Webhooks

A webhook is an endpoint you have published to the internet so that somebody else's system can call it.

That makes it an unauthenticated entry point unless you do something about it, and it will receive requests from anybody who finds the address. It needs verification of the sender, validation of the payload and protection against replay, none of which are supplied by the concept itself.