifecycle callbacks. Reference the returned id via callback_hook_id when creating a flow. Secrets are never returned.

Authorizations

• http
• oauth2

Request Body^required

Media typeapplication/json

object

url

required

HTTPS URL that receives callbacks

string

nullable <= 8192 characters

Example

https://autoflow.example.com/duo/callbacks

name

A label for this endpoint

string

nullable <= 255 characters

signing_token

HMAC signing secret in whsec_ format, used to compute the webhook-signature header so you can verify payloads. Not returned.

string

nullable <= 51 characters

token

Optional shared secret sent verbatim as the X-Gitlab-Token header. Not returned.

string

nullable <= 8192 characters

Responses

201

Created

Media typeapplication/json

object

id

integer

url

string

name

string

signing_token_set

boolean

token_set

boolean

created_at

string format: date-time

Example

{
  "id": 1,
  "url": "https://autoflow.example.com/duo/callbacks",
  "name": "AutoFlow",
  "signing_token_set": true,
  "token_set": false,
  "created_at": "2026-07-22T11:37:00Z"
}

400

Validation failed

401

Unauthorized

403

Forbidden