@webhooks-cc/mcp 1.21.0 → 1.22.0

package/dist/bin/mcp.js

@@ -456,7 +456,7 @@ var import_zod3 = require("zod");
 var import_sdk2 = require("@webhooks-cc/sdk");
 
 // src/version.ts
-var VERSION = true ? "1.21.0" : "0.0.0-dev";
+var VERSION = true ? "1.22.0" : "0.0.0-dev";
 var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
 
 // src/tools.ts
@@ -705,6 +705,27 @@ function keyText(key) {
     key.expiresAt ? `It works until ${key.expiresAt}.` : ""
   ].filter(Boolean).join("\n");
 }
+function approvalResultText(result) {
+  if (typeof result.key === "string") return keyText(result);
+  if (typeof result.url === "string") {
+    return `Approved. The share link is ${result.url} (anyone with it can read the copy until ${String(result.expiresAt)}).`;
+  }
+  if (typeof result.removed === "string") {
+    return `Approved. The domain ${result.removed} was removed; mail to it is refused now.`;
+  }
+  if ("name" in result) {
+    return result.name === null ? "Approved. The account's display name was cleared." : `Approved. The account's display name is now "${String(result.name)}".`;
+  }
+  return `Approved and done: ${JSON.stringify(result)}`;
+}
+function approvalAskText(pending) {
+  return [
+    `Asked for approval: ${pending.summary}`,
+    `Show the person this link: ${pending.url}`,
+    `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
+    `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
+  ].join("\n");
+}
 function textContent(text) {
   return { content: [{ type: "text", text }] };
 }
@@ -2293,19 +2314,12 @@ function registerTools(target, client, options = {}) {
         const key = await pending.wait();
         return textContent(keyText(key));
       }
-      return textContent(
-        [
-          `Asked for approval: ${pending.summary}`,
-          `Show the person this link: ${pending.url}`,
-          `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
-          `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
-        ].join("\n")
-      );
+      return textContent(approvalAskText(pending));
     })
   );
   server.tool(
     "wait_for_approval",
-    "Wait for the account's owner to answer an approval (from create_api_key) and collect what it grants, such as the new API key. If they have not answered yet, call it again.",
+    "Wait for the account's owner to answer an approval (from create_api_key, create_share_link, remove_domain or rename_account) and collect what it grants or did, such as the new API key or the share link. If they have not answered yet, call it again.",
     {
       id: import_zod2.z.string().describe("The approval id"),
       timeout: durationOrTimestampSchema.default("45s").describe('How long to wait for the person, for example "45s"')
@@ -2313,8 +2327,10 @@ function registerTools(target, client, options = {}) {
     withErrorHandling(async ({ id, timeout }) => {
       const ms = durationMs(timeout) ?? 45e3;
       try {
-        const result = await client.approvals.wait(id, { timeout: ms });
-        return textContent(keyText(result));
+        const result = await client.approvals.wait(id, {
+          timeout: ms
+        });
+        return textContent(approvalResultText(result));
       } catch (error) {
         if (error instanceof import_sdk.ApprovalDeniedError) {
           return textContent(
@@ -2344,6 +2360,133 @@ function registerTools(target, client, options = {}) {
       return textContent(`Revoked the API key ${id}, if the account had it.`);
     })
   );
+  server.tool(
+    "rename_account",
+    "Set the account's display name, or clear it with null. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      name: import_zod2.z.string().min(1).max(100).nullable().describe("The new display name, or null to clear it")
+    },
+    withErrorHandling(async ({ name }) => {
+      const pending = await client.account.rename(name);
+      if (!pending.id) return textContent(approvalResultText(await pending.wait()));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "list_connected_agents",
+    "List the agents connected to the account (claimed agents and OAuth sign-ins such as hosted MCP clients): id, client name, when each connected and was last used.",
+    {},
+    withErrorHandling(async () => jsonContent(await client.agents.list()))
+  );
+  server.tool(
+    "disconnect_agent",
+    "Disconnect an agent by its id (from list_connected_agents): its tokens stop working at once. The endpoints it made stay in the account. Disconnecting the agent you are running as ends your own access.",
+    {
+      id: import_zod2.z.string().describe("The agent's id, from list_connected_agents")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.agents.disconnect(id);
