@webhooks-cc/mcp 1.15.0 → 1.16.0

package/README.md

@@ -2,7 +2,7 @@
 
 MCP server for [webhooks.cc](https://webhooks.cc). It gives coding agents direct access to webhook testing workflows: create endpoints, send signed test webhooks, inspect captures, compare attempts, verify signatures, and read recent webhook context through MCP resources.
 
-It works with Claude Code, Cursor, VS Code, Codex, Windsurf, and Claude Desktop. Hosted agents such as claude.ai and ChatGPT use the [remote server](#remote-server) at `https://webhooks.cc/mcp` instead.
+The easiest way in is the [remote server](#remote-server) at `https://webhooks.cc/mcp`, for any client that can add a remote MCP server (Claude Code, Cursor, VS Code, Codex, claude.ai, ChatGPT): you approve it once in your browser, with no key and nothing to install. This package is the local server, for sends to a handler on your machine, its prompts and resources, a keyless sandbox, and CI. It works with Claude Code, Cursor, VS Code, Codex, Devin Desktop (formerly Windsurf), and Claude Desktop.
 
 ## Install
 
@@ -27,13 +27,14 @@ For other agents, `npx skills add kroqdotdev/webhooks-cc` installs the same skil
 
 `https://webhooks.cc/mcp` serves the same tools over streamable HTTP, with nothing to install. The client opens webhooks.cc in the browser once; the human signs in and clicks Connect (OAuth 2.1 with PKCE, no code to type), and can disconnect it later under Account, Connected agents.
 
-- **claude.ai and Claude Desktop**: Settings, Connectors, add a custom connector with the URL `https://webhooks.cc/mcp`
-- **ChatGPT**: add it as a custom connector (developer mode)
-- **Claude Code**: `claude mcp add --transport http webhooks-cc https://webhooks.cc/mcp`
+- **Claude Code**: `claude mcp add -s user --transport http webhooks-cc https://webhooks.cc/mcp`, then `/mcp` in Claude Code to sign in
+- **Codex**: `codex mcp add webhooks-cc --url https://webhooks.cc/mcp` (it opens the browser to sign in; if it does not, `codex mcp login webhooks-cc`)
 - **Cursor** (`.cursor/mcp.json`): `{ "mcpServers": { "webhooks-cc": { "url": "https://webhooks.cc/mcp" } } }`
 - **VS Code** (`.vscode/mcp.json`): `{ "servers": { "webhooks-cc": { "type": "http", "url": "https://webhooks.cc/mcp" } } }`
+- **claude.ai and Claude Desktop**: Settings, Connectors, add a custom connector with the URL `https://webhooks.cc/mcp`
+- **ChatGPT**: add it as a custom connector (developer mode)
 
-A client that can send headers may use an API key instead: `Authorization: Bearer whcc_...`. The remote server has 44 tools: `send_to` and `replay_request` are left out and `targetUrl` is refused, because a hosted server cannot reach your machine, and waits are capped at 50 seconds. It needs an account (no sandbox), and serves tools only, without prompts or resources.
+A client that can send headers may use an API key instead: `Authorization: Bearer whcc_...`. The remote server has 45 tools: `send_to` and `replay_request` are left out and `targetUrl` is refused, because a hosted server cannot reach your machine, and waits are capped at 50 seconds. It needs an account (no sandbox), and serves tools only, without prompts or resources.
 
