ARMARA Course 03

Course 03 / Module 05

Register a callback URL

Read the webhook contract, prepare a controlled receiver, and recognize the verified registration failure before any payload leaves the machine.

Level
Beginner to intermediate
Time
12 minutes
Commands
4
Finish
A safe stopped test

Video / coming soon

The written lesson is complete now.

Use a controlled receiver only

The production test used a temporary listener on 127.0.0.1. Registration failed before any payload was sent, and the listener was stopped.

A loopback listener is suitable for a local contract test. Do not target production.
01

Read only the documented direction

Run in your terminal
armaraos webhooks create <AGENT> <URL>
Run in your terminal
armaraos webhooks test <ID>
Real webhook create and test help showing agent, callback URL, and test ID
Fresh live help / exact contract / 24 August 2026

Help calls the URL a callback and says test sends a payload. Do not infer more about event direction until end-to-end evidence exists.

02

Choose a receiver you control

Use a temporary listener on loopback or a request-capture endpoint you own. Never target production or somebody else's system.

03

Verify state before retrying

Run in your terminal
armaraos webhooks create <UUID> <CONTROLLED_URL>
Run in your terminal
armaraos webhooks list --json
Real invalid-trigger-pattern failure followed by an empty webhook list
Fresh live output / controlled loopback rejected / no registration

The documented form failed with Invalid trigger pattern and the list stayed empty. Do not retry variants against an outside URL or invent an ID.

04

Keep live-send semantics explicit

Run in your terminal
armaraos webhooks test <ID>

When registration works in a future build, test is a real send. Confirm the exact ID and watch the controlled receiver. This build never reached that step.

05

Preserve the deletion boundary

Run in your terminal
armaraos webhooks delete <ID>

Deletion is permanent and has no dry run. No registration ID existed in this verification, so no delete command was staged.

06

Carry the production checklist

  1. Receiver owned and temporary.
  2. Exact UUID and URL reviewed.
  3. Registration visible in JSON.
  4. One test payload visible at the receiver.
  5. Exact registration deleted and absence verified.

Check it / read actual state

Do not test without an ID.

Run in your terminal
armaraos webhooks list --json

On the verified build, confirm the list is empty and explain why no payload test follows without a real registration.

Safety note

Webhook test is a live outbound action when a registration exists. Never aim it at production, a colleague's system, or a URL whose owner and retention policy you do not know.

Troubleshooting for this sitting
What you seeLikely causeWhat to do
Invalid trigger patternVerified 0.8.3 registration defect.Stop and preserve version details.
List is emptyNo registration exists.Do not test or delete an invented ID.
Receiver sees nothingRegistration or send did not complete.Inspect list and result first.
URL ownership is unclearThe destination is unsafe.Do not register it.

Back to Module 3.4

Next / Module 3.6

TRACK B: react instead of poll

Lesson ready