+      return textContent(`Disconnected the agent ${id}.`);
+    })
+  );
+  server.tool(
+    "list_share_links",
+    "List live public links to frozen copies of requests (/s/<token>), the account's or one request's. Not the same as list_shares, which lists port previews and live tunnels.",
+    {
+      requestId: import_zod2.z.string().optional().describe("Only the links to this request")
+    },
+    withErrorHandling(async ({ requestId }) => {
+      const links = requestId ? await client.shareLinks.forRequest(requestId) : await client.shareLinks.list();
+      return jsonContent(links);
+    })
+  );
+  server.tool(
+    "create_share_link",
+    "Make a public link to a read-only copy of one HTTP request (not an email), for a teammate or a bug report. Anyone with the link can read it, so the account's owner must approve: this returns a link and a code to show them, then call wait_for_approval for the share link.",
+    {
+      requestId: import_zod2.z.string().describe("The request's id"),
+      expiresInDays: import_zod2.z.union([import_zod2.z.literal(1), import_zod2.z.literal(7), import_zod2.z.literal(30)]).optional().describe("How long the link works: 1, 7 or 30 days (default 7)"),
+      hideSensitive: import_zod2.z.boolean().optional().describe(
+        "Also leave out signature and token headers (default true). Credentials are always left out."
+      )
+    },
+    withErrorHandling(async ({ requestId, expiresInDays, hideSensitive }) => {
+      const pending = await client.shareLinks.create(requestId, { expiresInDays, hideSensitive });
+      if (!pending.id) return textContent(approvalResultText({ ...await pending.wait() }));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "revoke_share_link",
+    "Revoke a share link by its id (from list_share_links): its page answers 404 from then on.",
+    {
+      id: import_zod2.z.string().describe("The link's id, from list_share_links")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.shareLinks.revoke(id);
+      return textContent(`Revoked the share link ${id}.`);
+    })
+  );
+  const teamIdSchema = import_zod2.z.string().optional().describe("A Team Business team's id (its owner only); leave out for your own account");
+  server.tool(
+    "list_domains",
+    "List custom inbound domains (Business): each one's status, DNS records to publish, routes and catch-all endpoint.",
+    { teamId: teamIdSchema },
+    withErrorHandling(async ({ teamId }) => jsonContent(await client.domains.list({ teamId })))
+  );
+  server.tool(
+    "add_domain",
+    "Add a custom inbound domain (Business) so mail to it is captured. Returns the TXT and MX records to publish; then call verify_domain.",
+    {
+      domain: import_zod2.z.string().min(1).max(253).describe("The domain, such as mail.example.com"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ domain, teamId }) => jsonContent(await client.domains.add(domain, { teamId }))
+    )
+  );
+  server.tool(
+    "verify_domain",
+    "Look a custom domain's TXT and MX records up now. It receives mail once both are found.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, teamId }) => jsonContent(await client.domains.verify(id, { teamId }))
+    )
+  );
+  server.tool(
+    "route_domain",
+    "Set where a custom domain's mail goes: routes by local part (the part before @) to endpoints, everything else to a catch-all endpoint, or refused when the catch-all is null. Replaces the domain's routing.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      catchAllEndpointId: import_zod2.z.string().nullable().describe("The endpoint id for mail no route matches, or null to refuse it"),
+      routes: import_zod2.z.array(
+        import_zod2.z.object({
+          localPart: import_zod2.z.string().max(64).describe("The part before @"),
+          endpointId: import_zod2.z.string().describe("The endpoint's id")
+        })
+      ).max(100).default([]).describe("Routes by local part"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, catchAllEndpointId, routes, teamId }) => jsonContent(await client.domains.route(id, { catchAllEndpointId, routes }, { teamId }))
+    )
+  );
+  server.tool(
+    "remove_domain",
+    "Remove a custom inbound domain: mail to it is refused from then on. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(async ({ id, teamId }) => {
+      const pending = await client.domains.remove(id, { teamId });
+      if (!pending.id) return textContent(`Removed the domain ${id}.`);
+      return textContent(approvalAskText(pending));
+    })
+  );
   server.tool(
     "stop_share",
     "Stop a public preview or live tunnel by its id (from list_shares). The CLI running it is told why and exits.",

