# Publish a URL something else can post into the inbox

`POST /api/v1/ingest-endpoints`

MCP tool: `create-ingest-endpoint`

Publishes a URL a third party posts captures into, and answers with the token a delivery presents, once. It is a secret: hand it to whatever will post, and never write it into a task or a capture. `source` cannot change later.

## Responses

- `201` — The endpoint, and the token if this mode has one
- `400` — The request does not match the operation's schema
- `403` — An API key cannot mint, change, rotate or revoke an ingest endpoint — a permanent credential issuing another one is an escalation. Sign in, or use a token that signing in issued.
- `404` — No such endpoint on this account, or a `suggested_project` that resolves to nothing — and the answer a project-restricted credential gets for every operation here, since the inbox has no project for a restriction to narrow.