Hi @oliverf82757722 - in addition to what Urs said (setting require-adobe-auth to false to avoid the token check for webhook), there is a simple way to give some security to your webhook (though not as secure as require-adobe-auth), that you could add `require-whisk-auth: some-password` to your acti...