package/dist/{chunk-BAGCOSXG.mjs → chunk-VO7HGSRN.mjs}

@@ -485,6 +485,27 @@ function keyText(key) {
     key.expiresAt ? `It works until ${key.expiresAt}.` : ""
   ].filter(Boolean).join("\n");
 }
+function approvalResultText(result) {
+  if (typeof result.key === "string") return keyText(result);
+  if (typeof result.url === "string") {
+    return `Approved. The share link is ${result.url} (anyone with it can read the copy until ${String(result.expiresAt)}).`;
+  }
+  if (typeof result.removed === "string") {
+    return `Approved. The domain ${result.removed} was removed; mail to it is refused now.`;
+  }
+  if ("name" in result) {
+    return result.name === null ? "Approved. The account's display name was cleared." : `Approved. The account's display name is now "${String(result.name)}".`;
+  }
+  return `Approved and done: ${JSON.stringify(result)}`;
+}
+function approvalAskText(pending) {
+  return [
+    `Asked for approval: ${pending.summary}`,
+    `Show the person this link: ${pending.url}`,
+    `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
+    `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
+  ].join("\n");
+}
 function textContent(text) {
   return { content: [{ type: "text", text }] };
 }
@@ -2073,19 +2094,12 @@ function registerTools(target, client, options = {}) {
         const key = await pending.wait();
         return textContent(keyText(key));
       }
-      return textContent(
-        [
-          `Asked for approval: ${pending.summary}`,
-          `Show the person this link: ${pending.url}`,
-          `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
-          `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
-        ].join("\n")
-      );
+      return textContent(approvalAskText(pending));
     })
   );
   server.tool(
     "wait_for_approval",
-    "Wait for the account's owner to answer an approval (from create_api_key) and collect what it grants, such as the new API key. If they have not answered yet, call it again.",
+    "Wait for the account's owner to answer an approval (from create_api_key, create_share_link, remove_domain or rename_account) and collect what it grants or did, such as the new API key or the share link. If they have not answered yet, call it again.",
     {
       id: z.string().describe("The approval id"),
       timeout: durationOrTimestampSchema.default("45s").describe('How long to wait for the person, for example "45s"')
@@ -2093,8 +2107,10 @@ function registerTools(target, client, options = {}) {
     withErrorHandling(async ({ id, timeout }) => {
       const ms = durationMs(timeout) ?? 45e3;
       try {
-        const result = await client.approvals.wait(id, { timeout: ms });
-        return textContent(keyText(result));
+        const result = await client.approvals.wait(id, {
+          timeout: ms
+        });
+        return textContent(approvalResultText(result));
       } catch (error) {
         if (error instanceof ApprovalDeniedError) {
           return textContent(
@@ -2124,6 +2140,133 @@ function registerTools(target, client, options = {}) {
       return textContent(`Revoked the API key ${id}, if the account had it.`);
     })
   );
+  server.tool(
+    "rename_account",
+    "Set the account's display name, or clear it with null. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      name: z.string().min(1).max(100).nullable().describe("The new display name, or null to clear it")
+    },
+    withErrorHandling(async ({ name }) => {
+      const pending = await client.account.rename(name);
+      if (!pending.id) return textContent(approvalResultText(await pending.wait()));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "list_connected_agents",
+    "List the agents connected to the account (claimed agents and OAuth sign-ins such as hosted MCP clients): id, client name, when each connected and was last used.",
+    {},
+    withErrorHandling(async () => jsonContent(await client.agents.list()))
+  );
+  server.tool(
+    "disconnect_agent",
+    "Disconnect an agent by its id (from list_connected_agents): its tokens stop working at once. The endpoints it made stay in the account. Disconnecting the agent you are running as ends your own access.",
+    {
+      id: z.string().describe("The agent's id, from list_connected_agents")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.agents.disconnect(id);
+      return textContent(`Disconnected the agent ${id}.`);
+    })
+  );
+  server.tool(
+    "list_share_links",
