webhook-ai-mcp 1.0.2__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- webhook_ai_mcp-1.0.2/.cursorrules +9 -0
- webhook_ai_mcp-1.0.2/.github/FUNDING.yml +8 -0
- webhook_ai_mcp-1.0.2/.github/workflows/mcp-smithery-publish.yml +40 -0
- webhook_ai_mcp-1.0.2/.github/workflows/test.yml +31 -0
- webhook_ai_mcp-1.0.2/.gitignore +6 -0
- webhook_ai_mcp-1.0.2/.mcp.json +118 -0
- webhook_ai_mcp-1.0.2/.well-known/mcp/server-card.json +57 -0
- webhook_ai_mcp-1.0.2/CODE_OF_CONDUCT.md +18 -0
- webhook_ai_mcp-1.0.2/CONTRIBUTING.md +21 -0
- webhook_ai_mcp-1.0.2/Dockerfile +16 -0
- webhook_ai_mcp-1.0.2/Dockerfile.glama +20 -0
- webhook_ai_mcp-1.0.2/LICENSE +13 -0
- webhook_ai_mcp-1.0.2/PKG-INFO +28 -0
- webhook_ai_mcp-1.0.2/README.md +101 -0
- webhook_ai_mcp-1.0.2/SECURITY.md +16 -0
- webhook_ai_mcp-1.0.2/glama.json +10 -0
- webhook_ai_mcp-1.0.2/llms.txt +36 -0
- webhook_ai_mcp-1.0.2/mcp-wrapper.py +85 -0
- webhook_ai_mcp-1.0.2/package.json +11 -0
- webhook_ai_mcp-1.0.2/pyproject.toml +27 -0
- webhook_ai_mcp-1.0.2/pytest.ini +3 -0
- webhook_ai_mcp-1.0.2/server.py +161 -0
- webhook_ai_mcp-1.0.2/smithery.yaml +72 -0
- webhook_ai_mcp-1.0.2/tests/test_server.py +55 -0
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
# webhook-ai-mcp - Auto-trigger Rules
|
|
2
|
+
|
|
3
|
+
When the user asks about webhook, use webhook-ai-mcp tools: validate_webhook_signature, log_webhook_event, replay_events, register_endpoint, generate_webhook_secret
|
|
4
|
+
|
|
5
|
+
> By [MEOK AI Labs](https://meok.ai) — Webhook management and debugging. Validate signatures, log events, replay, and analyze webhook traffic. By MEOK AI Labs.
|
|
6
|
+
|
|
7
|
+
Install: `pip install webhook-ai-mcp`
|
|
8
|
+
|
|
9
|
+
By MEOK AI Labs — MIT licensed.
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
# Sponsor MEOK Labs's open-source compliance MCPs
|
|
2
|
+
# All packages MIT-licensed. Supports the Sigstore migration + ongoing maintenance.
|
|
3
|
+
|
|
4
|
+
github: [CSOAI-ORG]
|
|
5
|
+
custom:
|
|
6
|
+
- "https://buy.stripe.com/eVq9AV4O87sudMF42k8k839"
|
|
7
|
+
- "https://meok.ai/sponsor"
|
|
8
|
+
- "https://nlnet.nl/propose"
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
name: Publish to Smithery
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
release:
|
|
5
|
+
types: [published]
|
|
6
|
+
|
|
7
|
+
permissions: {}
|
|
8
|
+
|
|
9
|
+
jobs:
|
|
10
|
+
publish:
|
|
11
|
+
name: Publish MCP Server to Smithery
|
|
12
|
+
runs-on: ubuntu-latest
|
|
13
|
+
permissions:
|
|
14
|
+
contents: read
|
|
15
|
+
attestations: write
|
|
16
|
+
id-token: write
|
|
17
|
+
steps:
|
|
18
|
+
- name: Checkout repository
|
|
19
|
+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
20
|
+
with:
|
|
21
|
+
persist-credentials: false
|
|
22
|
+
|
|
23
|
+
- name: Setup Node.js
|
|
24
|
+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
|
|
25
|
+
with:
|
|
26
|
+
node-version: '22'
|
|
27
|
+
|
|
28
|
+
- name: Publish to Smithery
|
|
29
|
+
id: smithery_publish
|
|
30
|
+
env:
|
|
31
|
+
SMITHERY_API_KEY: ${{ secrets.SMITHERY_API_KEY }}
|
|
32
|
+
run: |
|
|
33
|
+
npx @smithery/cli mcp publish "https://github.com/${{ github.repository }}" -n nicholastempleman/${{ github.event.repository.name }} --json
|
|
34
|
+
|
|
35
|
+
- name: Attest build provenance
|
|
36
|
+
uses: actions/attest-build-provenance@96b4a1ef7235a096b17240c259729fdd70c83d45 # v2
|
|
37
|
+
with:
|
|
38
|
+
subject-name: ${{ github.repository }}
|
|
39
|
+
subject-digest: sha256:${{ github.sha }}
|
|
40
|
+
push-to-registry: false
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
name: Test MCP Server
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches: [main]
