- “the workflow ran”
- and
- “the workflow posted something externally”
The recommended way: outbound.post
ClawRecipes supports workflow publishing through the runner-native tool:
- better separation of concerns
- credentials stay out of workflow files
- easier audit logging
- better idempotency / retry safety
- approval proof can be enforced
What you need to configure
outbound.post needs two plugin config values:
outbound.baseUrloutbound.apiKey
Example workflow node
Tool arguments
Expected arguments:platform,text, andidempotencyKeyare required- use a stable
idempotencyKeyacross retries approvalis optional unless your outbound service requires proof
Important note about installs and posting
A normal ClawRecipes install does not automatically mean posting is active.Supported path
If you configureoutbound.post, great — that is the supported path.
Local custom patch path
If your controller relies on a custom local patch (for example, a local posting helper wired directly into workflow execution), that patch may need to be reapplied after install/update. That means after installing or updating ClawRecipes, you may need to:- reapply your local workflow posting patch, or
- tell your assistant to turn workflow posting back on for your local controller
- workflows run successfully
- approvals succeed
- but nothing actually gets posted
Example post-install checklist
After a fresh install or update:Expected outbound service API
ClawRecipes expects something like:POST /v1/<platform>/publishAuthorization: Bearer <apiKey>Idempotency-Key: <string>
Security notes
- do not put platform credentials in workflow files
- prefer a local/tailnet-only outbound service
- treat outbound publishing as a side-effecting action that should usually be approval-gated
- use idempotency keys so retries do not double-post
