{"name":"io.github.zebbern/webhook-mcp-server","slug":"zebbern-webhook-mcp-server","title":"Webhook.site MCP Server","description":"Capture HTTP, email, and DNS callbacks with webhook.site from MCP clients.","url":"https://mcp.market/server/zebbern-webhook-mcp-server","rating":null,"grade":"D","score":49,"certified":false,"status":"active","category":"email","tags":["email"],"presence":{"score":29,"stars":13,"forks":6,"downloads_week":44,"last_push_at":"2026-09-03T23:26:26.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/zebbern/webhook-mcp-server","website":null,"version":"3.0.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"webhook-mcp-server","version":"3.0.0","runtimeHint":"uvx","transport":{"type":"stdio"}}],"tools":[{"name":"check_for_callbacks","description":"See if SSRF, XSS, or canary callbacks arrived in the last N minutes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"configure_webhook","description":"Create a webhook with custom settings, or update one (pass webhook_token).","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_webhook","description":"Create a disposable inbox to sign up on a website: HTTP URL, temp email, DNS.","write_action":true,"price_micros":0,"input_schema":null},{"name":"delete_all_requests","description":"Clear captured events on a webhook, optionally by date or search query.","write_action":true,"price_micros":0,"input_schema":null},{"name":"delete_request","description":"Delete one captured HTTP, email, or DNS event by request id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"delete_webhook","description":"Permanently delete a webhook and every captured request/email.","write_action":true,"price_micros":0,"input_schema":null},{"name":"download_request_file","description":"Download an uploaded file or email attachment (base64) by its file_id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"export_webhook_data","description":"Full dump of captured events with HTML and untruncated bodies, as JSON or CSV.","write_action":false,"price_micros":0,"input_schema":null},{"name":"extract_links_from_request","description":"Pull confirm, reset, magic-link, and other URLs from a captured email or HTTP body.","write_action":false,"price_micros":0,"input_schema":null},{"name":"follow_email_link","description":"Open the verify / magic-link / reset URL from a captured sign-up email.","write_action":true,"price_micros":0,"input_schema":null},{"name":"generate_oob_payloads","description":"Build authorized out-of-band payloads that ping this webhook: SSRF URLs, XSS callbacks, or canary tokens.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_request","description":"Return one captured event: the newest by default, or request_id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_webhook_email","description":"Return the temp inbox to sign up, verify, magic-link, or reset a password.","write_action":true,"price_micros":0,"input_schema":null},{"name":"get_webhook_info","description":"Show a webhook's settings, expiry, request count and every address.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_webhook_requests","description":"List captured HTTP, email, or DNS events for a webhook, one page at a time.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_webhooks","description":"List the webhooks (URLs / inboxes) in the account. Needs WEBHOOK_SITE_API_KEY.","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_custom_actions","description":"Manage the Custom Actions webhook.site runs on every request or email a token receives.","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_databases","description":"Manage webhook.site Databases and run SQL against them (needs API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_global_variables","description":"Manage Global Variables shared by all URLs, usable as $name$ in Custom Actions and Schedules.","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_groups","description":"Manage Groups that organise the account's webhooks (needs API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_queues","description":"Manage Queue Profiles that throttle queued Custom Actions (needs API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_schedules","description":"Manage Schedules: webhook.site calls request_url on an interval (needs API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_templates","description":"Manage Templates: reusable sets of Custom Actions plus predefined variables (needs API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"manage_users","description":"Manage team users on an Enterprise account (needs an administrator API key).","write_action":false,"price_micros":0,"input_schema":null},{"name":"respond_to_next_request","description":"Hold the next request that hits the webhook and answer it with your own status, headers and body.","write_action":false,"price_micros":0,"input_schema":null},{"name":"search_requests","description":"Search captured events by method, body text, headers, type, or date.","write_action":false,"price_micros":0,"input_schema":null},{"name":"send_requests","description":"Send one JSON body (data) or several (payloads) to the webhook URL to test capture.","write_action":true,"price_micros":0,"input_schema":null},{"name":"server_status","description":"Check this server's setup: API key, account reachability, plan, real-time socket, env config.","write_action":false,"price_micros":0,"input_schema":null},{"name":"update_request","description":"Attach a note to a captured request, or set its dynamic response.","write_action":true,"price_micros":0,"input_schema":null},{"name":"wait_for_email","description":"Wait for a sign-up, verify, magic-link, or password-reset email (1-120s).","write_action":true,"price_micros":0,"input_schema":null},{"name":"wait_for_request","description":"Wait until a new HTTP (or DNS) callback hits the webhook (1-120s).","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":49,"grade":"D","scanned_at":"2026-10-16T17:09:58.081Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-16T17:09:58.026Z","components":{"code":{"score":0,"max":25,"notes":["31 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 43 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"webhook_mcp_server-3.0.0/services/bugbounty_service.py: … payloads[\"base64\"] = f'