@webhooks-cc/mcp 1.15.1 → 1.17.0

package/README.md

@@ -34,7 +34,7 @@ For other agents, `npx skills add kroqdotdev/webhooks-cc` installs the same skil
 - **claude.ai and Claude Desktop**: Settings, Connectors, add a custom connector with the URL `https://webhooks.cc/mcp`
 - **ChatGPT**: add it as a custom connector (developer mode)
 
-A client that can send headers may use an API key instead: `Authorization: Bearer whcc_...`. The remote server has 44 tools: `send_to` and `replay_request` are left out and `targetUrl` is refused, because a hosted server cannot reach your machine, and waits are capped at 50 seconds. It needs an account (no sandbox), and serves tools only, without prompts or resources.
+A client that can send headers may use an API key instead: `Authorization: Bearer whcc_...`. The remote server has 46 tools: `send_to` and `replay_request` are left out and `targetUrl` is refused, because a hosted server cannot reach your machine, and waits are capped at 50 seconds. It needs an account (no sandbox), and serves tools only, without prompts or resources.
 
 ### One-click
 
@@ -83,13 +83,14 @@ Leave out `env` to start without a key. Get your API key at [webhooks.cc/account
 
 ## What it exposes
 
-The server exposes `46` tools, `3` prompts, and `3` resource surfaces with an API key, the same `46` tools and the prompts with a saved connection, and `11` sandbox tools otherwise. The remote server exposes `44` tools.
+The server exposes `48` tools, `3` prompts, and `3` resource surfaces with an API key, the same `48` tools and the prompts with a saved connection, and `11` sandbox tools otherwise. The remote server exposes `46` tools.
 
 ### Endpoint tools
 
 - `create_endpoint`
 - `list_endpoints`
 - `get_endpoint`
+- `favorite_endpoint` (mark or unmark one of your favourites; `list_endpoints` and `get_endpoint` show `favorite`)
 - `update_endpoint`
 - `preview_response`
 - `delete_endpoint`

package/dist/bin/mcp.js

@@ -191,6 +191,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -256,6 +303,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -397,6 +445,10 @@ function registerResources(server, client) {
 var import_zod3 = require("zod");
 var import_sdk2 = require("@webhooks-cc/sdk");
 