+    "List live public links to frozen copies of requests (/s/<token>), the account's or one request's. Not the same as list_shares, which lists port previews and live tunnels.",
+    {
+      requestId: z.string().optional().describe("Only the links to this request")
+    },
+    withErrorHandling(async ({ requestId }) => {
+      const links = requestId ? await client.shareLinks.forRequest(requestId) : await client.shareLinks.list();
+      return jsonContent(links);
+    })
+  );
+  server.tool(
+    "create_share_link",
+    "Make a public link to a read-only copy of one HTTP request (not an email), for a teammate or a bug report. Anyone with the link can read it, so the account's owner must approve: this returns a link and a code to show them, then call wait_for_approval for the share link.",
+    {
+      requestId: z.string().describe("The request's id"),
+      expiresInDays: z.union([z.literal(1), z.literal(7), z.literal(30)]).optional().describe("How long the link works: 1, 7 or 30 days (default 7)"),
+      hideSensitive: z.boolean().optional().describe(
+        "Also leave out signature and token headers (default true). Credentials are always left out."
+      )
+    },
+    withErrorHandling(async ({ requestId, expiresInDays, hideSensitive }) => {
+      const pending = await client.shareLinks.create(requestId, { expiresInDays, hideSensitive });
+      if (!pending.id) return textContent(approvalResultText({ ...await pending.wait() }));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "revoke_share_link",
+    "Revoke a share link by its id (from list_share_links): its page answers 404 from then on.",
+    {
+      id: z.string().describe("The link's id, from list_share_links")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.shareLinks.revoke(id);
+      return textContent(`Revoked the share link ${id}.`);
+    })
+  );
+  const teamIdSchema = z.string().optional().describe("A Team Business team's id (its owner only); leave out for your own account");
+  server.tool(
+    "list_domains",
+    "List custom inbound domains (Business): each one's status, DNS records to publish, routes and catch-all endpoint.",
+    { teamId: teamIdSchema },
+    withErrorHandling(async ({ teamId }) => jsonContent(await client.domains.list({ teamId })))
+  );
+  server.tool(
+    "add_domain",
+    "Add a custom inbound domain (Business) so mail to it is captured. Returns the TXT and MX records to publish; then call verify_domain.",
+    {
+      domain: z.string().min(1).max(253).describe("The domain, such as mail.example.com"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ domain, teamId }) => jsonContent(await client.domains.add(domain, { teamId }))
+    )
+  );
+  server.tool(
+    "verify_domain",
+    "Look a custom domain's TXT and MX records up now. It receives mail once both are found.",
+    {
+      id: z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, teamId }) => jsonContent(await client.domains.verify(id, { teamId }))
+    )
+  );
+  server.tool(
+    "route_domain",
+    "Set where a custom domain's mail goes: routes by local part (the part before @) to endpoints, everything else to a catch-all endpoint, or refused when the catch-all is null. Replaces the domain's routing.",
+    {
+      id: z.string().describe("The domain's id, from list_domains"),
+      catchAllEndpointId: z.string().nullable().describe("The endpoint id for mail no route matches, or null to refuse it"),
+      routes: z.array(
+        z.object({
+          localPart: z.string().max(64).describe("The part before @"),
+          endpointId: z.string().describe("The endpoint's id")
+        })
+      ).max(100).default([]).describe("Routes by local part"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, catchAllEndpointId, routes, teamId }) => jsonContent(await client.domains.route(id, { catchAllEndpointId, routes }, { teamId }))
+    )
+  );
+  server.tool(
+    "remove_domain",
+    "Remove a custom inbound domain: mail to it is refused from then on. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      id: z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(async ({ id, teamId }) => {
+      const pending = await client.domains.remove(id, { teamId });
+      if (!pending.id) return textContent(`Removed the domain ${id}.`);
+      return textContent(approvalAskText(pending));
+    })
+  );
   server.tool(
     "stop_share",
     "Stop a public preview or live tunnel by its id (from list_shares). The CLI running it is told why and exits.",