 ### One-click
 
@@ -56,7 +57,7 @@ npx @webhooks-cc/mcp setup claude-code
 npx @webhooks-cc/mcp setup cursor
 npx @webhooks-cc/mcp setup vscode
 npx @webhooks-cc/mcp setup codex
-npx @webhooks-cc/mcp setup windsurf
+npx @webhooks-cc/mcp setup devin    # Devin Desktop, formerly Windsurf ("windsurf" works too)
 npx @webhooks-cc/mcp setup claude-desktop
 ```
 
@@ -82,7 +83,7 @@ Leave out `env` to start without a key. Get your API key at [webhooks.cc/account
 
 ## What it exposes
 
-The server exposes `46` tools, `3` prompts, and `3` resource surfaces with an API key, the same `46` tools and the prompts with a saved connection, and `11` sandbox tools otherwise. The remote server exposes `44` tools.
+The server exposes `47` tools, `3` prompts, and `3` resource surfaces with an API key, the same `47` tools and the prompts with a saved connection, and `11` sandbox tools otherwise. The remote server exposes `45` tools.
 
 ### Endpoint tools
 

package/dist/bin/mcp.js

@@ -191,6 +191,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -256,6 +303,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -439,6 +487,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod2.z.object({
+  name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod2.z.object({
+  id: import_zod2.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod2.z.string().max(100),
+  enabled: import_zod2.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod2.z.object({
+    logic: import_zod2.z.enum(["and", "or"]).optional(),
+    conditions: import_zod2.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod2.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod2.z.object({
+    from: import_zod2.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod2.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod2.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod2.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod2.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod2.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod2.z.array(import_zod2.z.object({ name: import_zod2.z.string(), column: import_zod2.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod2.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod2.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod2.z.boolean().optional().describe("Send to it (default true)"),
@@ -505,6 +581,9 @@ var mockResponseSchema = import_zod2.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod2.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod2.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod2.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -516,6 +595,7 @@ var createEndpointShape = {
   notificationUrl: import_zod2.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod2.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -858,6 +938,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -894,6 +975,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -987,6 +1069,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -1008,7 +1091,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -1110,15 +1194,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod2.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod2.z.array(
-        import_zod2.z.object({
-          name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod2.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod2.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -1132,7 +1213,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -1143,12 +1226,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      requestId: import_zod2.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod2.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",
@@ -2409,7 +2509,7 @@ function sandboxToolSet(server, session, showAccount) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.0" : "0.0.0-dev";
+var VERSION = true ? "1.16.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;
@@ -2436,7 +2536,15 @@ var import_fs = require("fs");
 var import_path = require("path");
 var import_child_process = require("child_process");
 var import_os = require("os");
-var TOOLS = ["claude-code", "claude-desktop", "cursor", "vscode", "codex", "windsurf"];
+var TOOLS = [
+  "claude-code",
+  "claude-desktop",
+  "cursor",
+  "vscode",
+  "codex",
+  "devin",
+  "windsurf"
+];
 var API_KEY_REGEX = /^whcc_[a-zA-Z0-9_-]+$/;
 function validateApiKeyFormat(key) {
   if (!API_KEY_REGEX.test(key)) {
@@ -2458,12 +2566,13 @@ function vscodeServerConfig(apiKey) {
 function resolveApiKey(flags) {
   return flags["api-key"] ?? process.env.WHK_API_KEY ?? null;
 }
-function mergeJsonConfig(filePath, serverName, serverConfig, key = "mcpServers") {
+function mergeJsonConfig(filePath, serverName, serverConfig, key = "mcpServers", onInvalid = "replace") {
   let existing = {};
   if ((0, import_fs.existsSync)(filePath)) {
     try {
       existing = JSON.parse((0, import_fs.readFileSync)(filePath, "utf-8"));
     } catch {
+      if (onInvalid === "keep") return false;
       console.warn(`Warning: ${filePath} contains invalid JSON and will be overwritten.`);
       console.warn(`A backup has been saved to ${filePath}.bak`);
       (0, import_fs.copyFileSync)(filePath, `${filePath}.bak`);
@@ -2475,6 +2584,7 @@ function mergeJsonConfig(filePath, serverName, serverConfig, key = "mcpServers")
   const dir = (0, import_path.dirname)(filePath);
   if (!(0, import_fs.existsSync)(dir)) (0, import_fs.mkdirSync)(dir, { recursive: true });
   (0, import_fs.writeFileSync)(filePath, JSON.stringify(existing, null, 2) + "\n");
+  return true;
 }
 function getClaudeDesktopConfigPath() {
   const os = (0, import_os.platform)();
@@ -2577,11 +2687,41 @@ WHK_API_KEY = "<your-key>"
     process.exit(1);
   }
 }
-function setupWindsurf(apiKey) {
-  const configPath = (0, import_path.join)((0, import_os.homedir)(), ".codeium", "windsurf", "mcp_config.json");
-  mergeJsonConfig(configPath, "webhooks-cc", mcpServerConfig(apiKey));
+function devinMcpConfigPath(os = (0, import_os.platform)(), home = (0, import_os.homedir)(), env = process.env) {