+// src/version.ts
+var VERSION = true ? "1.17.0" : "0.0.0-dev";
+var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
+
 // src/tools.ts
 var import_zod2 = require("zod");
 var import_sdk = require("@webhooks-cc/sdk");
@@ -439,6 +491,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod2.z.object({
+  name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod2.z.object({
+  id: import_zod2.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod2.z.string().max(100),
+  enabled: import_zod2.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod2.z.object({
+    logic: import_zod2.z.enum(["and", "or"]).optional(),
+    conditions: import_zod2.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod2.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod2.z.object({
+    from: import_zod2.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod2.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod2.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod2.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod2.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod2.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod2.z.array(import_zod2.z.object({ name: import_zod2.z.string(), column: import_zod2.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod2.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod2.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod2.z.boolean().optional().describe("Send to it (default true)"),
@@ -505,6 +585,9 @@ var mockResponseSchema = import_zod2.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod2.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod2.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod2.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -516,6 +599,7 @@ var createEndpointShape = {
   notificationUrl: import_zod2.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod2.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -858,6 +942,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -894,6 +979,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -987,6 +1073,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -1008,7 +1095,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -1093,6 +1181,18 @@ function registerTools(target, client, options = {}) {
       return jsonContent(endpoint);
     })
   );
+  server.tool(
+    "favorite_endpoint",
+    "Mark an endpoint as one of your favourites, or unmark it with favorite: false. A favourite is your own choice, so endpoints shared with you through teams can be marked too; list_endpoints and get_endpoint show it as favorite. Idempotent.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      favorite: import_zod2.z.boolean().optional().describe("true marks it as a favourite (the default), false unmarks it")
+    },
+    withErrorHandling(async ({ slug, favorite }) => {
+      const result = favorite === false ? await client.endpoints.unfavorite(slug) : await client.endpoints.favorite(slug);
+      return jsonContent({ slug, favorite: result.favorite });
+    })
+  );
   server.tool(
     "update_endpoint",
     "Update an endpoint name, mock response, conditional response rules, signing configuration, whether codes and links are picked out of its emails, or the named fields picked out of them.",
@@ -1110,15 +1210,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod2.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod2.z.array(
-        import_zod2.z.object({
-          name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod2.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod2.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -1132,7 +1229,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -1143,12 +1242,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      requestId: import_zod2.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod2.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",
@@ -2049,7 +2165,8 @@ var AgentSession = class {
       baseUrl: this.baseUrl,
       webhookUrl: this.webhookUrl,
       clientName: this.clientName,
-      credentialsFile: this.credentialsFile
+      credentialsFile: this.credentialsFile,
+      userAgent: MCP_USER_AGENT
     };
   }
   /**
@@ -2142,6 +2259,7 @@ function registerSandboxTools(server, options = {}) {
     baseUrl,
     webhookUrl,
     credentialsFile: options.credentialsFile,
+    userAgent: MCP_USER_AGENT,
     // The human disconnected the agent: back to the sandbox, unless a
     // newer connection is already on display.
     onRevoked: () => queueMicrotask(() => {
@@ -2303,7 +2421,8 @@ function sandboxToolSet(server, session, showAccount) {
             webhookUrl: session.webhookUrl,
             email: normalized,
             clientName: session.clientName,
-            credentialsFile: session.credentialsFile
+            credentialsFile: session.credentialsFile,
+            userAgent: MCP_USER_AGENT
           }));
           session.connect = { via: "connect", pending, email: normalized };
           attempt = pending;
@@ -2409,7 +2528,6 @@ function sandboxToolSet(server, session, showAccount) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.1" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;
@@ -2424,7 +2542,7 @@ function createServer(options = {}) {
     registerPrompts(server);
     return server;
   }
-  const client = new import_sdk3.WebhooksCC({ apiKey, webhookUrl, baseUrl });
+  const client = new import_sdk3.WebhooksCC({ apiKey, webhookUrl, baseUrl, userAgent: MCP_USER_AGENT });
   registerTools(server, client);
   registerPrompts(server);
   registerResources(server, client);

package/dist/{chunk-RHQD2GRD.mjs → chunk-ZAPNMGCE.mjs}

@@ -100,6 +100,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -165,6 +212,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -221,6 +269,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = z.object({
+  name: z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: z.string().optional().describe('The header name, for from "header"'),
+  pattern: z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = z.object({
+  id: z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: z.string().max(100),
+  enabled: z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: z.object({
+    logic: z.enum(["and", "or"]).optional(),
+    conditions: z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: z.object({
+    from: z.enum(["text", "html", "attachment"]),
+    pattern: z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: z.array(z.object({ name: z.string(), column: z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: z.boolean().optional().describe("Send to it (default true)"),
@@ -287,6 +363,9 @@ var mockResponseSchema = z.object({
     `Response delay in milliseconds (${MOCK_RESPONSE_DELAY_MIN}-${MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: z.string().optional().describe("Display name for the endpoint"),
   ephemeral: z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -298,6 +377,7 @@ var createEndpointShape = {
   notificationUrl: z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -640,6 +720,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -676,6 +757,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -769,6 +851,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -790,7 +873,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -875,6 +959,18 @@ function registerTools(target, client, options = {}) {
       return jsonContent(endpoint);
     })
   );
+  server.tool(
+    "favorite_endpoint",
+    "Mark an endpoint as one of your favourites, or unmark it with favorite: false. A favourite is your own choice, so endpoints shared with you through teams can be marked too; list_endpoints and get_endpoint show it as favorite. Idempotent.",
+    {
+      slug: z.string().describe("The endpoint slug"),
+      favorite: z.boolean().optional().describe("true marks it as a favourite (the default), false unmarks it")
+    },
+    withErrorHandling(async ({ slug, favorite }) => {
+      const result = favorite === false ? await client.endpoints.unfavorite(slug) : await client.endpoints.favorite(slug);
+      return jsonContent({ slug, favorite: result.favorite });
+    })
+  );
   server.tool(
     "update_endpoint",
     "Update an endpoint name, mock response, conditional response rules, signing configuration, whether codes and links are picked out of its emails, or the named fields picked out of them.",
@@ -892,15 +988,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: z.array(
-        z.object({
-          name: z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: z.string().optional().describe('The header name, for from "header"'),
-          pattern: z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -914,7 +1007,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -925,12 +1020,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: z.string().describe("The endpoint slug"),
+      requestId: z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",