package/dist/index.js

@@ -480,7 +480,7 @@ var import_zod3 = require("zod");
 var import_sdk2 = require("@webhooks-cc/sdk");
 
 // src/version.ts
-var VERSION = true ? "1.21.0" : "0.0.0-dev";
+var VERSION = true ? "1.22.0" : "0.0.0-dev";
 var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
 
 // src/tools.ts
@@ -729,6 +729,27 @@ function keyText(key) {
     key.expiresAt ? `It works until ${key.expiresAt}.` : ""
   ].filter(Boolean).join("\n");
 }
+function approvalResultText(result) {
+  if (typeof result.key === "string") return keyText(result);
+  if (typeof result.url === "string") {
+    return `Approved. The share link is ${result.url} (anyone with it can read the copy until ${String(result.expiresAt)}).`;
+  }
+  if (typeof result.removed === "string") {
+    return `Approved. The domain ${result.removed} was removed; mail to it is refused now.`;
+  }
+  if ("name" in result) {
+    return result.name === null ? "Approved. The account's display name was cleared." : `Approved. The account's display name is now "${String(result.name)}".`;
+  }
+  return `Approved and done: ${JSON.stringify(result)}`;
+}
+function approvalAskText(pending) {
+  return [
+    `Asked for approval: ${pending.summary}`,
+    `Show the person this link: ${pending.url}`,
+    `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
+    `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
+  ].join("\n");
+}
 function textContent(text) {
   return { content: [{ type: "text", text }] };
 }
@@ -2317,19 +2338,12 @@ function registerTools(target, client, options = {}) {
         const key = await pending.wait();
         return textContent(keyText(key));
       }
-      return textContent(
-        [
-          `Asked for approval: ${pending.summary}`,
-          `Show the person this link: ${pending.url}`,
-          `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
-          `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
-        ].join("\n")
-      );
+      return textContent(approvalAskText(pending));
     })
   );
   server.tool(
     "wait_for_approval",
-    "Wait for the account's owner to answer an approval (from create_api_key) and collect what it grants, such as the new API key. If they have not answered yet, call it again.",
+    "Wait for the account's owner to answer an approval (from create_api_key, create_share_link, remove_domain or rename_account) and collect what it grants or did, such as the new API key or the share link. If they have not answered yet, call it again.",
     {
       id: import_zod2.z.string().describe("The approval id"),
       timeout: durationOrTimestampSchema.default("45s").describe('How long to wait for the person, for example "45s"')
@@ -2337,8 +2351,10 @@ function registerTools(target, client, options = {}) {
     withErrorHandling(async ({ id, timeout }) => {
       const ms = durationMs(timeout) ?? 45e3;
       try {
-        const result = await client.approvals.wait(id, { timeout: ms });
-        return textContent(keyText(result));
+        const result = await client.approvals.wait(id, {
+          timeout: ms
+        });
+        return textContent(approvalResultText(result));
       } catch (error) {
         if (error instanceof import_sdk.ApprovalDeniedError) {
           return textContent(
@@ -2368,6 +2384,133 @@ function registerTools(target, client, options = {}) {
       return textContent(`Revoked the API key ${id}, if the account had it.`);
     })
   );
+  server.tool(
+    "rename_account",
+    "Set the account's display name, or clear it with null. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      name: import_zod2.z.string().min(1).max(100).nullable().describe("The new display name, or null to clear it")
+    },
+    withErrorHandling(async ({ name }) => {
+      const pending = await client.account.rename(name);
+      if (!pending.id) return textContent(approvalResultText(await pending.wait()));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "list_connected_agents",
+    "List the agents connected to the account (claimed agents and OAuth sign-ins such as hosted MCP clients): id, client name, when each connected and was last used.",
+    {},
+    withErrorHandling(async () => jsonContent(await client.agents.list()))
+  );
+  server.tool(
+    "disconnect_agent",
+    "Disconnect an agent by its id (from list_connected_agents): its tokens stop working at once. The endpoints it made stay in the account. Disconnecting the agent you are running as ends your own access.",
+    {
+      id: import_zod2.z.string().describe("The agent's id, from list_connected_agents")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.agents.disconnect(id);
+      return textContent(`Disconnected the agent ${id}.`);
