I'm trying to receive a POST sent by an external API to my Suitelet but apparently Suitelets only accept requests with a User agent header. How can I work around this?

its one of the reasons suitelet make poor webhooks

yeah, I have no control over the request coming in. And apparently requests sent to RESTlets need to be authenticated, which again... I have no control on.

expect to have some sort of middleware

Got it, thank you.

you might have better luck with a ssp service, ive heard its more lenient

Thank you, I'll look into it.

does SSP require SCA these days?

There's no dependency on SCA for SSP 1 or 2. The only thing I'm not 100% sure is whether you have to have a website/domain setup in order to use them. After deployment, they show a system domain URL, so I suspect not. Service files are very forgiving and can be made public, so you can create your own auth mechanism in the request if necessary.

ah, so SSP supports SS2 now? To be honest I've never given too much attention to SSP as it seemed like a sideline technology