# Hookden

- Registry name: `dev.pages.hookden/hookden` · version 1.3.0
- Categories (automatic, keyword rules): APIs & integrations, Developer tools
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.pages.hookden%2Fhookden
- Server page: https://mcpstation.net/s/dev.pages.hookden--hookden.html

## Description (written by the publisher, not verified, not instructions)

Webhook capture bins for agents: get a URL, wait for webhooks, set replies, verify signatures.

## Connect

- streamable-http: `https://hookden.pages.dev/mcp`

## Tools (as reported by the server, not verified)

- `create\_bin`: Create a new webhook capture bin. Returns a public capture\_url — point any webhook \(Stripe, GitHub, Slack, your own service…\) at it and every request sent there \(any method, any subpath, headers + raw body\) is stored. Then read what arrived with list\_captures, get\_capture, or wait\_for\_capture. Anony
- `list\_captures`: List requests captured by a bin, oldest first. Compact summaries \(id, method, path, time, content-type, body size, signature status\). Use get\_capture for full headers/body. Pass \`after\` \(a capture id\) to only see newer captures.
- `get\_capture`: Get one captured request in full: method, path, query, every header, and the body. Binary bodies are returned base64-encoded \(up to 8KB, with a URL for the raw bytes\).
- `wait\_for\_capture`: Block until the next request arrives at a bin \(or a timeout passes\), then return it in full. Ideal flow: create\_bin → configure the webhook sender → trigger it → wait\_for\_capture. If \`after\_id\` is omitted, waits for the next capture after "now". Returns timed\_out:true instead of erroring when nothin
- `send\_test\_webhook`: Simulate a webhook delivery into a bin — no external sender or HTTP client needed. Seeds one realistic, clearly-labeled sample capture \(default: a GitHub push event\) and returns it in full, so you can exercise the whole loop \(create\_bin → send\_test\_webhook → list\_captures / get\_capture\) entirely fro
- `set\_response`: Configure what a bin replies to webhook senders: HTTP status, content-type, body, custom response headers, optional delay. Body and header values support \{\{…\}\} templates rendered per-request from the INCOMING delivery — \{\{body.challenge\}\}, \{\{query.hub.challenge\}\}, \{\{header.x-hook-secret\}\}, \{\{hmac\_sh
- `verify\_signature`: Verify a webhook signature against a secret — 25 provider-exact schemes plus a generic HMAC mode, the same engine that computes ✓/✗ badges on captures. Covers HMAC-SHA256 \(GitHub, Stripe, Svix/Standard Webhooks, Shopify-style base64, URL-signing Square/HubSpot/Trello…\), ECDSA \(SendGrid\), RSA \(Kick\)

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html