+    })
+  );
+  server.tool(
+    "list_share_links",
+    "List live public links to frozen copies of requests (/s/<token>), the account's or one request's. Not the same as list_shares, which lists port previews and live tunnels.",
+    {
+      requestId: import_zod2.z.string().optional().describe("Only the links to this request")
+    },
+    withErrorHandling(async ({ requestId }) => {
+      const links = requestId ? await client.shareLinks.forRequest(requestId) : await client.shareLinks.list();
+      return jsonContent(links);
+    })
+  );
+  server.tool(
+    "create_share_link",
+    "Make a public link to a read-only copy of one HTTP request (not an email), for a teammate or a bug report. Anyone with the link can read it, so the account's owner must approve: this returns a link and a code to show them, then call wait_for_approval for the share link.",
+    {
+      requestId: import_zod2.z.string().describe("The request's id"),
+      expiresInDays: import_zod2.z.union([import_zod2.z.literal(1), import_zod2.z.literal(7), import_zod2.z.literal(30)]).optional().describe("How long the link works: 1, 7 or 30 days (default 7)"),
+      hideSensitive: import_zod2.z.boolean().optional().describe(
+        "Also leave out signature and token headers (default true). Credentials are always left out."
+      )
+    },
+    withErrorHandling(async ({ requestId, expiresInDays, hideSensitive }) => {
+      const pending = await client.shareLinks.create(requestId, { expiresInDays, hideSensitive });
+      if (!pending.id) return textContent(approvalResultText({ ...await pending.wait() }));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "revoke_share_link",
+    "Revoke a share link by its id (from list_share_links): its page answers 404 from then on.",
+    {
+      id: import_zod2.z.string().describe("The link's id, from list_share_links")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.shareLinks.revoke(id);
+      return textContent(`Revoked the share link ${id}.`);
+    })
+  );
+  const teamIdSchema = import_zod2.z.string().optional().describe("A Team Business team's id (its owner only); leave out for your own account");
+  server.tool(
+    "list_domains",
+    "List custom inbound domains (Business): each one's status, DNS records to publish, routes and catch-all endpoint.",
+    { teamId: teamIdSchema },
+    withErrorHandling(async ({ teamId }) => jsonContent(await client.domains.list({ teamId })))
+  );
+  server.tool(
+    "add_domain",
+    "Add a custom inbound domain (Business) so mail to it is captured. Returns the TXT and MX records to publish; then call verify_domain.",
+    {
+      domain: import_zod2.z.string().min(1).max(253).describe("The domain, such as mail.example.com"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ domain, teamId }) => jsonContent(await client.domains.add(domain, { teamId }))
+    )
+  );
+  server.tool(
+    "verify_domain",
+    "Look a custom domain's TXT and MX records up now. It receives mail once both are found.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, teamId }) => jsonContent(await client.domains.verify(id, { teamId }))
+    )
+  );
+  server.tool(
+    "route_domain",
+    "Set where a custom domain's mail goes: routes by local part (the part before @) to endpoints, everything else to a catch-all endpoint, or refused when the catch-all is null. Replaces the domain's routing.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      catchAllEndpointId: import_zod2.z.string().nullable().describe("The endpoint id for mail no route matches, or null to refuse it"),
+      routes: import_zod2.z.array(
+        import_zod2.z.object({
+          localPart: import_zod2.z.string().max(64).describe("The part before @"),
+          endpointId: import_zod2.z.string().describe("The endpoint's id")
+        })
+      ).max(100).default([]).describe("Routes by local part"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, catchAllEndpointId, routes, teamId }) => jsonContent(await client.domains.route(id, { catchAllEndpointId, routes }, { teamId }))
+    )
+  );
+  server.tool(
+    "remove_domain",
+    "Remove a custom inbound domain: mail to it is refused from then on. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      id: import_zod2.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(async ({ id, teamId }) => {
+      const pending = await client.domains.remove(id, { teamId });
+      if (!pending.id) return textContent(`Removed the domain ${id}.`);
+      return textContent(approvalAskText(pending));
+    })
+  );
   server.tool(
     "stop_share",
     "Stop a public preview or live tunnel by its id (from list_shares). The CLI running it is told why and exits.",

