@webhooks-cc/mcp 1.24.0 → 2.0.0

package/dist/tools.js

@@ -23,18 +23,25 @@ __export(tools_exports, {
   LOCAL_ONLY_TOOLS: () => LOCAL_ONLY_TOOLS,
   REMOTE_MAX_WAIT_MS: () => REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS: () => REMOTE_MIN_POLL_MS,
+  TOOL_CATALOG: () => TOOL_CATALOG,
+  TOOL_GROUPS: () => TOOL_GROUPS,
+  TOOL_GROUP_NAMES: () => TOOL_GROUP_NAMES,
+  clientLoadsEverything: () => clientLoadsEverything,
   createEndpointShape: () => createEndpointShape,
+  defaultToolGroups: () => defaultToolGroups,
   deleteEndpointShape: () => deleteEndpointShape,
   getEndpointShape: () => getEndpointShape,
   getRequestShape: () => getRequestShape,
   jsonContent: () => jsonContent,
   listEndpointsShape: () => listEndpointsShape,
   listRequestsShape: () => listRequestsShape,
+  parseToolGroups: () => parseToolGroups,
   payloadSchemaResult: () => payloadSchemaResult,
   payloadSchemaShape: () => payloadSchemaShape,
   registerTools: () => registerTools,
   shareHints: () => shareHints,
   textContent: () => textContent,
+  toolAnnotations: () => toolAnnotations,
   toolWords: () => toolWords,
   waitForRequestShape: () => waitForRequestShape,
   withErrorHandling: () => withErrorHandling,
@@ -252,6 +259,208 @@ function compactRequest(request) {
   return compact;
 }
 
