A valid request URL is required to generate request examples{
"success": true,
"data": {
"id": "dest_7a2c",
"name": "Sales Hermes",
"provider": "hermes",
"deliveryMode": "webhook_queue",
"endpointUrl": "https://ops.example.com/flowyte/escalations",
"allowedChannels": [
"chat"
],
"capabilities": [
"reply",
"resolve"
],
"contextProfile": "sales",
"transcriptWindow": 20,
"claimSlaSeconds": 120,
"status": "unverified",
"fallbackRef": "email:sales@example.com",
"signingSecret": "whsec_3f9a1c2b7e10a24d51b6f2c8d4e5a9f0",
"createdAt": "2026-07-12T09:00:00.000Z",
"updatedAt": "2026-07-12T09:00:00.000Z"
}
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}Create an escalation destination (signing secret shown once)
Register an external operator-agent endpoint. The server generates a whsec_ signing secret returned EXACTLY ONCE in this response and never again — store it immediately. The endpoint must be https and pass an SSRF/private-IP check; provider must be an AI Harness whose integration is connected; any sms channel requires the org’s 10DLC/TCR campaign to be ACTIVE. The new destination starts unverified — run testEscalationDestination to flip it active before it can route live. capabilities is a free-form list of capability tokens the external agent advertises (e.g. “reply”, “resolve”); fallbackRef uses the grammar external:<id> | email:<address> | none.
A valid request URL is required to generate request examples{
"success": true,
"data": {
"id": "dest_7a2c",
"name": "Sales Hermes",
"provider": "hermes",
"deliveryMode": "webhook_queue",
"endpointUrl": "https://ops.example.com/flowyte/escalations",
"allowedChannels": [
"chat"
],
"capabilities": [
"reply",
"resolve"
],
"contextProfile": "sales",
"transcriptWindow": 20,
"claimSlaSeconds": 120,
"status": "unverified",
"fallbackRef": "email:sales@example.com",
"signingSecret": "whsec_3f9a1c2b7e10a24d51b6f2c8d4e5a9f0",
"createdAt": "2026-07-12T09:00:00.000Z",
"updatedAt": "2026-07-12T09:00:00.000Z"
}
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}{
"type": "about:blank",
"title": "<string>",
"status": 123,
"detail": "<string>",
"instance": "<string>",
"code": "<string>",
"errors": [
{
"field": "<string>",
"message": "<string>"
}
]
}Authorizations
Flowyte secret API key (Authorization: Bearer flowyte_sk_live_…). Scope-gated; is scoped to your organization — a key can never reach another tenant. The listed scopes in each operation's apiKey requirement are the scopes that key must hold. The tokenUrl is nominal: keys are minted in the dashboard.
Body
hermes, openclaw https required; validated against the SSRF/private-IP guard.
Defaults to [chat] when omitted. sms requires an ACTIVE 10DLC/TCR campaign.
chat, sms general, sales, support, billing, scheduling