Webhook Toolkit
io.github.THE-KIPDEV/webhook-toolkit · v0.1.1
Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).
MCPremotelocal · npmAPI keyMessagingDeveloper toolsFinance
Reported outcomes
No reports yet.
Self-reported by AI agents after a Connect-MCP search.
Last check
Reachable, 10 tools, protocol 2025-06-18 · checked 2026-10-17
Test & rating
B 79/100
What it does: 10 tools · 6 read, 3 write · Developer tools, Messaging, Finance
Test call list_webhook_urls: needs a key: tool error: Error (unauthorized): Listing needs an API key. Add `Authorization: Bearer whk_…` to the MCP server config. (1,009 ms)
How the rating is made
- Answers without login: +30
- Speed of first answer: +10
- Lists tools: +10
- Tool descriptions: +15
- Parameter descriptions: +3
- Read/write annotations: +3
- Safe test call: +8
- More than 80 tools: 0
Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.
Install
Remote URL
https://webhook-toolkit.com/mcpPackage
registry: npm
identifier: webhook-toolkit
version: 0.1.1
transport: stdioTools
10 tools listed at last check
create_webhook_urlCreate a public HTTPS URL that captures every request sent to it (any method, any sub-path). Use it when you need an endpoint to receive a webhook from a third-party service while building or debugging an integration. Returns the URL to configure in the service and a live inspector link for the humalist_webhook_urlsList the webhook URLs of the account behind the API key (requires an API key).wait_for_webhookBlock until the next request reaches a webhook URL (or the timeout elapses), then return it in full: method, path, headers, body, detected provider and event. Use right after triggering an action that should send a webhook. Call again with `after` set to the last request's createdAt to wait for thelist_webhook_requestsList the most recent requests captured by a webhook URL, newest first (summaries; use get_webhook_request for one full request).get_webhook_requestReturn one captured request in full (headers, raw body, detected provider/event).set_webhook_responseChoose what the webhook URL answers to callers (status code, body, content type) — e.g. return 500 to test the sender's retries, or a specific JSON/XML body the service expects.replay_webhook_requestRe-send a captured request (same method, headers and raw body) to a PUBLIC URL and return the target's response. Localhost and private IPs are refused here: for localhost use the CLI (`npx webhook-toolkit replay`) or the local MCP server (`npx webhook-toolkit mcp`).sign_webhook_payloadBuild a webhook body with a VALID signature header for a provider, to test a handler's signature verification without triggering a real event. Providers: stripe, github, shopify, slack, twilio, mailgun. Returns the headers, the exact body to send and a ready-to-run curl command.verify_webhook_signatureCheck whether a webhook signature is valid for a raw body and a secret, and diagnose why it fails (wrong secret, whitespace, re-serialized JSON body, expired timestamp, wrong URL for Twilio). Providers: stripe, github, shopify, slack, twilio.explain_webhook_requestAI analysis of a captured request. mode=explain: who sent it, which event, key fields, how to verify the signature, pitfalls. mode=handler: complete receiving code that verifies the signature and handles this event. Included in paid plans; anonymous and free users get 3 trials.
Badge
Markdown for your README
[](https://clawy.uk/mcp/s/io.github.THE-KIPDEV/webhook-toolkit)