Public MLOS vendor webhook routes on the platform API hosts (owner-approved)

Shipped

November 8, 2026 at 4:12 AM UTC

Author

Kamo

Commit

369adfd

POST-only, full-path regexes on api.kamouniverse.com / api.kamocrm.com, straight to their services: **************** -> kamomlosvendor-service and **************** -> **************** Identity headers stripped, security headers, a webhook-sized rate limit and a 1 MiB body cap. Nothing else on either service (including /internal/**) matches; the test pins that.