Hookwarden — Webhook Integrity MCP Server

by hookwarden Your server? Claim it

local only

Hookwarden — Webhook Integrity runs on your own machine — the client starts it, so there is no endpoint to ping. 76 installs a week from npm. Last commit 12 Aug 2026.

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +17. Local. Deterministic.

Installs per day peak 32 · avg 11 · +148% w/w

a month agotoday

Installs / week

npm · @hookwarden/mcp

Stars

0 open issues

12 Aug 2026

Last commit

0 releases in 90 days

Apache-2.0

License

TypeScript

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable packages/cli/src/commands/fix.ts:176, packages/fix/src/staging.ts:29

      const original = await fs.readFile(path.join(cwd, filePath), "utf-8");

Runs an external command packages/cli/src/commands/update.ts:57

      execSync(info.upgradeCommand, { stdio: "inherit" });

Runs an external command python-packages/hookwarden/src/hookwarden/_exec.py:19

        return subprocess.run(cmd).returncode

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp -- npx -y @hookwarden/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp": {
      "args": [
        "-y",
        "@hookwarden/mcp"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp]
command = "npx"
args = ["-y", "@hookwarden/mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "args": [
        "-y",
        "@hookwarden/mcp"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "mcp": {
      "args": [
        "-y",
        "@hookwarden/mcp"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Hookwarden — Webhook Integrity

same job, measured the same way

MotionLint

by bobaba99

Catch bad animations before they ship. Deterministic motion audit + vision-LLM design review.

43 installs/wk local only

Taskbounty Check

by eliottreich

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

65 installs/wk local only

WORKS Public Verifier

by dyzcode

Independent static verification for exact immutable public GitHub commits.

3 tools answering

Norma by Quality Clouds

by qualityclouds

Deterministic AI code review, with an audit record. Governance inside the agent loop.

answering

GitDealFlow — GitHub signals for startup investors

by kindrat86

GitHub engineering acceleration signals for venture deal flow across 15 sectors.

102 installs/wk 12 tools local only

Stripecheckup

by vercel-stripecheckup

Scan pasted Stripe webhook/checkout code for common integration bugs.

1 tools answering

AsDecided

by asdecided

Read-only access to deterministic engineering decisions stored in a local repository.

local only

CausalLayer MCP

by smq9sn5jck-coder

Deterministic AI liability attribution with Bitcoin-anchored proof certificates.

28 installs/wk 10 tools answering

Hookwarden — Webhook Integrity — questions

Answers built from our own checks of this server.

Why is there no uptime for Hookwarden — Webhook Integrity?

Hookwarden — Webhook Integrity runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @hookwarden/mcp was installed 76 times last week.

How do I connect Hookwarden — Webhook Integrity?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @hookwarden/mcp straight from npm; nothing to host, nothing to sign up for.

How many people use Hookwarden — Webhook Integrity?

The npm package @hookwarden/mcp was installed 76 times in the last week. Week over week that is +148%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Hookwarden — Webhook Integrity open source?

Yes — it is published under the Apache-2.0 licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.