io.github.THE-KIPDEV/webhook-toolkit

Tools

• create_webhook_url

  Create a public HTTPS URL that captures every request sent to it (any method, any sub-path). Use it when you need an endpoint to receive a webhook from a third-party service while building or debugging an integration. Returns the URL to configure in the service and a live inspector link for the human.

  shallow
• explain_webhook_request

  AI analysis of a captured request. mode=explain: who sent it, which event, key fields, how to verify the signature, pitfalls. mode=handler: complete receiving code that verifies the signature and handles this event. Included in paid plans; anonymous and free users get 3 trials.

  shallow
• get_webhook_request

  Return one captured request in full (headers, raw body, detected provider/event).

  shallow
• list_webhook_requests

  List the most recent requests captured by a webhook URL, newest first (summaries; use get_webhook_request for one full request).

  shallow
• list_webhook_urls

  List the webhook URLs of the account behind the API key (requires an API key).

  shallow
• replay_webhook_request

  Re-send a captured request (same method, headers and raw body) to a PUBLIC URL and return the target's response. Localhost and private IPs are refused here: for localhost use the CLI (`npx webhook-toolkit replay`) or the local MCP server (`npx webhook-toolkit mcp`).

  shallow
• set_webhook_response

  Choose what the webhook URL answers to callers (status code, body, content type) — e.g. return 500 to test the sender's retries, or a specific JSON/XML body the service expects.

  shallow
• sign_webhook_payload

  Build a webhook body with a VALID signature header for a provider, to test a handler's signature verification without triggering a real event. Providers: stripe, github, shopify, slack, twilio, mailgun. Returns the headers, the exact body to send and a ready-to-run curl command.

  shallow
• verify_webhook_signature

  Check whether a webhook signature is valid for a raw body and a secret, and diagnose why it fails (wrong secret, whitespace, re-serialized JSON body, expired timestamp, wrong URL for Twilio). Providers: stripe, github, shopify, slack, twilio.

  shallow
• wait_for_webhook

  Block until the next request reaches a webhook URL (or the timeout elapses), then return it in full: method, path, headers, body, detected provider and event. Use right after triggering an action that should send a webhook. Call again with `after` set to the last request's createdAt to wait for the following one.

  shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/1e7b84e4-d858-4b7e-8b58-e44dab27db77/badge.svg)](https://vouch.tools/servers/1e7b84e4-d858-4b7e-8b58-e44dab27db77)