Hookwarden — Webhook Integrity MCP Server

by hookwarden Your server? Claim it

local only

Hookwarden — Webhook Integrity runs on your own machine — the client starts it, so there is no endpoint to ping. 91 installs a week from npm. Last commit 14 Oct 2026.

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic.

Installs per day peak 212 · avg 23 · +57% w/w

a month agotoday

Installs / week

npm · @hookwarden/mcp

Stars

0 open issues

14 Oct 2026

Last commit

2 releases in 90 days

Apache-2.0

License

TypeScript

What the code does

We read the source, 4 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command packages/cli/src/commands/update.ts:57, packages/cli/src/commands/ui.ts:143

      execSync(info.upgradeCommand, { stdio: "inherit" });

Builds a file path from a variable packages/fix/src/staging.ts:29, packages/cli/src/commands/fix.ts:207

  const stagingDir = path.join(repoRoot, STAGING_DIR_NAME, runId);

Runs an external command python-packages/hookwarden/src/hookwarden/_exec.py:19

        return subprocess.run(cmd).returncode

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp -- npx -y @hookwarden/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@hookwarden/mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp]
command = "npx"
args = ["-y", "@hookwarden/mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@hookwarden/mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@hookwarden/mcp"
      ]
    }
  }
}

Alternatives to Hookwarden — Webhook Integrity

same job, measured the same way

Webhook Toolkit

by the-kipdev

Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).

54 installs/wk 10 tools answering

MotionLint

by bobaba99

Catch bad animations before they ship. Deterministic motion audit + vision-LLM design review.

69 installs/wk local only

International Classifications MCP

by lbruce-wq

Deterministic MCP for statistical classifications and survey codelists with provenance.

10 tools answering

CI Guard MCP

by carelessdept

Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).

63 installs/wk local only

Taskbounty Check

by eliottreich

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

61 installs/wk local only

Code Guardian

by luminarisoftwares

A deterministic A-F grade for a repo without running it, plus a verify loop: plan, fix, diff.

931 installs/wk local only

WORKS Public Verifier

by dyzcode

Independent static verification for exact immutable public GitHub commits.

3 tools answering

Stripecheckup

by vercel-stripecheckup

Scan pasted Stripe webhook/checkout code for common integration bugs.

1 tools answering

Hookwarden — Webhook Integrity — questions

Answers built from our own checks of this server.

Why is there no uptime for Hookwarden — Webhook Integrity?

Hookwarden — Webhook Integrity runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @hookwarden/mcp was installed 91 times last week.

How do I connect Hookwarden — Webhook Integrity?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @hookwarden/mcp straight from npm; nothing to host, nothing to sign up for.

How many people use Hookwarden — Webhook Integrity?

The npm package @hookwarden/mcp was installed 91 times in the last week. Week over week that is +57%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Hookwarden — Webhook Integrity open source?

Yes — it is published under the Apache-2.0 licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.