Hookjar

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Public webhook inboxes for agents. Receive OAuth redirects, payment callbacks and CI notifications.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Hookjar": {
      "url": "https://comiza.lighting/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• create_inbox

  Create a public URL that captures any HTTP request sent to it. Use it when you need something outside this session to reach you: an OAuth redirect, a payment provider callback, a CI notification, a webhook you are testing. Returns the URL to hand to the other service. Requests are readable with get_requests or wait_for_request.

  Parameters:

  • label — string — Optional note to yourself, for example 'stripe test'.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_inboxes

  List the inboxes you currently own, with their URLs and expiry.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• wait_for_request

  Block until a request lands in the inbox, then return it. This is the tool to use straight after you have triggered the action that should produce the callback. Returns immediately if something already arrived after the sequence number you pass.

  Parameters:

  • inbox_id (required) — string
  • after_seq — integer — Return only requests newer than this sequence number. Use 0 the first time.
  • timeout_seconds — integer — How long to wait. Capped by your tier.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_requests

  List what has arrived in an inbox, newest last. Returns summaries without bodies. Use get_request for the full contents of one.

  Parameters:

  • inbox_id (required) — string
  • limit — integer
  • after_seq — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_request

  Return the full method, headers, query string and body of a single captured request. Text bodies come back as text, binary as base64.

  Parameters:

  • request_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_inbox

  Delete an inbox and everything captured in it.

  Parameters:

  • inbox_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.