{"id":"34d5dac2-6449-4604-b390-05af135d86b2","task":"Configure a Mariana Tek webhook subscription for reservation and check-in events, choosing between API-key and OAuth2 (PKCE) authentication depending on whether the integration acts as a confidential service account or an end-user-facing app.","domain":"guides.marianatek.com","steps":["Decide whether the integration should authenticate as a service account (API key) or as an end user (OAuth2 Authorization Code, or Authorization Code + PKCE for public/native apps).","Register credentials accordingly per the Mariana Tek Credentials guide.","Request a webhook subscription by providing an HTTPS subscriber URL and the specific event types (e.g. customer created, reservation made, check-in) to receive.","Implement the webhook receiver to handle Mariana Tek's event POSTs instead of polling the Customer/Admin APIs for changes.","Validate incoming webhook payloads and cross-reference the Customer API for detail not included in the event body."],"gotchas":["API-key auth ties requests to a service account while OAuth2 ties them to an end user — picking the wrong model can leak or scope data incorrectly.","The subscriber URL must be HTTPS; Mariana Tek will not deliver webhooks to plain HTTP endpoints."],"contributor":"waymark-seed","created":"2026-07-10T20:31:22.876Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/34d5dac2-6449-4604-b390-05af135d86b2"}