package/dist/index.mjs

@@ -13,7 +13,7 @@ import {
   registerTools,
   waitForRequestShape,
   withErrorHandling
-} from "./chunk-BAGCOSXG.mjs";
+} from "./chunk-VO7HGSRN.mjs";
 
 // src/index.ts
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -262,7 +262,7 @@ import {
 } from "@webhooks-cc/sdk";
 
 // src/version.ts
-var VERSION = true ? "1.21.0" : "0.0.0-dev";
+var VERSION = true ? "1.22.0" : "0.0.0-dev";
 var MCP_USER_AGENT = `webhooks-cc-mcp/${VERSION}`;
 
 // src/sandbox-tools.ts

package/dist/tools.js

@@ -496,6 +496,27 @@ function keyText(key) {
     key.expiresAt ? `It works until ${key.expiresAt}.` : ""
   ].filter(Boolean).join("\n");
 }
+function approvalResultText(result) {
+  if (typeof result.key === "string") return keyText(result);
+  if (typeof result.url === "string") {
+    return `Approved. The share link is ${result.url} (anyone with it can read the copy until ${String(result.expiresAt)}).`;
+  }
+  if (typeof result.removed === "string") {
+    return `Approved. The domain ${result.removed} was removed; mail to it is refused now.`;
+  }
+  if ("name" in result) {
+    return result.name === null ? "Approved. The account's display name was cleared." : `Approved. The account's display name is now "${String(result.name)}".`;
+  }
+  return `Approved and done: ${JSON.stringify(result)}`;
+}
+function approvalAskText(pending) {
+  return [
+    `Asked for approval: ${pending.summary}`,
+    `Show the person this link: ${pending.url}`,
+    `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
+    `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
+  ].join("\n");
+}
 function textContent(text) {
   return { content: [{ type: "text", text }] };
 }
@@ -2084,19 +2105,12 @@ function registerTools(target, client, options = {}) {
         const key = await pending.wait();
         return textContent(keyText(key));
       }
-      return textContent(
-        [
-          `Asked for approval: ${pending.summary}`,
-          `Show the person this link: ${pending.url}`,
-          `The page shows the code ${pending.code}; ask them to approve only if it matches.`,
-          `Then call wait_for_approval with id ${pending.id}. The request expires at ${pending.expiresAt}.`
-        ].join("\n")
-      );
+      return textContent(approvalAskText(pending));
     })
   );
   server.tool(
     "wait_for_approval",
-    "Wait for the account's owner to answer an approval (from create_api_key) and collect what it grants, such as the new API key. If they have not answered yet, call it again.",
+    "Wait for the account's owner to answer an approval (from create_api_key, create_share_link, remove_domain or rename_account) and collect what it grants or did, such as the new API key or the share link. If they have not answered yet, call it again.",
     {
       id: import_zod.z.string().describe("The approval id"),
       timeout: durationOrTimestampSchema.default("45s").describe('How long to wait for the person, for example "45s"')
@@ -2104,8 +2118,10 @@ function registerTools(target, client, options = {}) {
     withErrorHandling(async ({ id, timeout }) => {
       const ms = durationMs(timeout) ?? 45e3;
       try {
-        const result = await client.approvals.wait(id, { timeout: ms });
-        return textContent(keyText(result));
+        const result = await client.approvals.wait(id, {
+          timeout: ms
+        });
+        return textContent(approvalResultText(result));
       } catch (error) {
         if (error instanceof import_sdk.ApprovalDeniedError) {
           return textContent(
@@ -2135,6 +2151,133 @@ function registerTools(target, client, options = {}) {
       return textContent(`Revoked the API key ${id}, if the account had it.`);
     })
   );
+  server.tool(
+    "rename_account",
+    "Set the account's display name, or clear it with null. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      name: import_zod.z.string().min(1).max(100).nullable().describe("The new display name, or null to clear it")
+    },
+    withErrorHandling(async ({ name }) => {
+      const pending = await client.account.rename(name);
+      if (!pending.id) return textContent(approvalResultText(await pending.wait()));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "list_connected_agents",
+    "List the agents connected to the account (claimed agents and OAuth sign-ins such as hosted MCP clients): id, client name, when each connected and was last used.",
+    {},
+    withErrorHandling(async () => jsonContent(await client.agents.list()))
+  );
+  server.tool(
+    "disconnect_agent",
+    "Disconnect an agent by its id (from list_connected_agents): its tokens stop working at once. The endpoints it made stay in the account. Disconnecting the agent you are running as ends your own access.",
+    {
+      id: import_zod.z.string().describe("The agent's id, from list_connected_agents")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.agents.disconnect(id);
+      return textContent(`Disconnected the agent ${id}.`);
+    })
+  );
+  server.tool(
+    "list_share_links",
+    "List live public links to frozen copies of requests (/s/<token>), the account's or one request's. Not the same as list_shares, which lists port previews and live tunnels.",
+    {
+      requestId: import_zod.z.string().optional().describe("Only the links to this request")
