AliasRelay — Admin

Webhook receiver URL

Where verification codes are pushed as a signed POST. Editable live — no redeploy. Must be https. Clear it to fall back to the WEBHOOK_RECEIVER_URL Worker secret.

Receiver endpoint

Local test (no webhook)

codes caught here — no receiver needed

While no webhook receiver is set, the relay stashes each verification code briefly (10 min) so you can test the full flow right here — no local server or tunnel. Mint an address, sign up on the provider with it, and the code appears below automatically.

Domain — which relay domain to mint on

Test address — sign up with this

Received code

Client credentials

Shared with the integrating client. Masked by default — reveal only to copy, and hand them over on a secure channel. Every reveal is audited.

MINT_TOKEN — bearer for POST /api/mint

WEBHOOK_SIGNING_SECRET — verifies X-AliasRelay-Signature

Integration reference

Active relay domains — POST /api/mint on any of these

Mint endpoint (example)

—

Receiver id (bound into every capability)

—

Webhook signature header

—

Event fields (JSON body)

—

📬 AliasRelay Admin

Portal Domains

Client Integration

Webhook receiver URL

Local test (no webhook)

Client credentials

Integration reference

Import Domains

Remove Domain From Registry

Mark Domain Verified

📬 AliasRelay

Portal Domains

Client Integration

Webhook receiver URL

Local test (no webhook)

Client credentials

Integration reference