Microsoft’s Vibe code apps make it surprisingly easy to build small, functional apps without going all-in on Power Apps or writing a full code from scratch. In one of my recent projects, I combined a Vibe app with a manually created Power Automate flow that is triggered via HTTP. Yes, Vibe apps can start Power Automate flows. The user will send a number to the Power Automate flow and will get back a response. This will be shown to the user.

The catch?
The Power Automate flow must be triggered anonymously.

This has serious security implications and should only be used when you fully understand the risks.
In this blog, I’ll walk through the concept, explain why anonymous access is required, and share the trade-offs you should be aware of before using this pattern in a real solution.

Why HTTP and anonymous?

Vibe apps currently have limited integration options. At the time of writing, they do not support:

• Entra ID authentication.
• Managed identity.
• M365 connectors with user context.

Because of that, the only reliable integration point is an anonymous HTTP endpoint. If you secure the trigger with Azure AD or OAuth, the Vibe app simply can’t call it. Take into consideration what the Power Automate Flow can do when using anonymous access. You do not want to create an exploitable entry point for bad actors.

Creating the anonymous Power Automate Flow

• Create a Power Automate flow.
• Set the trigger to When an HTTP request is received.
• Set the Who can trigger the flow to Anyone.
• Set the body to the following JSON schema, this will enable to Power Automate Flow to receive data from the Vibe App. The property is called TriggerValue.

{
    "type": "object",
    "properties": {
        "TriggerValue": {
            "type": "string"
        }
    }
}

• Add an compose action and add the TriggerValue property in the inputs.
• Add a Respond to a Power App or Flow action.
• Add a Text property called ReturnValue and provided it with your required return value.

The Power Apps Vibe Code App

I created the button to start the Power Automate flow in the Vibe Code app by using the following prompt.

Create a button called Power Automate.
When the user presses the button:

• Ask the user to enter a number.
• Store the entered number.
• Send an HTTP POST request to the following Power Automate Flow URL:

<paste your HTTP Post URL here>

Include the entered number in the request body as a JSON property named TriggerValue.
After the Power Automate Flow finishes:

• Read the HTTP response.
• From the response JSON, extract only the value of the property named returnvalue.
• Show only that value to the user as plain text.Do not display the full JSON response.