package/dist/index.js

@@ -215,6 +215,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -280,6 +327,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -421,6 +469,10 @@ function registerResources(server, client) {
 var import_zod3 = require("zod");
 var import_sdk2 = require("@webhooks-cc/sdk");
 
+// src/version.ts
+var VERSION = true ? "1.17.0" : "0.0.0-dev";
+var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
+
 // src/tools.ts
 var import_zod2 = require("zod");
 var import_sdk = require("@webhooks-cc/sdk");
@@ -463,6 +515,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod2.z.object({
+  name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod2.z.object({
+  id: import_zod2.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod2.z.string().max(100),
+  enabled: import_zod2.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod2.z.object({
+    logic: import_zod2.z.enum(["and", "or"]).optional(),
+    conditions: import_zod2.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod2.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod2.z.object({
+    from: import_zod2.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod2.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod2.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod2.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod2.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod2.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod2.z.array(import_zod2.z.object({ name: import_zod2.z.string(), column: import_zod2.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod2.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod2.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod2.z.boolean().optional().describe("Send to it (default true)"),
@@ -529,6 +609,9 @@ var mockResponseSchema = import_zod2.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod2.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod2.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod2.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -540,6 +623,7 @@ var createEndpointShape = {
   notificationUrl: import_zod2.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod2.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -882,6 +966,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -918,6 +1003,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -1011,6 +1097,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -1032,7 +1119,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -1117,6 +1205,18 @@ function registerTools(target, client, options = {}) {
       return jsonContent(endpoint);
     })
   );
+  server.tool(
+    "favorite_endpoint",
+    "Mark an endpoint as one of your favourites, or unmark it with favorite: false. A favourite is your own choice, so endpoints shared with you through teams can be marked too; list_endpoints and get_endpoint show it as favorite. Idempotent.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      favorite: import_zod2.z.boolean().optional().describe("true marks it as a favourite (the default), false unmarks it")
+    },
+    withErrorHandling(async ({ slug, favorite }) => {
+      const result = favorite === false ? await client.endpoints.unfavorite(slug) : await client.endpoints.favorite(slug);
+      return jsonContent({ slug, favorite: result.favorite });
+    })
+  );
   server.tool(
     "update_endpoint",
     "Update an endpoint name, mock response, conditional response rules, signing configuration, whether codes and links are picked out of its emails, or the named fields picked out of them.",
@@ -1134,15 +1234,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod2.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod2.z.array(
-        import_zod2.z.object({
-          name: import_zod2.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod2.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod2.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod2.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod2.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod2.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -1156,7 +1253,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -1167,12 +1266,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod2.z.string().describe("The endpoint slug"),
+      requestId: import_zod2.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod2.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",
@@ -2073,7 +2189,8 @@ var AgentSession = class {
       baseUrl: this.baseUrl,
       webhookUrl: this.webhookUrl,
       clientName: this.clientName,
-      credentialsFile: this.credentialsFile
+      credentialsFile: this.credentialsFile,
+      userAgent: MCP_USER_AGENT
     };
   }
   /**
@@ -2166,6 +2283,7 @@ function registerSandboxTools(server, options = {}) {
     baseUrl,
     webhookUrl,
     credentialsFile: options.credentialsFile,
+    userAgent: MCP_USER_AGENT,
     // The human disconnected the agent: back to the sandbox, unless a
     // newer connection is already on display.
     onRevoked: () => queueMicrotask(() => {
@@ -2327,7 +2445,8 @@ function sandboxToolSet(server, session, showAccount) {
             webhookUrl: session.webhookUrl,
             email: normalized,
             clientName: session.clientName,
-            credentialsFile: session.credentialsFile
+            credentialsFile: session.credentialsFile,
+            userAgent: MCP_USER_AGENT
           }));
           session.connect = { via: "connect", pending, email: normalized };
           attempt = pending;
@@ -2436,7 +2555,6 @@ function registerAgentRegistrationTools(server) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.1" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;
@@ -2451,7 +2569,7 @@ function createServer(options = {}) {
     registerPrompts(server);
     return server;
   }
-  const client = new import_sdk3.WebhooksCC({ apiKey, webhookUrl, baseUrl });
+  const client = new import_sdk3.WebhooksCC({ apiKey, webhookUrl, baseUrl, userAgent: MCP_USER_AGENT });
   registerTools(server, client);
   registerPrompts(server);
   registerResources(server, client);