+// src/catalog.ts
+var TOOL_GROUPS = {
+  core: "Endpoints, captured requests and emails, sending test webhooks, signatures, forwarding destinations, deliveries, previews of your local app and their logs, usage and approvals",
+  forwarding: "The rest of forwarding: preview what a destination would send, the endpoint's forwarding settings and signing secret, test deliveries",
+  layouts: "Email layouts and named fields: try layouts and fields on a captured email, add ready-made layouts, and AI setup",
+  extras: "Bulk endpoint changes, favourites, request counts and payload schemas",
+  teams: "Teams: members, invites, sharing endpoints with a team, and pricing team changes",
+  account: "The account: billing, API keys, connected agents, public share links to requests, and the display name",
+  domains: "Custom inbound email domains: add, verify, route and remove them",
+  sheets: "Google Sheets destinations: Google accounts, spreadsheets and their tabs",
+  names: "Preview names: reserve, release and password-protect them"
+};
+var TOOL_GROUP_NAMES = Object.keys(TOOL_GROUPS);
+var read = { readOnly: true };
+var write = {};
+var update = { idempotent: true };
+var remove = { destructive: true, idempotent: true };
+var replace = { destructive: true, idempotent: true };
+var outward = { openWorld: true };
+function group(name, tools) {
+  return Object.fromEntries(
+    Object.entries(tools).map(([tool, behaviour]) => [tool, { group: name, ...behaviour }])
+  );
+}
+var TOOL_CATALOG = {
+  ...group("core", {
+    create_endpoint: write,
+    list_endpoints: read,
+    get_endpoint: read,
+    // Replaces what it is given (a mock response, the signing secret).
+    update_endpoint: replace,
+    delete_endpoint: remove,
+    list_requests: read,
+    search_requests: read,
+    get_request: read,
+    wait_for_request: read,
+    wait_for_requests: read,
+    replay_request: outward,
+    compare_requests: read,
+    extract_from_request: read,
+    clear_requests: remove,
+    send_webhook: write,
+    send_to: outward,
+    test_webhook_flow: outward,
+    preview_webhook: read,
+    preview_response: read,
+    list_provider_templates: read,
+    verify_signature: read,
+    list_emails: read,
+    get_email: read,
+    wait_for_email: read,
+    send_test_email: write,
+    render_email: outward,
+    list_destinations: read,
+    add_destination: write,
+    update_destination: replace,
+    remove_destination: remove,
+    list_deliveries: read,
+    redeliver: outward,
+    share_port: outward,
+    list_shares: read,
+    share_requests: read,
+    stop_share: remove,
+    get_usage: read,
+    // Collecting an approved key hands it over once: not a pure read.
+    wait_for_approval: write,
+    describe: read
+  }),
+  ...group("forwarding", {
+    preview_destination: read,
+    configure_forwarding: replace,
+    // rotate: true replaces the secret, and receivers holding the old one fail.
+    get_forwarding_secret: { destructive: true },
+    test_forwarding: outward
+  }),
+  ...group("layouts", {
+    preview_layouts: read,
+    list_layout_templates: read,
+    add_layout_template: write,
+    preview_email_fields: read,
+    ai_setup_status: read,
+    // Sends the chosen emails to Anthropic once the owner approves.
+    ai_setup: outward
+  }),
+  ...group("extras", {
+    create_endpoints: write,
+    delete_endpoints: remove,
+    favorite_endpoint: update,
+    count_requests: read,
+    generate_payload_schema: read
+  }),
+  ...group("teams", {
+    list_teams: read,
+    list_team_members: read,
+    share_endpoint: update,
+    unshare_endpoint: remove,
+    create_team: write,
+    rename_team: update,
+    delete_team: remove,
+    remove_team_member: remove,
+    leave_team: remove,
+    invite_to_team: outward,
+    list_invites: read,
+    answer_invite: write,
+    withdraw_invite: remove,
+    quote_team_change: read
+  }),
+  ...group("account", {
+    get_billing: read,
+    list_api_keys: read,
+    create_api_key: write,
+    revoke_api_key: remove,
+    rename_account: update,
+    list_connected_agents: read,
+    disconnect_agent: remove,
+    list_share_links: read,
+    create_share_link: write,
+    revoke_share_link: remove
+  }),
+  ...group("domains", {
+    list_domains: read,
+    add_domain: write,
+    // A failed check counts toward lapsing a verified domain: not safe to repeat.
+    verify_domain: { destructive: true },
+    // Replaces the routing; a missing catch-all refuses mail.
+    route_domain: replace,
+    remove_domain: remove
+  }),
+  ...group("sheets", {
+    list_google_connections: read,
+    connect_google: outward,
+    pick_spreadsheet: outward,
+    create_spreadsheet: outward,
+    list_sheet_tabs: { readOnly: true, openWorld: true },
+    disconnect_google: remove
+  }),
+  ...group("names", {
+    // The log of what visitors asked a running preview for.
+    list_names: read,
+    reserve_name: write,
+    release_name: remove,
+    set_name_password: update,
+    // Opens the name to anyone again.
+    clear_name_password: { destructive: true, idempotent: true }
+  })
+};
+function toolAnnotations(name) {
+  const entry = TOOL_CATALOG[name];
+  const readOnly = entry?.readOnly === true;
+  return {
+    title: toolTitle(name),
+    readOnlyHint: readOnly,
+    // MCP reads a missing destructiveHint as true on any tool that writes.
+    destructiveHint: !readOnly && entry?.destructive === true,
+    idempotentHint: readOnly || entry?.idempotent === true,
+    openWorldHint: entry?.openWorld === true
+  };
+}
+function toolTitle(name) {
+  const words = name.split("_").map((word) => TITLE_WORDS[word] ?? word);
+  const first = words[0] ?? "";
+  return [first.charAt(0).toUpperCase() + first.slice(1), ...words.slice(1)].join(" ");
+}
+var TITLE_WORDS = {
+  api: "API",
+  ai: "AI",
+  mcp: "MCP"
+};
+function parseToolGroups(setting) {
+  if (setting === null || setting === void 0 || setting.trim() === "") return null;
+  const groups = /* @__PURE__ */ new Set(["core"]);
+  const unknown = [];
+  for (const raw of setting.split(/[\s,+]+/)) {
+    const name = raw.trim().toLowerCase();
+    if (!name) continue;
+    if (name === "all") {
+      for (const g of TOOL_GROUP_NAMES) groups.add(g);
+    } else if (TOOL_GROUP_NAMES.includes(name)) {
+      groups.add(name);
+    } else {
+      unknown.push(raw.trim());
+    }
+  }
+  return { groups, unknown };
+}
+var LOADS_EVERYTHING = [
+  /^claude-code$/i,
+  /^claude-ai$/i,
+  /^claude$/i,
+  /codex/i,
+  /^openai-mcp$/i,
+  /chatgpt/i
+];
+function clientLoadsEverything(clientName) {
+  if (!clientName) return false;
+  const name = clientName.trim().toLowerCase().replace(/[\s_]+/g, "-");
+  return LOADS_EVERYTHING.some((pattern) => pattern.test(name));
+}
+function defaultToolGroups(clientName) {
+  return clientLoadsEverything(clientName) ? new Set(TOOL_GROUP_NAMES) : /* @__PURE__ */ new Set(["core"]);
+}
+
 // src/tools.ts
 var MAX_BODY_SIZE = MAX_OUTPUT;
 var HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"];
@@ -938,11 +1147,18 @@ function durationMs(value) {
     return null;
   }
 }
-function toolTarget(target, remote, handles) {
+function toolTarget(target, options, handles) {
+  const remote = options.remote === true;
   return {
     tool(name, description, shape, handler) {
       if (remote && LOCAL_ONLY_TOOLS.has(name)) return { remove() {
       } };
+      const entry = TOOL_CATALOG[name];
+      if (!entry) throw new Error(`${name} has no entry in catalog.ts`);
+      if (options.groups && !options.groups.has(entry.group)) return { remove() {
+      } };
+      if (options.readOnly && entry.readOnly !== true) return { remove() {
+      } };
       const wrapped = remote ? async (args) => {
         const input = args;
         if (TARGET_URL_TOOLS.has(name) && input.targetUrl !== void 0) {
@@ -976,7 +1192,7 @@ function toolTarget(target, remote, handles) {
         }
         return handler(bounded);
       } : handler;
-      const handle = target.tool(name, description, shape, wrapped);
+      const handle = target.tool(name, description, shape, wrapped, toolAnnotations(name));
       handles.push(handle);
       return handle;
     }
@@ -1052,7 +1268,7 @@ function withShareHints(list, remote = false) {
 function registerTools(target, client, options = {}) {
   const handles = [];
   const remote = options.remote === true;
-  const server = toolTarget(target, remote, handles);
+  const server = toolTarget(target, options, handles);
   const shareWith = remote ? REMOTE_SHARE : "share_port";
   server.tool(
     "create_endpoint",
@@ -2757,18 +2973,25 @@ function registerTools(target, client, options = {}) {
   LOCAL_ONLY_TOOLS,
   REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS,
+  TOOL_CATALOG,
+  TOOL_GROUPS,
+  TOOL_GROUP_NAMES,
+  clientLoadsEverything,
   createEndpointShape,
+  defaultToolGroups,
   deleteEndpointShape,
   getEndpointShape,
   getRequestShape,
   jsonContent,
   listEndpointsShape,
   listRequestsShape,
+  parseToolGroups,
   payloadSchemaResult,
   payloadSchemaShape,
   registerTools,
   shareHints,
   textContent,
+  toolAnnotations,
   toolWords,
   waitForRequestShape,
   withErrorHandling,

