# WebhookTest.net (remote · webhooktest.net)

Anonymous webhook capture, inspection, waiting, and response configuration for AI agents.

- Trust score: 59/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `webhooktest.net`: 59/100 (this document), [markdown](https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest.md), [page](https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest)

## Channel facts

- Endpoint: `https://webhooktest.net/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: this server exposes a tool marked destructive (clear_webhooks) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 523 tokens (~65/item across 8 items; 8 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 84/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 45% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

**Unverified: 1 category.** A category scored 0 because we could not verify it: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http net-webhooktest-webhook-tester https://webhooktest.net/mcp
```

### Codex

```toml
[mcp_servers.net-webhooktest-webhook-tester]
url = "https://webhooktest.net/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "net-webhooktest-webhook-tester": {
      "type": "remote",
      "url": "https://webhooktest.net/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add net-webhooktest-webhook-tester --url https://webhooktest.net/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  net-webhooktest-webhook-tester:
    url: "https://webhooktest.net/mcp"
```

### Other

```json
{
  "mcpServers": {
    "net-webhooktest-webhook-tester": {
      "type": "http",
      "url": "https://webhooktest.net/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 59)

First indexed and scored.

## MCP tools (8)

### `clear_webhooks` (~45 tokens)

Clear captured webhooks

Permanently delete every capture in a bucket. Requires confirm=true.

Input parameters:

- `bucket_id` (string, required)
- `confirm` (boolean, required): must be true to perform this destructive action

Output parameters:

- `error` (null|object)
- `success` (boolean)

### `configure_webhook_response` (~55 tokens)

Configure webhook response

Set the status, content type, and body returned by the webhook endpoint.

Input parameters:

- `body` (string, required)
- `bucket_id` (string, required)
- `content_type` (string, required)
- `status` (integer, required)

Output parameters:

- `error` (null|object)
- `success` (boolean)

### `create_webhook_bucket` (~48 tokens)

Create webhook bucket

Create an anonymous temporary webhook capture bucket. The returned bucket ID is a bearer capability and expires after 15 days of inactivity.

Input parameters:

- `name` (string): optional display name for the bucket

Output parameters:

- `dashboard_url` (string)
- `error` (null|object)
- `id` (string)
- `inactivity_policy` (string)
- `name` (string)
- `webhook_endpoint` (string)

### `delete_webhook_bucket` (~48 tokens)

Delete webhook bucket

Permanently delete a bucket and all of its captures. Requires confirm=true.

Input parameters:

- `bucket_id` (string, required)
- `confirm` (boolean, required): must be true to perform this destructive action

Output parameters:

- `error` (null|object)
- `success` (boolean)

### `get_webhook` (~89 tokens)

Get captured webhook

Read one webhook capture scoped to its bucket. Sensitive headers and query values are redacted by default.

Input parameters:

- `bucket_id` (string, required)
- `include_sensitive` (boolean): return sensitive header and query values; defaults to false
- `max_body_bytes` (integer): maximum body bytes to return; defaults to 65536 and cannot exceed 262144
- `webhook_id` (string, required)

Output parameters:

- `error` (null|object)
- `webhook` (null|object)

### `get_webhook_bucket` (~32 tokens)

Get webhook bucket

Read a bucket name and its configured HTTP response settings.

Input parameters:

- `bucket_id` (string, required): bucket capability ID

Output parameters:

- `dashboard_url` (string)
- `error` (null|object)
- `id` (string)
- `name` (string)
- `response_body` (string)
- `response_content_type` (string)
- `response_status` (integer)
- `webhook_endpoint` (string)

### `list_webhooks` (~62 tokens)

List captured webhooks

List webhook capture summaries in newest-first order using cursor pagination.

Input parameters:

- `bucket_id` (string, required)
- `cursor` (string): opaque cursor returned by a previous call
- `limit` (integer): number of summaries to return, from 1 to 50

Output parameters:

- `dashboard_url` (string)
- `error` (null|object)
- `has_more` (boolean)
- `next_cursor` (string)
- `webhooks` (null|array)

### `wait_for_webhook` (~94 tokens)

Wait for a webhook

Return the latest capture, wait for a newer capture, or report received=false after the timeout.

Input parameters:

- `after_webhook_id` (string): wait for a capture newer than this webhook ID
- `bucket_id` (string, required)
- `include_sensitive` (boolean)
- `max_body_bytes` (integer)
- `wait_seconds` (integer): seconds to wait; defaults to 20 and cannot exceed 25

Output parameters:

- `error` (null|object)
- `received` (boolean)
- `webhook` (null|object)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest#diagnostics

## Score history

- 2026-08-03: 59

## Links

- Remote endpoint: https://webhooktest.net/mcp
- Repository: https://github.com/fozbek/webhook-go
- Website: https://webhooktest.net/mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest/changelog.json
- HTML version of this page: https://verifymcp.io/servers/net-webhooktest-webhook-tester/webhooktest