package/dist/index.mjs

@@ -13,7 +13,7 @@ import {
   registerTools,
   waitForRequestShape,
   withErrorHandling
-} from "./chunk-RHQD2GRD.mjs";
+} from "./chunk-ZAPNMGCE.mjs";
 
 // src/index.ts
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -260,6 +260,12 @@ import {
   SandboxClient,
   WebhooksCC
 } from "@webhooks-cc/sdk";
+
+// src/version.ts
+var VERSION = true ? "1.17.0" : "0.0.0-dev";
+var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
+
+// src/sandbox-tools.ts
 var SANDBOX = {
   maxEndpoints: 3,
   requestsPerEndpoint: 25,
@@ -291,7 +297,8 @@ var AgentSession = class {
       baseUrl: this.baseUrl,
       webhookUrl: this.webhookUrl,
       clientName: this.clientName,
-      credentialsFile: this.credentialsFile
+      credentialsFile: this.credentialsFile,
+      userAgent: MCP_USER_AGENT
     };
   }
   /**
@@ -384,6 +391,7 @@ function registerSandboxTools(server, options = {}) {
     baseUrl,
     webhookUrl,
     credentialsFile: options.credentialsFile,
+    userAgent: MCP_USER_AGENT,
     // The human disconnected the agent: back to the sandbox, unless a
     // newer connection is already on display.
     onRevoked: () => queueMicrotask(() => {
@@ -545,7 +553,8 @@ function sandboxToolSet(server, session, showAccount) {
             webhookUrl: session.webhookUrl,
             email: normalized,
             clientName: session.clientName,
-            credentialsFile: session.credentialsFile
+            credentialsFile: session.credentialsFile,
+            userAgent: MCP_USER_AGENT
           }));
           session.connect = { via: "connect", pending, email: normalized };
           attempt = pending;
@@ -654,7 +663,6 @@ function registerAgentRegistrationTools(server) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.15.1" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   const webhookUrl = options.webhookUrl ?? process.env.WHK_WEBHOOK_URL;
@@ -669,7 +677,7 @@ function createServer(options = {}) {
     registerPrompts(server);
     return server;
   }
-  const client = new WebhooksCC2({ apiKey, webhookUrl, baseUrl });
+  const client = new WebhooksCC2({ apiKey, webhookUrl, baseUrl, userAgent: MCP_USER_AGENT });
   registerTools(server, client);
   registerPrompts(server);
   registerResources(server, client);

package/dist/tools.d.mts

@@ -64,6 +64,11 @@ declare const createEndpointShape: {
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     notificationUrl: z.ZodOptional<z.ZodString>;
+    site: z.ZodOptional<z.ZodEnum<{
+        webhooks: "webhooks";
+        mailhooks: "mailhooks";
+        both: "both";
+    }>>;
     signingProvider: z.ZodOptional<z.ZodString>;
     signingSecret: z.ZodOptional<z.ZodString>;
     signingHeader: z.ZodOptional<z.ZodString>;