+    },
+    withErrorHandling(async ({ requestId }) => {
+      const links = requestId ? await client.shareLinks.forRequest(requestId) : await client.shareLinks.list();
+      return jsonContent(links);
+    })
+  );
+  server.tool(
+    "create_share_link",
+    "Make a public link to a read-only copy of one HTTP request (not an email), for a teammate or a bug report. Anyone with the link can read it, so the account's owner must approve: this returns a link and a code to show them, then call wait_for_approval for the share link.",
+    {
+      requestId: import_zod.z.string().describe("The request's id"),
+      expiresInDays: import_zod.z.union([import_zod.z.literal(1), import_zod.z.literal(7), import_zod.z.literal(30)]).optional().describe("How long the link works: 1, 7 or 30 days (default 7)"),
+      hideSensitive: import_zod.z.boolean().optional().describe(
+        "Also leave out signature and token headers (default true). Credentials are always left out."
+      )
+    },
+    withErrorHandling(async ({ requestId, expiresInDays, hideSensitive }) => {
+      const pending = await client.shareLinks.create(requestId, { expiresInDays, hideSensitive });
+      if (!pending.id) return textContent(approvalResultText({ ...await pending.wait() }));
+      return textContent(approvalAskText(pending));
+    })
+  );
+  server.tool(
+    "revoke_share_link",
+    "Revoke a share link by its id (from list_share_links): its page answers 404 from then on.",
+    {
+      id: import_zod.z.string().describe("The link's id, from list_share_links")
+    },
+    withErrorHandling(async ({ id }) => {
+      await client.shareLinks.revoke(id);
+      return textContent(`Revoked the share link ${id}.`);
+    })
+  );
+  const teamIdSchema = import_zod.z.string().optional().describe("A Team Business team's id (its owner only); leave out for your own account");
+  server.tool(
+    "list_domains",
+    "List custom inbound domains (Business): each one's status, DNS records to publish, routes and catch-all endpoint.",
+    { teamId: teamIdSchema },
+    withErrorHandling(async ({ teamId }) => jsonContent(await client.domains.list({ teamId })))
+  );
+  server.tool(
+    "add_domain",
+    "Add a custom inbound domain (Business) so mail to it is captured. Returns the TXT and MX records to publish; then call verify_domain.",
+    {
+      domain: import_zod.z.string().min(1).max(253).describe("The domain, such as mail.example.com"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ domain, teamId }) => jsonContent(await client.domains.add(domain, { teamId }))
+    )
+  );
+  server.tool(
+    "verify_domain",
+    "Look a custom domain's TXT and MX records up now. It receives mail once both are found.",
+    {
+      id: import_zod.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, teamId }) => jsonContent(await client.domains.verify(id, { teamId }))
+    )
+  );
+  server.tool(
+    "route_domain",
+    "Set where a custom domain's mail goes: routes by local part (the part before @) to endpoints, everything else to a catch-all endpoint, or refused when the catch-all is null. Replaces the domain's routing.",
+    {
+      id: import_zod.z.string().describe("The domain's id, from list_domains"),
+      catchAllEndpointId: import_zod.z.string().nullable().describe("The endpoint id for mail no route matches, or null to refuse it"),
+      routes: import_zod.z.array(
+        import_zod.z.object({
+          localPart: import_zod.z.string().max(64).describe("The part before @"),
+          endpointId: import_zod.z.string().describe("The endpoint's id")
+        })
+      ).max(100).default([]).describe("Routes by local part"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(
+      async ({ id, catchAllEndpointId, routes, teamId }) => jsonContent(await client.domains.route(id, { catchAllEndpointId, routes }, { teamId }))
+    )
+  );
+  server.tool(
+    "remove_domain",
+    "Remove a custom inbound domain: mail to it is refused from then on. The account's owner must approve it: this returns a link and a code to show them, then call wait_for_approval.",
+    {
+      id: import_zod.z.string().describe("The domain's id, from list_domains"),
+      teamId: teamIdSchema
+    },
+    withErrorHandling(async ({ id, teamId }) => {
+      const pending = await client.domains.remove(id, { teamId });
+      if (!pending.id) return textContent(`Removed the domain ${id}.`);
+      return textContent(approvalAskText(pending));
+    })
+  );
   server.tool(
     "stop_share",
     "Stop a public preview or live tunnel by its id (from list_shares). The CLI running it is told why and exits.",

package/dist/tools.mjs

@@ -18,7 +18,7 @@ import {
   waitForRequestShape,
   withErrorHandling,
   withShareHints
-} from "./chunk-BAGCOSXG.mjs";
+} from "./chunk-VO7HGSRN.mjs";
 export {
   LOCAL_ONLY_TOOLS,
   REMOTE_MAX_WAIT_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webhooks-cc/mcp",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "mcpName": "io.github.kroqdotdev/webhooks-cc",
   "description": "MCP server for webhooks.cc — AI agent integration for webhook testing",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.2",
     "zod": "^4.6.7",
-    "@webhooks-cc/sdk": "1.25.0"
+    "@webhooks-cc/sdk": "1.26.0"
   },
   "devDependencies": {
     "@types/node": "^26.6.6",