Webhook.site MCP Server

Read from the package source without running it. The installed server may list more.

• check_for_callbacks

  See if SSRF, XSS, or canary callbacks arrived in the last N minutes.

• configure_webhookwrite action

  Create a webhook with custom settings, or update one (pass webhook_token).

• create_webhookwrite action

  Create a disposable inbox to sign up on a website: HTTP URL, temp email, DNS.

• delete_all_requestswrite action

  Clear captured events on a webhook, optionally by date or search query.

• delete_requestwrite action

  Delete one captured HTTP, email, or DNS event by request id.

• delete_webhookwrite action

  Permanently delete a webhook and every captured request/email.

• download_request_file

  Download an uploaded file or email attachment (base64) by its file_id.

• export_webhook_data

  Full dump of captured events with HTML and untruncated bodies, as JSON or CSV.

• extract_links_from_request

  Pull confirm, reset, magic-link, and other URLs from a captured email or HTTP body.

• follow_email_linkwrite action

  Open the verify / magic-link / reset URL from a captured sign-up email.

• generate_oob_payloads

  Build authorized out-of-band payloads that ping this webhook: SSRF URLs, XSS callbacks, or canary tokens.

• get_request

  Return one captured event: the newest by default, or request_id.

• get_webhook_emailwrite action

  Return the temp inbox to sign up, verify, magic-link, or reset a password.

• get_webhook_info

  Show a webhook's settings, expiry, request count and every address.

• get_webhook_requests

  List captured HTTP, email, or DNS events for a webhook, one page at a time.

• list_webhooks

  List the webhooks (URLs / inboxes) in the account. Needs WEBHOOK_SITE_API_KEY.

• manage_custom_actions

  Manage the Custom Actions webhook.site runs on every request or email a token receives.

• manage_databases

  Manage webhook.site Databases and run SQL against them (needs API key).

• manage_global_variables

  Manage Global Variables shared by all URLs, usable as $name$ in Custom Actions and Schedules.

• manage_groups

  Manage Groups that organise the account's webhooks (needs API key).

• manage_queues

  Manage Queue Profiles that throttle queued Custom Actions (needs API key).

• manage_schedules

  Manage Schedules: webhook.site calls request_url on an interval (needs API key).

• manage_templates

  Manage Templates: reusable sets of Custom Actions plus predefined variables (needs API key).

• manage_users

  Manage team users on an Enterprise account (needs an administrator API key).

• respond_to_next_request

  Hold the next request that hits the webhook and answer it with your own status, headers and body.

• search_requests

  Search captured events by method, body text, headers, type, or date.

• send_requestswrite action

  Send one JSON body (data) or several (payloads) to the webhook URL to test capture.

• server_status

  Check this server's setup: API key, account reachability, plan, real-time socket, env config.

• update_requestwrite action

  Attach a note to a captured request, or set its dynamic response.

• wait_for_emailwrite action

  Wait for a sign-up, verify, magic-link, or password-reset email (1-120s).

• wait_for_request

  Wait until a new HTTP (or DNS) callback hits the webhook (1-120s).

• Code scan31 source files scanned0/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 43 days ago12/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

49/100

higher than 9% of 916 Email servers

Tools

31

the typical Email server has 7

Tools that change things

32%

typical: 25%. Fewer write tools means less an agent can break

GitHub stars

13

more than 90% of 493 Email servers

Downloads a week

44

more than 31% of 235 Email servers with a package

Webhook.site MCP Server: common questions

Is Webhook.site MCP Server safe?

Not recommended: it is graded D (49/100). Read the Webhook.site MCP Server safety report

How do I install Webhook.site MCP Server?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Webhook.site MCP Server need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Webhook.site MCP Server maintained?

The last commit was 62 days ago (2026-09-03). The latest release is v3.0.0.

What can I use instead of Webhook.site MCP Server?

Servers from other publishers that do the same job: Mailkite MCP server, OpenOSINT MCP server and Email Inbox API + Sending by Sendmux MCP server.

How does Webhook.site MCP Server compare with other Email MCP servers?

safety score 49/100 (higher than 9% of 916 Email servers); tools 31 (the typical Email server has 7); tools that change things 32% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.