Meta webhook verification handshake (public)

GET 
/api/meta/webhook

PUBLIC server-to-server handshake Meta calls ONCE when the operator saves the callback URL in their Meta App. NO session / Sanctum / tenant / CSRF. Echoes hub.challenge (plain text, 200) when hub.verify_token matches the PLATFORM verify token (config; one platform Meta App); otherwise 403.

Request

Responses

200

The challenge string, echoed verbatim.

403

The verify token did not match the platform verify token.