
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
@webhooks-cc/mcp
Advanced tools
MCP server for webhooks.cc. It gives coding agents direct access to webhook testing workflows: create endpoints, send signed test webhooks, inspect captures, compare attempts, verify signatures, and read recent webhook context through MCP resources.
It works with Claude Code, Cursor, VS Code, Codex, Windsurf, and Claude Desktop.
The server reads WHK_API_KEY from the environment. It also supports:
WHK_BASE_URL for a custom API base URLWHK_WEBHOOK_URL for a custom receiver base URL# Claude Code
claude mcp add -s user --transport stdio webhooks-cc -e WHK_API_KEY=whcc_... -- npx -y @webhooks-cc/mcp
# OpenAI Codex
codex mcp add webhooks-cc -e WHK_API_KEY=whcc_... -- npx -y @webhooks-cc/mcp
# Cursor
npx @webhooks-cc/mcp setup cursor --api-key whcc_...
# VS Code
npx @webhooks-cc/mcp setup vscode --api-key whcc_...
# Windsurf
npx @webhooks-cc/mcp setup windsurf --api-key whcc_...
# Claude Desktop
npx @webhooks-cc/mcp setup claude-desktop --api-key whcc_...
{
"mcpServers": {
"webhooks-cc": {
"command": "npx",
"args": ["-y", "@webhooks-cc/mcp"],
"env": {
"WHK_API_KEY": "whcc_..."
}
}
}
}
Get your API key at webhooks.cc/account.
The server exposes 35 tools, 3 prompts, and 3 resource surfaces.
create_endpointlist_endpointsget_endpointupdate_endpointdelete_endpointcreate_endpointsdelete_endpointslist_requestssearch_requestscount_requestsget_requestwait_for_requestwait_for_requestsreplay_requestcompare_requestsextract_from_requestverify_signatureclear_requestssend_webhooksend_topreview_webhooktest_webhook_flowlist_teamslist_team_membersshare_endpointunshare_endpointEndpoints shared with you already appear in list_endpoints (with fromTeam) and work with every request tool except clear_requests, which stays with the owner. Invites are not exposed: accepting one claims a paid seat.
list_provider_templatesget_usage (personal plan plus each subscribed team's pool)describeRegistered on every server, with or without an API key, so an agent that has no credential yet can obtain one (auth.md):
how_to_registerregister_agentcheck_claimregister_agent_with_emailverify_agent_otpregister_agent_with_idjagThe server exposes MCP prompts for common workflows:
debug_webhook_deliverysetup_provider_testingcompare_webhook_attemptsThese prompts do not execute anything on their own. They give the client a structured starting point for multi-step agent work.
The server exposes MCP resources for recent webhook context:
webhooks://endpointswebhooks://endpoint/{slug}/recentwebhooks://request/{id}These are useful when the client supports resource browsing or prompt/resource attachment.
Provider template and signing support includes:
stripegithubshopifytwilioslackpaddlelinearsendgridclerkdiscordvercelgitlabtypeformstandard-webhooksmetalemonsqueezycoinbase-commercerazorpaycalintercomtelegramsquarehubspotmailguncalendlymuxsentrybitbucketdocusignadyenpaypalplaidSignature verification also supports:
sendgrid (IP allowlisting) and plaid (JWT/JWK verification requires Plaid API credentials)Use list_provider_templates to inspect templates, default events, signature headers, and signing requirements from the agent.
Typical agent flows:
test_webhook_flow to create, send, capture, verify, replay, and clean up in one tool callThe package also exports createServer(), registerTools(), registerPrompts(), and registerResources() if you want to embed the server yourself.
import { createServer } from "@webhooks-cc/mcp";
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
const server = createServer({
apiKey: process.env.WHK_API_KEY!,
baseUrl: process.env.WHK_BASE_URL,
webhookUrl: process.env.WHK_WEBHOOK_URL,
});
await server.connect(new StdioServerTransport());
You: Create an ephemeral endpoint for GitHub webhook testing.
Agent: Created endpoint https://go.webhooks.cc/w/abc123 and marked it ephemeral.
You: Preview the signed request for a push event before sending it.
Agent: Here is the exact method, headers, and JSON body that would be sent.
You: Send it, wait for two requests, and compare them.
Agent: Sent the webhook, captured two requests, and here are the header and body differences.
Full docs: webhooks.cc/docs/mcp
MIT
FAQs
MCP server for webhooks.cc — AI agent integration for webhook testing
The npm package @webhooks-cc/mcp receives a total of 0 weekly downloads. As such, @webhooks-cc/mcp popularity was classified as not popular.
We found that @webhooks-cc/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.