Openhook

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Webhook, email and DNS inboxes for AI agents to capture callbacks and test integrations.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Openhook": {
      "url": "https://openhook.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (29)

• server_status read-only

  Inspect native storage, retention, and enabled capture transports.

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• create_webhook destructive

  Create an inbox. Save its private token; share only public capture addresses. A hosted Pro account_key creates a persistent owned inbox.

  Parameters:

  • name — string
  • expiry — integer
  • account_key — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• get_hosted_inboxes read-only

  Hosted only: list your persistent inboxes and usage using a private account agent key.

  Parameters:

  • account_key (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• access_hosted_inbox destructive

  Hosted only: issue a private inbox token for an inbox you own. Keep the returned token private.

  Parameters:

  • account_key (required) — string
  • inbox_id (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• configure_webhook destructive

  Set HTTP responses and optional SHA256 HMAC verification, preserving unspecified fields.

  Parameters:

  • webhook_token (required) — string
  • cors
  • default_status
  • default_content
  • signature_provider
  • verification_secret
  • default_content_type

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• get_webhook_info read-only

  Read addresses, expiry, response settings, and retained event count.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• get_webhook_email read-only

  Read the email address, available when this deployment runs SMTP.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• register_github_webhook destructive

  Create a signed GitHub repository subscription and native inbox. Requires webhook-write permission.

  Parameters:

  • access_token (required) — string
  • repository (required) — string
  • events (required) — array
  • account_key — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world yes

• register_stripe_webhook destructive

  Create a signed Stripe webhook endpoint and native inbox. Provider credentials are not stored.

  Parameters:

  • access_token (required) — string
  • events (required) — array
  • account_key — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world yes

• register_linear_webhook destructive

  Create a signed Linear subscription and native inbox. Requires admin scope; optional team filter.

  Parameters:

  • access_token (required) — string
  • resource_types (required) — array
  • team_id — string
  • account_key — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world yes

• unregister_webhook destructive

  Remove the registered provider subscription and permanently delete its native inbox and events.

  Parameters:

  • webhook_token (required) — string
  • access_token (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world yes

• delete_webhook destructive

  Permanently delete this inbox and its stored events.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• rotate_webhook_token destructive

  Revoke the old private token and return a new one; capture addresses stay unchanged.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• get_webhook_requests read-only

  Read events with pagination or a durable sequence cursor.

  Parameters:

  • webhook_token (required) — string
  • page — integer
  • limit — integer
  • since — integer
  • request_type

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• get_webhook_activity read-only

  Read durable receipt and mutation history with a cursor. Bodies and secrets are excluded.

  Parameters:

  • webhook_token (required) — string
  • limit — integer
  • since — integer

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• search_requests read-only

  Search captured bodies, URLs, and headers for a literal substring.

  Parameters:

  • webhook_token (required) — string
  • query (required) — string
  • page — integer
  • limit — integer
  • request_type

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• get_request read-only

  Read a complete event; omit request_id to inspect the newest one.

  Parameters:

  • webhook_token (required) — string
  • request_id

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• update_request destructive

  Annotate an event without changing its original captured body.

  Parameters:

  • webhook_token (required) — string
  • request_id (required) — string
  • note (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• download_request_file read-only

  Retrieve exact captured bytes as base64, including binary bodies or raw MIME.

  Parameters:

  • webhook_token (required) — string
  • request_id (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• delete_request destructive

  Permanently delete one event belonging to this inbox.

  Parameters:

  • webhook_token (required) — string
  • request_id (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• delete_all_requests destructive

  Clear stored events, keeping the inbox's addresses and settings.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• export_webhook_data read-only

  Export a bounded page of full events; resume with next_since. Browser export streams the entire inbox.

  Parameters:

  • webhook_token (required) — string
  • since — integer
  • format — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• wait_for_request read-only

  Wait up to 120 seconds; pass next_since when reconnecting to avoid missing events.

  Parameters:

  • webhook_token (required) — string
  • since
  • request_type
  • return_existing — boolean
  • timeout_seconds — number

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• wait_for_email read-only

  Wait for an email received by Openhook's SMTP listener.

  Parameters:

  • webhook_token (required) — string
  • since
  • return_existing — boolean
  • timeout_seconds — number

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• send_requests destructive

  Create up to ten marked test HTTP events in this inbox.

  Parameters:

  • webhook_token (required) — string
  • payloads (required) — array

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

• extract_links_from_request read-only

  Extract HTTP links and verification codes without visiting the URLs.

  Parameters:

  • webhook_token (required) — string
  • request_id

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• generate_oob_payloads read-only

  Read callback addresses for authorized out-of-band testing.

  Parameters:

  • webhook_token (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• check_for_callbacks read-only

  Check for callbacks newer than a sequence cursor without waiting.

  Parameters:

  • webhook_token (required) — string
  • since — integer

  Hints: read-only yes · destructive no · idempotent not declared · open-world no

• respond_to_next_request destructive

  Respond to the next request using ?openhook_wait=1, within its 20-second response window.

  Parameters:

  • webhook_token (required) — string
  • content (required) — string
  • status — integer
  • content_type — string
  • timeout_seconds — number

  Hints: read-only no · destructive yes · idempotent not declared · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.