@webhooks-cc/mcp 1.4.1 → 1.5.0

package/README.md

@@ -135,6 +135,20 @@ Provider template and signing support includes:
 - `gitlab`
 - `typeform`
 - `standard-webhooks`
+- `meta`
+- `lemonsqueezy`
+- `coinbase-commerce`
+- `razorpay`
+- `cal`
+- `intercom`
+- `telegram`
+- `square`
+- `hubspot`
+- `mailgun`
+- `calendly`
+- `mux`
+- `sentry`
+- `bitbucket`
 
 Signature verification also supports:
 

package/dist/bin/mcp.js

@@ -474,7 +474,8 @@ function ensureVerifyArgs(args2) {
   return {
     provider: args2.provider,
     secret,
-    ...args2.url ? { url: args2.url } : {}
+    ...args2.url ? { url: args2.url } : {},
+    ...args2.method ? { method: args2.method } : {}
   };
 }
 async function summarizeResponse(response) {
@@ -873,9 +874,12 @@ function registerTools(server, client) {
         "Shared signing secret. Required for non-Discord providers when doing client-side verification."
       ),
       publicKey: import_zod2.z.string().optional().describe("Discord application public key. Required for provider=discord."),
-      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio verification.")
+      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio, Square, and HubSpot verification."),
+      method: import_zod2.z.string().optional().describe(
+        "Original HTTP method used when the signature was generated. Used by HubSpot v3 verification; the SDK assumes POST when omitted."
+      )
     },
-    withErrorHandling(async ({ requestId, provider, secret, publicKey, url }) => {
+    withErrorHandling(async ({ requestId, provider, secret, publicKey, url, method }) => {
       const request = await client.requests.get(requestId);
       if (!provider && !secret && !publicKey) {
         const verified = request.signatureVerified;
@@ -902,7 +906,13 @@ function registerTools(server, client) {
           skipped: isSkipped ?? false
         });
       }
-      const verificationOptions = ensureVerifyArgs({ provider, secret, publicKey, url });
+      const verificationOptions = ensureVerifyArgs({
+        provider,
+        secret,
+        publicKey,
+        url,
+        method
+      });
       const result = await (0, import_sdk.verifySignature)(request, verificationOptions);
       return jsonContent({
         valid: result.valid,
@@ -1096,7 +1106,7 @@ function registerTools(server, client) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.4.1" : "0.0.0-dev";
+var VERSION = true ? "1.5.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   if (!apiKey) {

package/dist/index.js

@@ -495,7 +495,8 @@ function ensureVerifyArgs(args) {
   return {
     provider: args.provider,
     secret,
-    ...args.url ? { url: args.url } : {}
+    ...args.url ? { url: args.url } : {},
+    ...args.method ? { method: args.method } : {}
   };
 }
 async function summarizeResponse(response) {
@@ -894,9 +895,12 @@ function registerTools(server, client) {
         "Shared signing secret. Required for non-Discord providers when doing client-side verification."
       ),
       publicKey: import_zod2.z.string().optional().describe("Discord application public key. Required for provider=discord."),
-      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio verification.")
+      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio, Square, and HubSpot verification."),
+      method: import_zod2.z.string().optional().describe(
+        "Original HTTP method used when the signature was generated. Used by HubSpot v3 verification; the SDK assumes POST when omitted."
+      )
     },
-    withErrorHandling(async ({ requestId, provider, secret, publicKey, url }) => {
+    withErrorHandling(async ({ requestId, provider, secret, publicKey, url, method }) => {
       const request = await client.requests.get(requestId);
       if (!provider && !secret && !publicKey) {
         const verified = request.signatureVerified;
@@ -923,7 +927,13 @@ function registerTools(server, client) {
           skipped: isSkipped ?? false
         });
       }
-      const verificationOptions = ensureVerifyArgs({ provider, secret, publicKey, url });
+      const verificationOptions = ensureVerifyArgs({
+        provider,
+        secret,
+        publicKey,
+        url,
+        method
+      });
       const result = await (0, import_sdk.verifySignature)(request, verificationOptions);
       return jsonContent({
         valid: result.valid,
@@ -1117,7 +1127,7 @@ function registerTools(server, client) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.4.1" : "0.0.0-dev";
+var VERSION = true ? "1.5.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   if (!apiKey) {

package/dist/index.mjs

@@ -488,7 +488,8 @@ function ensureVerifyArgs(args) {
   return {
     provider: args.provider,
     secret,
-    ...args.url ? { url: args.url } : {}
+    ...args.url ? { url: args.url } : {},
+    ...args.method ? { method: args.method } : {}
   };
 }
 async function summarizeResponse(response) {
@@ -887,9 +888,12 @@ function registerTools(server, client) {
         "Shared signing secret. Required for non-Discord providers when doing client-side verification."
       ),
       publicKey: z2.string().optional().describe("Discord application public key. Required for provider=discord."),
-      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio verification.")
+      url: httpUrlSchema.optional().describe("Original signed URL. Required for Twilio, Square, and HubSpot verification."),
+      method: z2.string().optional().describe(
+        "Original HTTP method used when the signature was generated. Used by HubSpot v3 verification; the SDK assumes POST when omitted."
+      )
     },
-    withErrorHandling(async ({ requestId, provider, secret, publicKey, url }) => {
+    withErrorHandling(async ({ requestId, provider, secret, publicKey, url, method }) => {
       const request = await client.requests.get(requestId);
       if (!provider && !secret && !publicKey) {
         const verified = request.signatureVerified;
@@ -916,7 +920,13 @@ function registerTools(server, client) {
           skipped: isSkipped ?? false
         });
       }
-      const verificationOptions = ensureVerifyArgs({ provider, secret, publicKey, url });
+      const verificationOptions = ensureVerifyArgs({
+        provider,
+        secret,
+        publicKey,
+        url,
+        method
+      });
       const result = await verifySignature(request, verificationOptions);
       return jsonContent({
         valid: result.valid,
@@ -1110,7 +1120,7 @@ function registerTools(server, client) {
 }
 
 // src/index.ts
-var VERSION = true ? "1.4.1" : "0.0.0-dev";
+var VERSION = true ? "1.5.0" : "0.0.0-dev";
 function createServer(options = {}) {
   const apiKey = options.apiKey ?? process.env.WHK_API_KEY;
   if (!apiKey) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webhooks-cc/mcp",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "MCP server for webhooks.cc — AI agent integration for webhook testing",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -19,13 +19,6 @@
     "dist",
     "README.md"
   ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "prepublishOnly": "npm run build"
-  },
   "keywords": [
     "webhook",
     "mcp",
@@ -44,13 +37,19 @@
   "homepage": "https://webhooks.cc",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@webhooks-cc/sdk": "workspace:*",
-    "zod": "^4.4.3"
+    "zod": "^4.4.3",
+    "@webhooks-cc/sdk": "1.7.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.7"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
   }
-}
+}