Webhook.site MCP Server

Capture HTTP, email, and DNS callbacks with webhook.site from MCP clients.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "webhook-site-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "webhook-site-mcp-server"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Documentation Overview

Webhook.site MCP Server

A Model Context Protocol (MCP) server for webhook.site - instantly capture HTTP requests, emails, and DNS lookups. Perfect for testing webhooks, debugging API callbacks, security testing, and bug bounty hunting.

Security helper tools (SSRF, XSS, canary tokens) are for authorized testing only — systems you own or have explicit permission to test.

Quick Start
What Can You Do?
Tools Reference
Examples
Each Webhook Token Provides
Documentation
Development
Requirements
Contributing
Credits
Links

Quick Start

Installation

bash

# Using uvx (recommended - no install needed)
uvx webhook-mcp-server==3.0.0

# Or install via pip
pip install webhook-mcp-server==3.0.0

Use 3.0.0 or newer. 2.1.3 does not start on MCP 2.0; 3.0 renames a few tools (see Upgrading from 2.x).

VS Code / GitHub Copilot

Add to .vscode/mcp.json:

config.json

{
  "servers": {
    "webhook-mcp-server": {
      "type": "stdio",
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Cursor

Add to .cursor/mcp.json (project) or your user MCP config:

config.json

{
  "mcpServers": {
    "webhook-mcp-server": {
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "webhook-mcp-server": {
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Configuration

All settings are environment variables on the server process. Put them in the env block of your MCP client config.

Variable	Purpose
`WEBHOOK_SITE_API_KEY`	Your webhook.site API key. Makes new URLs permanent (your plan's quota) and unlocks `list_webhooks`, Custom Actions, Schedules, Global Variables, Groups, Queue Profiles, Templates, Databases, Users and CSV export
`WEBHOOK_SITE_DEFAULT_EXPIRY`	Seconds until new URLs expire when the call does not pass `expiry`. Unset means permanent on a paid account (7 days for anonymous URLs)
`WEBHOOK_MCP_RATE_LIMIT_MAX_WAIT`	When webhook.site answers 429 with a `Retry-After` up to this many seconds (default 15), the call waits and retries once; longer waits are reported as an error naming the wait
`FOLLOW_EMAIL_LINK_ALLOW_HOSTS`	`follow_email_link` only opens links to public internet hosts, and connects to the address it checked (no DNS rebinding). To test a sign-up flow on your own machine or intranet, list what to allow: `localhost,127.0.0.1,*.corp.example,10.0.0.0/8`
`HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY`	Honoured by `follow_email_link`. The proxy makes the connection, so the target is checked before the request instead of being pinned
`SSL_CERT_FILE` / `SSL_CERT_DIR`	Custom CA bundle for `follow_email_link`, for corporate TLS interception

If the request to a verification link completes and then redirects somewhere that is not allowed (a local dev server, an intranet dashboard), the tool reports that hop's status with the refused target in blocked_redirect instead of failing: the request that consumed the token already went through, whether or not the site counted it as verified.

What Can You Do?

Capture Webhooks

Code

"Create a webhook and show me the URL"
"What requests have been sent to my webhook?"
"Wait for a request to come in"

Security/Bug Bounty:

Code

"Generate an SSRF payload to test for blind vulnerabilities"
"Create XSS callback payloads to detect blind XSS attacks"
"Make me a canary token to detect if someone accesses a URL"

Email Automation:

Code

"Create a temp email and wait for a password reset link"
"Monitor this webhook for emails and extract all links from them"
"Give me 3 temporary emails at once" (batch creation)

API Testing:

Code

"Create a webhook that returns a 404 error with a custom message"
"Make a webhook with CORS enabled that waits 5 seconds before responding"
"Send 10 different test requests to a webhook and show me all the captured data"
"Hold the next request and answer it with a 402 and this JSON body"

Real-time Monitoring:

Code

"Create a webhook and wait for any HTTP request to arrive"
"Monitor for DNS lookups to detect if a server is making DNS queries"
"Search all requests for ones containing 'password' in the body"

Data Analysis:

Code

"Export all captured webhook requests to JSON format"
"Show me statistics on requests received in the last hour"
"Filter and show only POST requests with specific headers"

