MCP.Market

Webhook Toolkit MCP server

online · 100% uptime
by THE-KIPDEV·io.github.THE-KIPDEV/webhook-toolkit·v0.1.1
No reviews yet

Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).

A91/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

0 stars56 downloads/wk

Reviews

Write one

Nobody has reviewed Webhook Toolkit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Webhook Toolkit tools (10, 1 write)

write = sends, deletes, buys or posts
  • create_webhook_urlwrite actionFree

    Create a public HTTPS URL that captures every request sent to it (any method, any sub-path). Use it when you need an endpoint to receive a webhook from a third-party service while building or debugging an integration. Returns the URL to configure in the service and a live inspector link for the human.

  • explain_webhook_requestFree

    AI analysis of a captured request. mode=explain: who sent it, which event, key fields, how to verify the signature, pitfalls. mode=handler: complete receiving code that verifies the signature and handles this event. Included in paid plans; anonymous and free users get 3 trials.

  • get_webhook_requestFree

    Return one captured request in full (headers, raw body, detected provider/event).

  • list_webhook_requestsFree

    List the most recent requests captured by a webhook URL, newest first (summaries; use get_webhook_request for one full request).

  • list_webhook_urlsFree

    List the webhook URLs of the account behind the API key (requires an API key).

  • replay_webhook_requestFree

    Re-send a captured request (same method, headers and raw body) to a PUBLIC URL and return the target's response. Localhost and private IPs are refused here: for localhost use the CLI (`npx webhook-toolkit replay`) or the local MCP server (`npx webhook-toolkit mcp`).

  • set_webhook_responseFree

    Choose what the webhook URL answers to callers (status code, body, content type) — e.g. return 500 to test the sender's retries, or a specific JSON/XML body the service expects.

  • sign_webhook_payloadFree

    Build a webhook body with a VALID signature header for a provider, to test a handler's signature verification without triggering a real event. Providers: stripe, github, shopify, slack, twilio, mailgun. Returns the headers, the exact body to send and a ready-to-run curl command.

  • verify_webhook_signatureFree

    Check whether a webhook signature is valid for a raw body and a secret, and diagnose why it fails (wrong secret, whitespace, re-serialized JSON body, expired timestamp, wrong URL for Twilio). Providers: stripe, github, shopify, slack, twilio.

  • wait_for_webhookFree

    Block until the next request reaches a webhook URL (or the timeout elapses), then return it in full: method, path, headers, body, detected provider and event. Use right after triggering an action that should send a webhook. Call again with `after` set to the last request's createdAt to wait for the following one.

Public scan report

scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it

no findings
  • Code scan47 source files scanned25/25
  • Live reliabilityremote reachable in 1526ms20/20
  • Tool poisoning10 tool descriptions checked15/15
  • Auth qualityAPI key sent as a header8/15
  • Maintenancelast push 14 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Webhook Toolkit compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 90% of 2,174 E-commerce servers
Tools
10
the typical E-commerce server has 6
Tools that change things
10%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote E-commerce server answers 100%
Response time
208 ms
faster than 67% of 1,527 E-commerce servers
Downloads a week
56
more than 53% of 411 E-commerce servers with a package

What its tools let an agent do: 8 read · 1 create · 1 change

Install Webhook Toolkit in Claude Code, Cursor or VS Code

claude mcp add --transport http webhook-toolkit https://webhook-toolkit.com/mcp
Add to Cursor

What the publisher says

From the Webhook Toolkit repository's README, as published. We do not edit it. Read it on GitHub

webhook-toolkit

Receive, forward, sign and verify webhooks from your terminal, your test suite and your AI agent. One package: a CLI (webhook-toolkit, alias whtk), a typed library and an MCP server, backed by webhook-toolkit.com.

Quick start

npx webhook-toolkit listen --forward http://localhost:3000/webhooks

That's it: no account, no config. You get a public URL; paste it into Stripe, GitHub, Shopify or any other sender, and every webhook shows up in your terminal and is re-sent to your local handler:

webhook-toolkit · listening

  Webhook URL   https://webhook-toolkit.com/r/l90c9MKIdo0o
  Inspector     https://webhook-toolkit.com/e/l90c9MKIdo0o
  Forwarding    → http://localhost:3000/webhooks
  Expires       in 7 days (2026-09-25 15:42)
                Anonymous URL. Run `webhook-toolkit login` to get a permanent one.

  Waiting for webhooks. Ctrl+C to stop.

  15:42:11  POST   /stripe  stripe checkout.session.completed  248 B
            ↳ 200 OK · 3 ms
  15:42:11  POST   /github  github push  269 B
            ↳ 500 Internal Server Error · 1 ms  {"error":"handler crashed: cannot read properties of undefined"}

Every request is also kept in a web inspector (headers, raw body, replay), so nothing is lost when your handler crashes.

Contents

  • CLI
  • Test webhooks in your test suite
  • Use it from AI agents (MCP)
  • Signing and verifying
  • Relay: a real tunnel (paid)
  • Free vs paid
  • How it compares
  • Library reference
  • Configuration

CLI

npm i -g webhook-toolkit     # or run any command with npx webhook-toolkit …

A few things worth knowing:

  • Sub-paths and query strings are kept. A request to …/r//stripe?x=1 is forwarded to http://localhost:3000/webhooks/stripe?x=1, so one URL can feed several handlers.
  • Headers are forwarded as received (minus hop-by-hop headers, host and content-length), so signature checks in your handler pass exactly as in production.
  • --json prints NDJSON (listening, request, forward events) for scripting: whtk listen -f 3000 --json | jq .request.event.
  • Colors follow NOCOLOR, FORCECOLOR and are off when output is not a terminal.

Send a signed test event

# Prints the headers and a curl command, with a realistic sample event
whtk sign stripe --secret whsec_… --event checkout.session.completed

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Webhook Toolkit: common questions

Is Webhook Toolkit MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Webhook Toolkit safety report
How do I install Webhook Toolkit?
It runs remotely at webhook-toolkit.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Webhook Toolkit need an API key?
Yes. The registry entry asks for WEBHOOK_TOOLKIT_KEY, Authorization.
Is Webhook Toolkit maintained?
The last commit was 47 days ago (2026-09-18). The latest release is v0.1.1.
Is Webhook Toolkit up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Webhook Toolkit?
Servers from other publishers that do the same job: Idea Reality MCP server, Stripe MCP server and Polymarket Toolkit MCP server.
How does Webhook Toolkit compare with other E-commerce MCP servers?
safety score 91/100 (higher than 90% of 2,174 E-commerce servers); tools 10 (the typical E-commerce server has 6); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Webhook Toolkit

Same job from other publishers: the closest match first, then the best rated.

  • Idea Reality
    Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal.
    B
  • Stripe
    MCP server integrating with Stripe - tools for customers, products, payments, and more.
    A
  • Polymarket Toolkit
    Read-only Polymarket data tools for AI agents: profiles, PnL, market scans. No keys, no orders.
    B
  • Bling
    MCP server for Bling — ERP: products, orders, invoices (NF-e/NFS-e), stock, AR/AP, webhooks
    More from codespar →
    B
  • InstantClips
    Create branded vertical video ads from ecommerce product URLs or product photos.
    A