package/dist/tools.d.ts

@@ -64,6 +64,11 @@ declare const createEndpointShape: {
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     notificationUrl: z.ZodOptional<z.ZodString>;
+    site: z.ZodOptional<z.ZodEnum<{
+        webhooks: "webhooks";
+        mailhooks: "mailhooks";
+        both: "both";
+    }>>;
     signingProvider: z.ZodOptional<z.ZodString>;
     signingSecret: z.ZodOptional<z.ZodString>;
     signingHeader: z.ZodOptional<z.ZodString>;

package/dist/tools.js

@@ -109,6 +109,53 @@ function capLists(holder) {
     }
   }
 }
+var MAX_PARSED_ITEMS = 20;
+var MAX_PARSED_VALUE = 200;
+var MAX_PARSED_SHEETS = 10;
+function trimParsed(holder) {
+  const parsed = holder.parsed;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+  const next = { ...parsed };
+  if (Array.isArray(next.lineItems)) {
+    if (next.lineItems.length > MAX_PARSED_ITEMS) {
+      next.lineItemsTotal = next.lineItems.length;
+    }
+    next.lineItems = next.lineItems.slice(0, MAX_PARSED_ITEMS).map(
+      (row) => Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+        ])
+      )
+    );
+  }
+  if (next.fields && typeof next.fields === "object") {
+    next.fields = Object.fromEntries(
+      Object.entries(next.fields).map(([key, value]) => [
+        key,
+        typeof value === "string" ? sliceText(value, MAX_PARSED_VALUE) : value
+      ])
+    );
+  }
+  if (Array.isArray(next.attachments)) {
+    next.attachments = next.attachments.map((attachment) => {
+      const { sheets, text, ...rest } = attachment;
+      return {
+        ...rest,
+        ...Array.isArray(sheets) ? {
+          sheets: sheets.slice(0, MAX_PARSED_SHEETS).map((sheet) => ({
+            name: sheet.name,
+            rowCount: sheet.rowCount
+          })),
+          ...sheets.length > MAX_PARSED_SHEETS ? { sheetsTotal: sheets.length } : {}
+        } : {},
+        ...typeof text === "string" ? { textLength: text.length } : {}
+      };
+    });
+  }
+  next.trimmed = "Line items, sheet rows and attachment text were cut to fit the output.";
+  holder.parsed = next;
+}
 function keepOnly(holder, keep) {
   for (const key of Object.keys(holder)) {
     if (!keep.includes(key)) delete holder[key];
@@ -174,6 +221,7 @@ function compactRequest(request) {
   const root = { items: [compact], truncated: true, total: 1e3, returned: 1e3 };
   const budget = MAX_OUTPUT - 128;
   shrinkToFit(root, budget, [
+    () => trimParsed(compact),
     () => omitHeaders(compact),
     () => trimSpam(email),
     () => capLists(email),
@@ -230,6 +278,34 @@ function conditionSchema(use) {
   });
 }
 var ruleConditionSchema = conditionSchema("response");
+var emailFieldSchema = import_zod.z.object({
+  name: import_zod.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
+  from: import_zod.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
+  header: import_zod.z.string().optional().describe('The header name, for from "header"'),
+  pattern: import_zod.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
+});
+var layoutSchema = import_zod.z.object({
+  id: import_zod.z.string().describe("Stable id: 1 to 40 letters, digits, - or _"),
+  name: import_zod.z.string().max(100),
+  enabled: import_zod.z.boolean().optional().describe("Off: kept but never matched (default on)"),
+  match: import_zod.z.object({
+    logic: import_zod.z.enum(["and", "or"]).optional(),
+    conditions: import_zod.z.array(conditionSchema("filter")).max(10)
+  }).optional().describe("When it applies, e.g. the sender or subject; no conditions: every email"),
+  fields: import_zod.z.array(emailFieldSchema).max(20).optional().describe("Named values, as emailFields"),
+  lineItems: import_zod.z.object({
+    from: import_zod.z.enum(["text", "html", "attachment"]),
+    pattern: import_zod.z.string().optional().describe(
+      "text/html: RE2 with named groups found again and again, one row each, e.g. (?P<sku>[A-Z]+-\\d+)\\s+x(?P<qty>\\d+)"
+    ),
+    start: import_zod.z.string().optional().describe("text/html: search only after this (RE2)"),
+    end: import_zod.z.string().optional().describe("text/html: and before this (RE2)"),