Automate with your account:

Code

"Add a Custom Action that forwards every request to my staging API"
"Schedule a health check of https://example.com every 5 minutes and alert on a bad status"
"Write a WebhookScript that answers with the request's JSON field 'id'"

Canary Tokens

Code

"Create a canary URL to track document access"
"Generate a DNS canary for the config file"
"Set up an email tracker pixel"

Tools Reference

Everything works without an account on anonymous 7-day URLs. With WEBHOOK_SITE_API_KEY set, URLs are permanent and the account tools unlock the features of your plan. Every webhook_token accepts the UUID, an alias, a pasted https://webhook.site/... URL or the inbox address. Full parameters for each tool: docs/TOOLS.md.

31 tools, generated from the server by scripts/gen_tool_docs.py.

Diagnostics

Tool	What it does
`server_status`	Check this server's setup: API key, account reachability, plan, real-time socket, env config.

Webhooks

Tool	What it does
`create_webhook`	Create a disposable inbox to sign up on a website: HTTP URL, temp email, DNS.
`configure_webhook`	Create a webhook with custom settings, or update one (pass webhook_token).
`get_webhook_info`	Show a webhook's settings, expiry, request count and every address.
`get_webhook_email`	Return the temp inbox to sign up, verify, magic-link, or reset a password.
`list_webhooks`	List the webhooks (URLs / inboxes) in the account. Needs WEBHOOK_SITE_API_KEY.
`delete_webhook`	Permanently delete a webhook and every captured request/email.

Requests

Tool	What it does
`send_requests`	Send one JSON body (data) or several (payloads) to the webhook URL to test capture.
`get_webhook_requests`	List captured HTTP, email, or DNS events for a webhook, one page at a time.
`search_requests`	Search captured events by method, body text, headers, type, or date.
`get_request`	Return one captured event: the newest by default, or request_id.
`update_request`	Attach a note to a captured request, or set its dynamic response.
`download_request_file`	Download an uploaded file or email attachment (base64) by its file_id.
`delete_request`	Delete one captured HTTP, email, or DNS event by request id.
`delete_all_requests`	Clear captured events on a webhook, optionally by date or search query.
`export_webhook_data`	Full dump of captured events with HTML and untruncated bodies, as JSON or CSV.

Real-time

Tool	What it does
`wait_for_request`	Wait until a new HTTP (or DNS) callback hits the webhook (1-120s).
`wait_for_email`	Wait for a sign-up, verify, magic-link, or password-reset email (1-120s).
`respond_to_next_request`	Hold the next request that hits the webhook and answer it with your own status, headers and body.
`follow_email_link`	Open the verify / magic-link / reset URL from a captured sign-up email.

Account features (API key)

Read the full README →View source on GitHub →

Related MCP Servers

View all in Communication View all alternatives

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Webhook.site MCP Server

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "webhook-site-mcp-server": { "command": "npx", "args": ["-y", "Webhook.site MCP Server"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Webhook.site MCP Server AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/webhook-site-mcp-server?style=directory)](https://allmcps.com/mcp/webhook-site-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/webhook-site-mcp-server"><img src="https://allmcps.com/api/badge/webhook-site-mcp-server?style=directory" alt="Webhook.site MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryCommunication

27Quality signal: Emerging · 27/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership8/20

Documentation & tools11/30

Adoption & activity1/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Spotlight Slot

Feature Your MCP Server

Get maximum visibility for your server across our directory, search results, and detail pages.

Spotlight Your Server

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge and attach your website — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 💬 Communication →Best MCP servers for Slack & Communication →Alternatives to Webhook.site MCP Server →Install in Claude Desktop Install in Cursor Install in VS Code

Webhook.site MCP Server

Capture HTTP, email, and DNS callbacks with webhook.site from MCP clients.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "webhook-site-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "webhook-site-mcp-server"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Documentation Overview

Webhook.site MCP Server

Security helper tools (SSRF, XSS, canary tokens) are for authorized testing only — systems you own or have explicit permission to test.

