Webhook Toolkit
Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).
| Endpoint | https://webhook-toolkit.com/mcp (streamable-http) |
|---|---|
| Registry version | 0.1.1 |
| Now | 10 tools · grade A (92) · pin ts_228c0d00152fa6c32cd9073f580a9a92 · protocol 2025-06-18 |
| First / last listed | 2026-10-30 00:54 UTC / 2026-10-30 00:54 UTC |
| Grade over time | 2026-10-30: A (92), 10 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: create_webhook_url list_webhook_urls wait_for_webhook list_webhook_requests get_webhook_request set_webhook_response replay_webhook_request sign_webhook_payload verify_webhook_signature explain_webhook_request
create_webhook_url | Create a public HTTPS URL that captures every request sent to it (any method, any sub-path). Use it when you need an endpoint to receive a webhook from a third-party service while building or debugging an integration. Returns the URL to configure in the service and a live inspector link for the human. params: name |
list_webhook_urls | List the webhook URLs of the account behind the API key (requires an API key). params: none |
wait_for_webhook | Block until the next request reaches a webhook URL (or the timeout elapses), then return it in full: method, path, headers, body, detected provider and event. Use right after triggering an action that should send a webhook. Call again with `after` set to the last request's createdAt to wait for the following one. params: token*, timeout_seconds, after |
list_webhook_requests | List the most recent requests captured by a webhook URL, newest first (summaries; use get_webhook_request for one full request). params: token*, limit |
get_webhook_request | Return one captured request in full (headers, raw body, detected provider/event). params: token*, request_id* |
set_webhook_response | Choose what the webhook URL answers to callers (status code, body, content type) — e.g. return 500 to test the sender's retries, or a specific JSON/XML body the service expects. params: token*, status, body, content_type |
replay_webhook_request | Re-send a captured request (same method, headers and raw body) to a PUBLIC URL and return the target's response. Localhost and private IPs are refused here: for localhost use the CLI (`npx webhook-toolkit replay`) or the local MCP server (`npx webhook-toolkit mcp`). params: token*, request_id*, target_url* |
sign_webhook_payload | Build a webhook body with a VALID signature header for a provider, to test a handler's signature verification without triggering a real event. Providers: stripe, github, shopify, slack, twilio, mailgun. Returns the headers, the exact body to send and a ready-to-run curl command. params: provider*, secret*, payload, event_type, target_url |
verify_webhook_signature | Check whether a webhook signature is valid for a raw body and a secret, and diagnose why it fails (wrong secret, whitespace, re-serialized JSON body, expired timestamp, wrong URL for Twilio). Providers: stripe, github, shopify, slack, twilio. params: provider*, secret*, raw_body*, signature*, timestamp, url |
explain_webhook_request | AI analysis of a captured request. mode=explain: who sent it, which event, key fields, how to verify the signature, pitfalls. mode=handler: complete receiving code that verifies the signature and handles this event. Included in paid plans; anonymous and free users get 3 trials. params: token*, request_id*, mode, language |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.