+  if (os === "win32") {
+    const base2 = env.APPDATA || import_path.win32.join(home, "AppData", "Roaming");
+    return import_path.win32.join(base2, "devin", "mcp_config.json");
+  }
+  const xdg = env.XDG_CONFIG_HOME;
+  const base = xdg && import_path.posix.isAbsolute(xdg) ? xdg : import_path.posix.join(home, ".config");
+  return import_path.posix.join(base, "devin", "mcp_config.json");
+}
+function legacyWindsurfConfigPath(home = (0, import_os.homedir)()) {
+  return (0, import_path.join)(home, ".codeium", "windsurf", "mcp_config.json");
+}
+function setupDevin(apiKey) {
+  const config = mcpServerConfig(apiKey);
+  const configPath = devinMcpConfigPath();
+  if (!mergeJsonConfig(configPath, "webhooks-cc", config, "mcpServers", "keep")) {
+    console.error(
+      `${configPath} is not plain JSON (it may hold comments), so it was left as it is.`
+    );
+    console.error(`Add this under "mcpServers" yourself:
+`);
+    const entry = mcpServerConfig(apiKey ? "<your-key>" : null);
+    console.error(`"webhooks-cc": ${JSON.stringify(entry, null, 2)}`);
+    process.exit(1);
+  }
   console.log(`Done! Config written to ${configPath}`);
-  console.log("Restart Windsurf for changes to take effect.");
+  const legacyPath = legacyWindsurfConfigPath();
+  if ((0, import_fs.existsSync)((0, import_path.dirname)(legacyPath))) {
+    if (mergeJsonConfig(legacyPath, "webhooks-cc", config, "mcpServers", "keep")) {
+      console.log(`Also written to ${legacyPath}, for Windsurf from before the rename.`);
+    } else {
+      console.warn(`Left ${legacyPath} as it is: it is not plain JSON.`);
+    }
+  }
+  console.log("Restart Devin Desktop (or Windsurf) for changes to take effect.");
 }
 function printUsage() {
   console.log(`
@@ -2599,7 +2739,8 @@ Tools:
   cursor           Cursor editor (writes .cursor/mcp.json)
   vscode           VS Code Copilot (writes .vscode/mcp.json)
   codex            OpenAI Codex CLI (runs 'codex mcp add')
-  windsurf         Windsurf editor
+  devin            Devin Desktop (formerly Windsurf) and the Devin CLI
+  windsurf         The same as devin
 
 Options:
   --api-key <key>  Your webhooks.cc API key (or set WHK_API_KEY env var); optional
@@ -2656,8 +2797,9 @@ function runSetup(args2) {
     case "codex":
       setupCodex(apiKey);
       break;
+    case "devin":
     case "windsurf":
-      setupWindsurf(apiKey);
+      setupDevin(apiKey);
       break;
   }
 }
@@ -2690,7 +2832,7 @@ Setup:
   npx @webhooks-cc/mcp setup cursor
   npx @webhooks-cc/mcp setup vscode
   npx @webhooks-cc/mcp setup codex
-  npx @webhooks-cc/mcp setup windsurf
+  npx @webhooks-cc/mcp setup devin
   npx @webhooks-cc/mcp setup claude-desktop
   (add --api-key whcc_... to start with your account's tools)
 

package/dist/{chunk-RHQD2GRD.mjs → chunk-4LEPLCW5.mjs}

@@ -100,6 +100,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -165,6 +212,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -221,6 +269,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = z.object({
+  name: z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: z.string().optional().describe('The header name, for from "header"'),
+  pattern: z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = z.object({
+  id: z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: z.string().max(100),
+  enabled: z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: z.object({
+    logic: z.enum(["and", "or"]).optional(),
+    conditions: z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: z.object({
+    from: z.enum(["text", "html", "attachment"]),
+    pattern: z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: z.array(z.object({ name: z.string(), column: z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: z.boolean().optional().describe("Send to it (default true)"),
@@ -287,6 +363,9 @@ var mockResponseSchema = z.object({
     `Response delay in milliseconds (${MOCK_RESPONSE_DELAY_MIN}-${MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: z.string().optional().describe("Display name for the endpoint"),
   ephemeral: z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -298,6 +377,7 @@ var createEndpointShape = {
   notificationUrl: z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -640,6 +720,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -676,6 +757,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -769,6 +851,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -790,7 +873,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -892,15 +976,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: z.array(
-        z.object({
-          name: z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: z.string().optional().describe('The header name, for from "header"'),
-          pattern: z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -914,7 +995,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -925,12 +1008,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: z.string().describe("The endpoint slug"),
+      requestId: z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",

package/dist/index.js

@@ -215,6 +215,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -280,6 +327,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -463,6 +511,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod2.z.object({
+  name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod2.z.object({
+  id: import_zod2.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod2.z.string().max(100),
+  enabled: import_zod2.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod2.z.object({
+    logic: import_zod2.z.enum(["and", "or"]).optional(),
+    conditions: import_zod2.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod2.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod2.z.object({
