MCP SERVER · OFFICIAL PROJECTHand a long-running job a callback URL, block until the result lands, and check the signature before your agent acts on it.
LABSCO SUMMARY
The loop the tools describe has no polling in it — create the endpoint, hand its URL to the job as a callback target, then block until the result lands, already signature-verified and decrypted. list_callbacks supplies the received_at to pass as after, so a second wait does not re-read the delivery you already handled. Before designing around signature checking, note that verify_signature needs a secret configured on the endpoint and a paid plan; replay_callback is its debugging counterpart, re-sending a captured delivery at your handler without touching the upstream system at all.
A webhook capture service exposing 8 tools: create a callback endpoint, wait for the next delivery instead of polling, read the decrypted body, check its HMAC signature, and replay it against your own handler.
create_callback_endpoint returns a URL for a slug, usable as the callback for an asynchronous job or another agent, or as a plain capture URL for a provider such as Stripe or GitHub.wait_for_callback blocks until the next delivery arrives at an endpoint and returns it, taking after to skip anything already seen and timeoutMs to bound the wait.get_callback_payload returns one delivery with its full headers, decrypted body and metadata, while list_callbacks returns method, status, provider and received_at summaries, newest first.verify_signature compares the HMAC against the endpoint's configured secret for Stripe, GitHub, Shopify or a custom provider, using a timing-safe comparison.replay_callback re-sends a stored delivery's original headers and body unchanged to a targetUrl.list_endpoints returns every endpoint the token owns with its slug, created_at and request counts, and get_endpoint returns one endpoint's full URL, signature provider configuration and custom response settings.A HookSense token, supplied as HOOKSENSE_TOKEN. verify_signature additionally needs a webhook secret configured on the endpoint and a paid plan.
One command plus a key — npx -y @hooksense/mcp, then supply credentials
USE CASES
Mint the callback URL, hand it to the job, and block until the result arrives instead of polling for it.
Check the HMAC against the secret configured on the endpoint before reading the body as fact.
Find the delivery in the endpoint's history and re-send it at your handler, unchanged, without asking the upstream system to fire again.
Point the provider at a capture URL, then read the deliveries it produces with headers and body intact rather than working from the documentation.
List what the token owns and open one to see its URL, its signature provider configuration and how it responds.
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
create_callback_endpointCreate a callback endpoint and return its URL. Hand this URL to a long-running/async job (or another agent) as its webhook/callback target, then await the result with wait_for_callback. Also works as a plain webhook capture URL for any provider (Stripe, GitHub, …).
get_callback_payloadFetch a single received callback with full headers, decrypted body, and metadata. Use this to read the result of an async job after wait_for_callback or list_callbacks gives you a callback id.
get_endpointGet details about a specific endpoint — its full URL, signature provider config, and custom response settings.
list_callbacksList callbacks received by an endpoint, newest first. Returns a summary (method, status, provider, received_at). Use get_callback_payload for the full body. Tip: read the newest received_at and pass it as after to wait_for_callback to wait only for what comes next.
list_endpointsList all webhook endpoints owned by the authenticated user. Returns slug, created_at, and request counts.
replay_callbackReplay a received callback to a target URL. The original headers and body are re-sent unchanged — useful to re-drive your handler against a known payload without re-triggering the upstream event.
verify_signatureVerify the HMAC signature of a received callback against the endpoint's configured secret (Stripe, GitHub, Shopify, or custom), using a timing-safe comparison. Returns whether the callback is authentic and untampered — call this before your agent acts on a payload. Requires the endpoint to have a webhook secret configured and a paid plan.
wait_for_callbackBlock until the next webhook (callback) arrives at an endpoint, then return it — instead of polling. Use this for async/long-running work: kick off the job with the endpoint URL as its callback, then call wait_for_callback to receive the result the moment it lands (signature-verified, decrypted). Returns { status: 'received', request } on delivery, or { status: 'pending' } if timeoutMs elapses first (just call again to keep waiting). Pass after (the receivedAt of the last callback you saw) so a callback that arrived between calls is returned immediately rather than missed.
BEFORE YOU INSTALL
8 tools when we connected. create_callback_endpoint provisions a live public URL, and replay_callback re-POSTs a received callback to any URL you name, firing whatever is there. wait_for_callback blocks until the webhook arrives.
All 3 documented clients run the server on your machine.
CONTEXT COST
Rated by the size of the 8 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
npx -y @hooksense/mcp{
"mcpServers": {
"hooksense": {
"command": "npx",
"args": [
"-y",
"@hooksense/mcp"
],
"env": {
"HOOKSENSE_TOKEN": "<YOUR_HOOKSENSE_TOKEN>"
}
}
}
}MCP servers
Tailored-Tools
anggasct
0xmergen
baryhuang