+    attachment: import_zod.z.string().optional().describe("attachment: file name with * and ? (default: the first spreadsheet or CSV)"),
+    sheet: import_zod.z.string().optional().describe("attachment: sheet name (default: the first)"),
+    columns: import_zod.z.array(import_zod.z.object({ name: import_zod.z.string(), column: import_zod.z.string() })).max(30).optional().describe("attachment: { name, column: header text or letter }; default: every column")
+  }).nullable().optional().describe("Rows such as an order's products"),
+  parseAttachments: import_zod.z.boolean().optional().describe("Parse CSV, XLSX, ODS, PDF text and text files into the JSON; uses parsed pages")
+});
 var destinationFields = {
   name: import_zod.z.string().max(100).nullable().optional().describe("A name for the list and the log"),
   enabled: import_zod.z.boolean().optional().describe("Send to it (default true)"),
@@ -296,6 +372,9 @@ var mockResponseSchema = import_zod.z.object({
     `Response delay in milliseconds (${import_sdk.MOCK_RESPONSE_DELAY_MIN}-${import_sdk.MOCK_RESPONSE_DELAY_MAX}, default: none)`
   )
 });
+var endpointSiteSchema = import_zod.z.enum(["webhooks", "mailhooks", "both"]).describe(
+  "Which site's dashboard lists the endpoint: webhooks (webhooks.cc), mailhooks (mailhooks.cc) or both (the default when creating). Only the listing: its HTTP URL and email address work either way. Owner only to change."
+);
 var createEndpointShape = {
   name: import_zod.z.string().optional().describe("Display name for the endpoint"),
   ephemeral: import_zod.z.boolean().optional().describe("Create a temporary endpoint that auto-expires"),
@@ -307,6 +386,7 @@ var createEndpointShape = {
   notificationUrl: import_zod.z.string().url().optional().describe(
     "URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)"
   ),
+  site: endpointSiteSchema.optional(),
   signingProvider: import_zod.z.string().optional().describe(
     "Signing provider for automatic signature verification (e.g. stripe, github, shopify)"
   ),
@@ -649,6 +729,7 @@ var ESSENTIAL_DETAIL_FIELDS = [
   "subject",
   "from",
   "fields",
+  "parsed",
   "replyText",
   "size",
   "test",
@@ -685,6 +766,7 @@ function emailDetail(client, email, view, includeHtml) {
     ...includeHtml && html !== null ? { html } : {}
   };
   shrinkToFit(detail, MAX_BODY_SIZE, [
+    () => trimParsed(detail),
     () => omitHeaders(detail),
     () => trimSpam(detail),
     () => capExtracts(detail),
@@ -778,6 +860,7 @@ function registerTools(target, client, options = {}) {
         mockResponse,
         responseRules,
         notificationUrl,
+        site,
         signingProvider,
         signingSecret,
         signingHeader
@@ -799,7 +882,8 @@ function registerTools(target, client, options = {}) {
           expiresIn,
           mockResponse,
           responseRules,
-          notificationUrl
+          notificationUrl,
+          site
         });
         if (signingProvider && signingSecret) {
           try {
@@ -884,6 +968,18 @@ function registerTools(target, client, options = {}) {
       return jsonContent(endpoint);
     })
   );
+  server.tool(
+    "favorite_endpoint",
+    "Mark an endpoint as one of your favourites, or unmark it with favorite: false. A favourite is your own choice, so endpoints shared with you through teams can be marked too; list_endpoints and get_endpoint show it as favorite. Idempotent.",
+    {
+      slug: import_zod.z.string().describe("The endpoint slug"),
+      favorite: import_zod.z.boolean().optional().describe("true marks it as a favourite (the default), false unmarks it")
+    },
+    withErrorHandling(async ({ slug, favorite }) => {
+      const result = favorite === false ? await client.endpoints.unfavorite(slug) : await client.endpoints.favorite(slug);
+      return jsonContent({ slug, favorite: result.favorite });
+    })
+  );
   server.tool(
     "update_endpoint",
     "Update an endpoint name, mock response, conditional response rules, signing configuration, whether codes and links are picked out of its emails, or the named fields picked out of them.",