Quick Start
What Can You Do?
Tools Reference
Examples
Each Webhook Token Provides
Documentation
Development
Requirements
Contributing
Credits
Links

Quick Start

Installation

bash

# Using uvx (recommended - no install needed)
uvx webhook-mcp-server==3.0.0

# Or install via pip
pip install webhook-mcp-server==3.0.0

Use 3.0.0 or newer. 2.1.3 does not start on MCP 2.0; 3.0 renames a few tools (see Upgrading from 2.x).

VS Code / GitHub Copilot

Add to .vscode/mcp.json:

config.json

{
  "servers": {
    "webhook-mcp-server": {
      "type": "stdio",
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Cursor

Add to .cursor/mcp.json (project) or your user MCP config:

config.json

{
  "mcpServers": {
    "webhook-mcp-server": {
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "webhook-mcp-server": {
      "command": "uvx",
      "args": ["webhook-mcp-server==3.0.0"]
    }
  }
}

Configuration

All settings are environment variables on the server process. Put them in the env block of your MCP client config.

Variable	Purpose
`WEBHOOK_SITE_API_KEY`	Your webhook.site API key. Makes new URLs permanent (your plan's quota) and unlocks `list_webhooks`, Custom Actions, Schedules, Global Variables, Groups, Queue Profiles, Templates, Databases, Users and CSV export
`WEBHOOK_SITE_DEFAULT_EXPIRY`	Seconds until new URLs expire when the call does not pass `expiry`. Unset means permanent on a paid account (7 days for anonymous URLs)
`WEBHOOK_MCP_RATE_LIMIT_MAX_WAIT`	When webhook.site answers 429 with a `Retry-After` up to this many seconds (default 15), the call waits and retries once; longer waits are reported as an error naming the wait
`FOLLOW_EMAIL_LINK_ALLOW_HOSTS`	`follow_email_link` only opens links to public internet hosts, and connects to the address it checked (no DNS rebinding). To test a sign-up flow on your own machine or intranet, list what to allow: `localhost,127.0.0.1,*.corp.example,10.0.0.0/8`
`HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY`	Honoured by `follow_email_link`. The proxy makes the connection, so the target is checked before the request instead of being pinned
`SSL_CERT_FILE` / `SSL_CERT_DIR`	Custom CA bundle for `follow_email_link`, for corporate TLS interception

What Can You Do?

Capture Webhooks

Code

"Create a webhook and show me the URL"
"What requests have been sent to my webhook?"
"Wait for a request to come in"

Security/Bug Bounty:

Code

"Generate an SSRF payload to test for blind vulnerabilities"
"Create XSS callback payloads to detect blind XSS attacks"
"Make me a canary token to detect if someone accesses a URL"

Email Automation:

Code

"Create a temp email and wait for a password reset link"
"Monitor this webhook for emails and extract all links from them"
"Give me 3 temporary emails at once" (batch creation)

API Testing:

Code

"Create a webhook that returns a 404 error with a custom message"
"Make a webhook with CORS enabled that waits 5 seconds before responding"
"Send 10 different test requests to a webhook and show me all the captured data"
"Hold the next request and answer it with a 402 and this JSON body"

Real-time Monitoring:

Code

"Create a webhook and wait for any HTTP request to arrive"
"Monitor for DNS lookups to detect if a server is making DNS queries"
"Search all requests for ones containing 'password' in the body"

Data Analysis:

Code

"Export all captured webhook requests to JSON format"
"Show me statistics on requests received in the last hour"
"Filter and show only POST requests with specific headers"

Automate with your account:

Code

"Add a Custom Action that forwards every request to my staging API"
"Schedule a health check of https://example.com every 5 minutes and alert on a bad status"
"Write a WebhookScript that answers with the request's JSON field 'id'"

Canary Tokens

Code

"Create a canary URL to track document access"
"Generate a DNS canary for the config file"
"Set up an email tracker pixel"

Tools Reference

31 tools, generated from the server by scripts/gen_tool_docs.py.

Diagnostics

Tool	What it does
`server_status`	Check this server's setup: API key, account reachability, plan, real-time socket, env config.

