Common triggers: HTTP (auth levels), timer (six-field NCRONTAB), Service Bus, Cosmos DB, Blob, Event Grid

The HTTP trigger turns a function into a web endpoint at a route under /api/ by default. Its authorization level controls whether a key is required. ANONYMOUS needs no key. FUNCTION requires a function-specific key or a host key, passed in the x-functions-key header or the code query parameter. ADMIN requires the master key. Keys are not user authentication; for real users, put App Service Authentication (Easy Auth), API Management or your own token validation in front. Locally, keys are not enforced.