+    from: import_zod2.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod2.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod2.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod2.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod2.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod2.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod2.z.array(import_zod2.z.object({ name: import_zod2.z.string(), column: import_zod2.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod2.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod2.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod2.z.boolean().optional().describe("Send to it (default true)"),
@@ -529,6 +605,9 @@ var mockResponseSchema = import_zod2.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod2.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod2.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod2.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -540,6 +619,7 @@ var createEndpointShape = {
   notificationUrl: import_zod2.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod2.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -882,6 +962,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -918,6 +999,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -1011,6 +1093,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -1032,7 +1115,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -1134,15 +1218,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod2.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod2.z.array(
-        import_zod2.z.object({
-          name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod2.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod2.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -1156,7 +1237,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -1167,12 +1250,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      requestId: import_zod2.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod2.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",
@@ -2436,7 +2536,7 @@ function registerAgentRegistrationTools(server) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.0" : "0.0.0-dev";
+var VERSION = true ? "1.16.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;

package/dist/index.mjs

@@ -13,7 +13,7 @@ import {
   registerTools,
   waitForRequestShape,
   withErrorHandling
-} from "./chunk-RHQD2GRD.mjs";
+} from "./chunk-4LEPLCW5.mjs";
 
 // src/index.ts
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -654,7 +654,7 @@ function registerAgentRegistrationTools(server) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.0" : "0.0.0-dev";
+var VERSION = true ? "1.16.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;

package/dist/tools.d.mts

@@ -64,6 +64,11 @@ declare const createEndpointShape: {
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     notificationUrl: z.ZodOptional<z.ZodString>;
+    site: z.ZodOptional<z.ZodEnum<{
+        webhooks: "webhooks";
+        mailhooks: "mailhooks";
+        both: "both";
+    }>>;
     signingProvider: z.ZodOptional<z.ZodString>;
     signingSecret: z.ZodOptional<z.ZodString>;
     signingHeader: z.ZodOptional<z.ZodString>;

package/dist/tools.d.ts

@@ -64,6 +64,11 @@ declare const createEndpointShape: {
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     notificationUrl: z.ZodOptional<z.ZodString>;
+    site: z.ZodOptional<z.ZodEnum<{
+        webhooks: "webhooks";
+        mailhooks: "mailhooks";
+        both: "both";
+    }>>;
     signingProvider: z.ZodOptional<z.ZodString>;
     signingSecret: z.ZodOptional<z.ZodString>;
     signingHeader: z.ZodOptional<z.ZodString>;

package/dist/tools.js

@@ -109,6 +109,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -174,6 +221,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -230,6 +278,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod.z.object({
+  name: import_zod.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod.z.object({
+  id: import_zod.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod.z.string().max(100),
+  enabled: import_zod.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod.z.object({
+    logic: import_zod.z.enum(["and", "or"]).optional(),
+    conditions: import_zod.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod.z.object({
+    from: import_zod.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod.z.array(import_zod.z.object({ name: import_zod.z.string(), column: import_zod.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod.z.boolean().optional().describe("Send to it (default true)"),
@@ -296,6 +372,9 @@ var mockResponseSchema = import_zod.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -307,6 +386,7 @@ var createEndpointShape = {
   notificationUrl: import_zod.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -649,6 +729,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -685,6 +766,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -778,6 +860,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -799,7 +882,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -901,15 +985,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod.z.array(
-        import_zod.z.object({
-          name: import_zod.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -923,7 +1004,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -934,12 +1017,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod.z.string().describe("The endpoint slug"),
+      requestId: import_zod.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",

package/dist/tools.mjs

@@ -14,7 +14,7 @@ import {
   textContent,
   waitForRequestShape,
   withErrorHandling
-} from "./chunk-RHQD2GRD.mjs";
+} from "./chunk-4LEPLCW5.mjs";
 export {
   REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webhooks-cc/mcp",
-  "version": "1.15.0",
+  "version": "1.16.0",
   "mcpName": "io.github.kroqdotdev/webhooks-cc",
   "description": "MCP server for webhooks.cc — AI agent integration for webhook testing",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.1",
     "zod": "^4.6.7",
-    "@webhooks-cc/sdk": "1.19.0"
+    "@webhooks-cc/sdk": "1.20.0"
   },
   "devDependencies": {
     "@types/node": "^26.6.5",