is it even possible to call a deployed scriptlet from an external REST call? for example just sending a POST to the scriptlet url?

Yes, but it (a Suitelet) has to be deployed as “available without login”

gotcha. thanks man!

You will also have to spoof the user agent to look like a browser