@@ -901,15 +997,12 @@ function registerTools(target, client, options = {}) {
         "Custom signature header name (only for generic-hmac provider), or null to clear"
       ),
       showEmailExtracts: import_zod.z.boolean().optional().describe("Pick codes and links out of emails (dashboard and forwarded JSON). Owner only."),
-      emailFields: import_zod.z.array(
-        import_zod.z.object({
-          name: import_zod.z.string().describe("Letters, digits and _, starting with a letter: {{ fields.name }}"),
-          from: import_zod.z.enum(["subject", "text", "html", "from", "to", "header"]).describe("What it reads; html is the HTML as text"),
-          header: import_zod.z.string().optional().describe('The header name, for from "header"'),
-          pattern: import_zod.z.string().describe("RE2 regular expression; the first group is the value (no lookarounds)")
-        })
-      ).max(20).nullable().optional().describe(
+      site: endpointSiteSchema.optional(),
+      emailFields: import_zod.z.array(emailFieldSchema).max(20).nullable().optional().describe(
         "Named fields picked out of every email: shown with it, `fields` in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only."
+      ),
+      layouts: import_zod.z.array(layoutSchema).max(50).nullable().optional().describe(
+        "How the endpoint reads each sender's emails: the first layout whose match holds applies its fields, line items and attachment parsing; the result is `parsed` in the email's JSON, and deliveries wait for it. The plan uses the first 2 (Business 50). Replaces the list; null or [] removes them. Try them with preview_layouts first. Owner only."
       )
     },
     withErrorHandling(
@@ -923,7 +1016,9 @@ function registerTools(target, client, options = {}) {
         signingSecret,
         signingHeader,
         showEmailExtracts,
-        emailFields
+        site,
+        emailFields,
+        layouts
       }) => {
         const endpoint = await client.endpoints.update(slug, {
           name,
@@ -934,12 +1029,29 @@ function registerTools(target, client, options = {}) {
           signingSecret,
           signingHeader,
           showEmailExtracts,
-          emailFields
+          site,
+          emailFields,
+          layouts
         });
         return jsonContent(endpoint);
       }
     )
   );
+  server.tool(
+    "preview_layouts",
+    "Dry run of an endpoint's layouts on a captured email: which layout matches, the fields and line items it finds, and what earlier parses of its attachments held. Nothing is saved and no pages are used. Pass layouts to try them before saving them with update_endpoint.",
+    {
+      slug: import_zod.z.string().describe("The endpoint slug"),
+      requestId: import_zod.z.string().optional().describe("A captured email on the endpoint (default: the newest)"),
+      layouts: import_zod.z.array(layoutSchema).max(50).optional().describe("Unsaved layouts to try")
+    },
+    withErrorHandling(async ({ slug, requestId, layouts }) => {
+      const preview = await client.endpoints.previewLayouts(slug, { requestId, layouts });
+      const holder = { ...preview };
+      shrinkToFit(holder, MAX_BODY_SIZE, [() => trimParsed(holder)]);
+      return jsonContent(holder);
+    })
+  );
   server.tool(
     "preview_response",
     "Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.",

package/dist/tools.mjs

@@ -14,7 +14,7 @@ import {
   textContent,
   waitForRequestShape,
   withErrorHandling
-} from "./chunk-RHQD2GRD.mjs";
+} from "./chunk-ZAPNMGCE.mjs";
 export {
   REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webhooks-cc/mcp",
-  "version": "1.15.1",
+  "version": "1.17.0",
   "mcpName": "io.github.kroqdotdev/webhooks-cc",
   "description": "MCP server for webhooks.cc — AI agent integration for webhook testing",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.1",
     "zod": "^4.6.7",
-    "@webhooks-cc/sdk": "1.19.0"
+    "@webhooks-cc/sdk": "1.21.0"
   },
   "devDependencies": {
     "@types/node": "^26.6.5",