Register a webhook
Paste the HTTP endpoint of any n8n, Zapier or Make workflow. Define its input fields, credit cost, and whether it runs sync or async. The URL is encrypted at rest.
Register any n8n or Zapier webhook as a tool. Share it with your team, run it from one console, and pay per execution — every call HMAC-signed and SSRF-guarded.
HMAC-SHA256
SIGNING
SYNC + ASYNC
EXECUTION
TWO-PHASE
CREDIT COMMIT
$ autohub run summarize-q3 --input report.pdf
→ POST hooks.n8n.cloud/webhook/summarize
→ X-AutoHub-Signature: sha256 ✓ · ssrf-guard pass
✓ executed in 1.24s — 1 credit debited
$ autohub run brand-kit --prompt "launch teaser"
⠿ dispatching async · signed callback armed
$
fig. 01 — signed execution trace, illustrative
No credit card required · 10 free credits on signup
SYS.02 / Flight plan
No SDK, no code changes to your workflow. If it speaks HTTP, it can fly here.
Paste the HTTP endpoint of any n8n, Zapier or Make workflow. Define its input fields, credit cost, and whether it runs sync or async. The URL is encrypted at rest.
An admin reviews the tool and it receives a unique signing secret. From then on every outbound call carries an HMAC-SHA256 signature your workflow can verify — the same pattern Stripe and GitHub use.
Users run the tool from the console or the API. Credits are debited in a two-phase commit and refunded automatically if the run fails. Every execution is logged and auditable.
X-AutoHub-Timestamp: 1783020000X-AutoHub-Signature: sha256=hmac(secret, ts.id.body)± 300s replay windowfig. 02 — verification headers sent with every call
SYS.03 / Capabilities
Built for teams running n8n, Zapier, or any HTTP webhook platform. Six subsystems, one console.
Paste any n8n, Zapier or Make webhook URL to register it as a tool. URLs and auth headers are encrypted at rest; no code changes needed.
Every tool gets a unique signing secret. Calls and callbacks carry SHA-256 signatures with a replay window — the same standard as Stripe and GitHub.
Sync tools return results immediately. Async tools let your workflow call back when ready — perfect for long-running jobs.
Three-tier RBAC: users run tools, moderators create and share them, admins approve and govern. Private tools support per-user grants.
Failing endpoints trip a breaker: calls reject fast, credits refund automatically, and the tool is flagged degraded until it recovers.
Execute tools programmatically with scoped API keys. Every auth event and execution lands in an immutable audit log.
SYS.04 / Access tiers
One credit ≈ one execution. Failed runs are refunded automatically. No hidden fees, no lock-in.
Free
10 credits on signup
Pro
500 credits / month
Credit Packs
no expiry · stackable
fig. 04 — access matrix · all tiers include HMAC signing & SSRF guard
SYS.05 / Flight manual