Promptwatch Logo

Inngest

Inngest is a platform for building event-driven applications.
Inngest
Webhook

What is Inngest?

Inngest invokes application functions through a public serve endpoint, commonly /api/inngest. The SDK adapter uses GET for development metadata, POST to invoke functions, and PUT to synchronize function configuration. Requests seen under the Inngest token are therefore part of an application that has been connected to Inngest, not visits to ordinary site pages.

Each Inngest environment has a pre-shared signing key. Requests to the serve endpoint include a signed timestamp, and the Inngest SDK verifies both the signature and freshness before exposing the invocation to function code. The same key also authenticates configuration sent from the application to the Inngest API.

Failed functions and step.run() work are retried by Inngest. The default is four retries in addition to the first attempt, though applications can change that setting. Completed step results are persisted, but external side effects still need idempotency so a retry cannot create duplicates.

This traffic coordinates code that the site owner registered with Inngest. It does not crawl pages for discovery and has no direct effect on AI answer inclusion or model training. Robots.txt is irrelevant to the serve endpoint because Inngest authenticates an explicit application callback with its signing key.

Not relevant for AI search

Is Inngest relevant for AI search?

No. Inngest is not part of AI search or training, so allowing or blocking it does not change your AI visibility.

Inngest is not a crawler. It delivers webhook notifications to endpoints you registered, so it never fetches public content for an AI product. Robots.txt does not apply, and allowing or blocking it has no effect on AI search or training.

How to handle Inngest

If the application runs Inngest functions, route the configured serve path to the official SDK handler and set INNGEST_SIGNING_KEY from the matching Inngest environment. Let the SDK reject missing, invalid, or stale signatures. A WAF rule should expose only the serve path needed by Inngest rather than trusting the Inngest user agent across the site.

During key rotation, deploy the new key with INNGEST_SIGNING_KEY_FALLBACK according to Inngest's rotation sequence so requests signed by either active key can be verified. Keep business actions inside retriable, idempotent steps and return errors when work should be retried.

If the application no longer uses Inngest, remove its registration and serve handler, then reject requests to the old path. Robots.txt does not enable, disable, or authenticate these invocations.

Examples

  • A `user.created` event causes Inngest to send a signed POST to `/api/inngest`, where the registered welcome function begins.
  • A transient database error makes one `step.run()` fail, and Inngest retries that step without rerunning an earlier completed step.
  • An operations team rotates the environment signing key and keeps the previous value as the fallback until the deployment is complete.

Frequently asked questions about Inngest

Learn about AI visibility monitoring and how Promptwatch helps your brand succeed in AI search.

The serve endpoint lets Inngest read registered function configuration and invoke those functions over HTTP through the application's SDK adapter.

Be the brand AI recommends

Monitor your brand's visibility across ChatGPT, Claude, Perplexity, and Gemini. Get actionable insights and create content that gets cited by AI search engines.

Promptwatch Dashboard