package/dist/tools.mjs

@@ -2,39 +2,53 @@ import {
   LOCAL_ONLY_TOOLS,
   REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS,
+  TOOL_CATALOG,
+  TOOL_GROUPS,
+  TOOL_GROUP_NAMES,
+  clientLoadsEverything,
   createEndpointShape,
+  defaultToolGroups,
   deleteEndpointShape,
   getEndpointShape,
   getRequestShape,
   jsonContent,
   listEndpointsShape,
   listRequestsShape,
+  parseToolGroups,
   payloadSchemaResult,
   payloadSchemaShape,
   registerTools,
   shareHints,
   textContent,
+  toolAnnotations,
   toolWords,
   waitForRequestShape,
   withErrorHandling,
   withShareHints
-} from "./chunk-SOQIUGLA.mjs";
+} from "./chunk-VANGXSK7.mjs";
 export {
   LOCAL_ONLY_TOOLS,
   REMOTE_MAX_WAIT_MS,
   REMOTE_MIN_POLL_MS,
+  TOOL_CATALOG,
+  TOOL_GROUPS,
+  TOOL_GROUP_NAMES,
+  clientLoadsEverything,
   createEndpointShape,
+  defaultToolGroups,
   deleteEndpointShape,
   getEndpointShape,
   getRequestShape,
   jsonContent,
   listEndpointsShape,
   listRequestsShape,
+  parseToolGroups,
   payloadSchemaResult,
   payloadSchemaShape,
   registerTools,
   shareHints,
   textContent,
+  toolAnnotations,
   toolWords,
   waitForRequestShape,
   withErrorHandling,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@webhooks-cc/mcp",
-  "version": "1.24.0",
+  "version": "2.0.0",
   "mcpName": "io.github.kroqdotdev/webhooks-cc",
-  "description": "MCP server for webhooks.cc — AI agent integration for webhook testing",
+  "description": "MCP server for webhooks.cc: AI agent integration for webhook testing",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
@@ -42,11 +42,12 @@
   },
   "homepage": "https://webhooks.cc",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.2",
+    "@modelcontextprotocol/server": "^2.4.0",
     "zod": "^4.6.7",
     "@webhooks-cc/sdk": "1.28.0"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.2",
     "@types/node": "^26.6.6",
     "tsup": "^9.0.0",
     "typescript": "^6.0.3",