Webhooks

Tool	What it does
`create_webhook`	Create a disposable inbox to sign up on a website: HTTP URL, temp email, DNS.
`configure_webhook`	Create a webhook with custom settings, or update one (pass webhook_token).
`get_webhook_info`	Show a webhook's settings, expiry, request count and every address.
`get_webhook_email`	Return the temp inbox to sign up, verify, magic-link, or reset a password.
`list_webhooks`	List the webhooks (URLs / inboxes) in the account. Needs WEBHOOK_SITE_API_KEY.
`delete_webhook`	Permanently delete a webhook and every captured request/email.

Requests

Tool	What it does
`send_requests`	Send one JSON body (data) or several (payloads) to the webhook URL to test capture.
`get_webhook_requests`	List captured HTTP, email, or DNS events for a webhook, one page at a time.
`search_requests`	Search captured events by method, body text, headers, type, or date.
`get_request`	Return one captured event: the newest by default, or request_id.
`update_request`	Attach a note to a captured request, or set its dynamic response.
`download_request_file`	Download an uploaded file or email attachment (base64) by its file_id.
`delete_request`	Delete one captured HTTP, email, or DNS event by request id.
`delete_all_requests`	Clear captured events on a webhook, optionally by date or search query.
`export_webhook_data`	Full dump of captured events with HTML and untruncated bodies, as JSON or CSV.

Real-time

Tool	What it does
`wait_for_request`	Wait until a new HTTP (or DNS) callback hits the webhook (1-120s).
`wait_for_email`	Wait for a sign-up, verify, magic-link, or password-reset email (1-120s).
`respond_to_next_request`	Hold the next request that hits the webhook and answer it with your own status, headers and body.
`follow_email_link`	Open the verify / magic-link / reset URL from a captured sign-up email.

Account features (API key)

Read the full README →View source on GitHub →

Related MCP Servers

View all in Communication View all alternatives

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Webhook.site MCP Server

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "webhook-site-mcp-server": { "command": "npx", "args": ["-y", "Webhook.site MCP Server"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/webhook-site-mcp-server?style=directory)](https://allmcps.com/mcp/webhook-site-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/webhook-site-mcp-server"><img src="https://allmcps.com/api/badge/webhook-site-mcp-server?style=directory" alt="Webhook.site MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryCommunication

27Quality signal: Emerging · 27/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership8/20

Documentation & tools11/30

Adoption & activity1/15

Community engagement0/10

★ Spotlight Slot

Feature Your MCP Server

Get maximum visibility for your server across our directory, search results, and detail pages.

Spotlight Your Server

Own this project?

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 💬 Communication →Best MCP servers for Slack & Communication →Alternatives to Webhook.site MCP Server →Install in Claude Desktop Install in Cursor Install in VS Code

Webhook.site MCP Server

Quick Install

Client Config & Setup

Documentation Overview

Webhook.site MCP Server

Table of Contents

Quick Start

Installation

VS Code / GitHub Copilot

Cursor

Claude Desktop

Configuration

What Can You Do?

Capture Webhooks

Security/Bug Bounty:

Email Automation:

API Testing:

Real-time Monitoring:

Data Analysis:

Automate with your account:

Canary Tokens

Tools Reference

Diagnostics

Webhooks

Requests

Real-time

Account features (API key)

Related MCP Servers

Reviews

Frequently Asked Questions about Webhook.site MCP Server

AllMCPs Directory Badge

Technical Specs & Signals

Feature Your MCP Server

Own this project?

Share & Embed

Explore more

Webhook.site MCP Server

Quick Install

Client Config & Setup

Documentation Overview

Webhook.site MCP Server

Table of Contents

Quick Start

Installation

VS Code / GitHub Copilot

Cursor

Claude Desktop

Configuration

What Can You Do?

Capture Webhooks

Security/Bug Bounty:

Email Automation:

API Testing:

Real-time Monitoring:

Data Analysis:

Automate with your account:

Canary Tokens

Tools Reference

Diagnostics

Webhooks

Requests

Real-time

Account features (API key)

Related MCP Servers

Reviews

Frequently Asked Questions about Webhook.site MCP Server

AllMCPs Directory Badge

Technical Specs & Signals

Feature Your MCP Server

Own this project?

Share & Embed

Explore more