Webhook Toolkit
Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).
Connect it
Settings → Connectors → Add custom connector
URL: https://webhook-toolkit.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://webhook-toolkit.com/mcp{
"mcpServers": {
"webhook-toolkit": {
"url": "https://webhook-toolkit.com/mcp",
"headers": {
"Authorization": "<YOUR_AUTHORIZATION>"
}
}
}
}claude mcp add --transport http webhook-toolkit https://webhook-toolkit.com/mcp --header "Authorization: <value>"{
"servers": {
"webhook-toolkit": {
"type": "http",
"url": "https://webhook-toolkit.com/mcp",
"headers": {
"Authorization": "<YOUR_AUTHORIZATION>"
}
}
}
}{
"mcpServers": {
"webhook-toolkit": {
"command": "npx",
"args": [
"-y",
"webhook-toolkit@0.1.1"
],
"env": {
"WEBHOOK_TOOLKIT_KEY": "<value>"
}
}
}
}claude mcp add webhook-toolkit -- npx -y webhook-toolkit@0.1.110 tools, verified live
create_webhook_urlCreate a public HTTPS URL that captures every request sent to it (any method, any sub-path). Use it when you need an endpoint to receive a webhook from a third-party service while building or debugging an integration. Returns the URL to configure in the service and a live inspector link for the human.
list_webhook_urlsread-onlyList the webhook URLs of the account behind the API key (requires an API key).
wait_for_webhookread-onlyBlock until the next request reaches a webhook URL (or the timeout elapses), then return it in full: method, path, headers, body, detected provider and event. Use right after triggering an action that should send a webhook. Call again with `after` set to the last request's createdAt to wait for the following one.
list_webhook_requestsread-onlyList the most recent requests captured by a webhook URL, newest first (summaries; use get_webhook_request for one full request).
get_webhook_requestread-onlyReturn one captured request in full (headers, raw body, detected provider/event).
set_webhook_responseChoose what the webhook URL answers to callers (status code, body, content type) — e.g. return 500 to test the sender's retries, or a specific JSON/XML body the service expects.
replay_webhook_requestRe-send a captured request (same method, headers and raw body) to a PUBLIC URL and return the target's response. Localhost and private IPs are refused here: for localhost use the CLI (`npx webhook-toolkit replay`) or the local MCP server (`npx webhook-toolkit mcp`).
sign_webhook_payloadBuild a webhook body with a VALID signature header for a provider, to test a handler's signature verification without triggering a real event. Providers: stripe, github, shopify, slack, twilio, mailgun. Returns the headers, the exact body to send and a ready-to-run curl command.
verify_webhook_signatureread-onlyCheck whether a webhook signature is valid for a raw body and a secret, and diagnose why it fails (wrong secret, whitespace, re-serialized JSON body, expired timestamp, wrong URL for Twilio). Providers: stripe, github, shopify, slack, twilio.
explain_webhook_requestAI analysis of a captured request. mode=explain: who sent it, which event, key fields, how to verify the signature, pitfalls. mode=handler: complete receiving code that verifies the signature and handles this event. Included in paid plans; anonymous and free users get 3 trials.
Alternatives in Finance & Payments
Compare →
three.ws 3D Studio (free)A
Free text/image → 3D: generate, rig, avatar-ify, and refine GLB models. No auth, no payment.
DWDaedalMap World Development IndicatorsA
World Bank World Development Indicators: curated country-year economy, health, education and more.
FTFinance ToolkitA
200+ transparent financial metrics calculated from raw statements, not third-party endpoints.
Trade ItB
Connect brokerage accounts to AI assistants: holdings, orders, asset lookup, and approved trading.
XLX402 List MCPB
Find and vet x402 payment APIs before your agent pays one: uptime, price, on-chain volume.
Expense Budget TrackerB
Track expenses, budgets, balances, transfers, and multi-currency reports with OAuth-secured tools.