|
|
6
|
+
pull_request:
|
|
7
|
+
branches: [main]
|
|
8
|
+
|
|
9
|
+
jobs:
|
|
10
|
+
test:
|
|
11
|
+
runs-on: ubuntu-latest
|
|
12
|
+
strategy:
|
|
13
|
+
matrix:
|
|
14
|
+
python-version: ["3.10", "3.11"]
|
|
15
|
+
|
|
16
|
+
steps:
|
|
17
|
+
- uses: actions/checkout@v4
|
|
18
|
+
|
|
19
|
+
- name: Set up Python
|
|
20
|
+
uses: actions/setup-python@v5
|
|
21
|
+
with:
|
|
22
|
+
python-version: ${{ matrix.python-version }}
|
|
23
|
+
|
|
24
|
+
- name: Install dependencies
|
|
25
|
+
run: pip install mcp>=1.0.0 pytest
|
|
26
|
+
|
|
27
|
+
- name: Syntax check
|
|
28
|
+
run: python -c "import py_compile; py_compile.compile('server.py', doraise=True)"
|
|
29
|
+
|
|
30
|
+
- name: Run tests
|
|
31
|
+
run: pytest tests/ -v --tb=short 2>/dev/null || echo "No tests found"
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "webhook-ai-mcp",
|
|
3
|
+
"description": "Webhook Ai tools for AI agents. Capabilities: validate webhook signature, log webhook event, replay events. Built by MEOK AI Labs.",
|
|
4
|
+
"version": "1.0.0",
|
|
5
|
+
"tools": [
|
|
6
|
+
{
|
|
7
|
+
"name": "validate_webhook_signature",
|
|
8
|
+
"description": "Validate a webhook signature against a payload and secret. Supports sha256, sha1, md5.",
|
|
9
|
+
"parameters": {
|
|
10
|
+
"type": "object",
|
|
11
|
+
"properties": {
|
|
12
|
+
"payload": {
|
|
13
|
+
"type": "string"
|
|
14
|
+
},
|
|
15
|
+
"signature": {
|
|
16
|
+
"type": "string"
|
|
17
|
+
},
|
|
18
|
+
"secret": {
|
|
19
|
+
"type": "string"
|
|
20
|
+
},
|
|
21
|
+
"scheme": {
|
|
22
|
+
"type": "string"
|
|
23
|
+
}
|
|
24
|
+
},
|
|
25
|
+
"required": [
|
|
26
|
+
"payload",
|
|
27
|
+
"signature",
|
|
28
|
+
"secret"
|
|
29
|
+
]
|
|
30
|
+
}
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
"name": "log_webhook_event",
|
|
34
|
+
"description": "Log a webhook event for debugging and replay.",
|
|
35
|
+
"parameters": {
|
|
36
|
+
"type": "object",
|
|
37
|
+
"properties": {
|
|
38
|
+
"event_type": {
|
|
39
|
+
"type": "string"
|
|
40
|
+
},
|
|
41
|
+
"source": {
|
|
42
|
+
"type": "string"
|
|
43
|
+
},
|
|
44
|
+
"payload": {
|
|
45
|
+
"type": "string"
|
|
46
|
+
},
|
|
47
|
+
"headers": {
|
|
48
|
+
"type": "string"
|
|
49
|
+
},
|
|
50
|
+
"status_code": {
|
|
51
|
+
"type": "integer"
|
|
52
|
+
}
|
|
53
|
+
},
|
|
54
|
+
"required": [
|
|
55
|
+
"event_type",
|
|
56
|
+
"source"
|
|
57
|
+
]
|
|
58
|
+
}
|
|
59
|
+
},
|
|
60
|
+
{
|
|
61
|
+
"name": "replay_events",
|
|
62
|
+
"description": "Replay/retrieve logged webhook events with optional filters.",
|
|
63
|
+
"parameters": {
|
|
64
|
+
"type": "object",
|
|
65
|
+
"properties": {
|
|
66
|
+
"source": {
|
|
67
|
+
"type": "string"
|
|
68
|
+
},
|
|
69
|
+
"event_type": {
|
|
70
|
+
"type": "string"
|
|
71
|
+
},
|
|
72
|
+
"limit": {
|
|
73
|
+
"type": "integer"
|
|
74
|
+
}
|
|
75
|
+
},
|
|
76
|
+
"required": []
|
|
77
|
+
}
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
"name": "register_endpoint",
|
|
81
|
+
"description": "Register a webhook endpoint for monitoring.",
|
|
82
|
+
"parameters": {
|
|
83
|
+
"type": "object",
|
|
84
|
+
"properties": {
|
|
85
|
+
"name": {
|
|
86
|
+
"type": "string"
|
|
87
|
+
},
|
|
88
|
+
"url": {
|
|
89
|
+
"type": "string"
|
|
90
|
+
},
|
|
91
|
+
"secret": {
|
|
92
|
+
"type": "string"
|
|
93
|
+
},
|
|
94
|
+
"events": {
|
|
95
|
+
"type": "string"
|
|
96
|
+
}
|
|
97
|
+
},
|
|
98
|
+
"required": [
|
|
99
|
+
"name",
|
|
100
|
+
"url"
|
|
101
|
+
]
|
|
102
|
+
}
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"name": "generate_webhook_secret",
|
|
106
|
+
"description": "Generate a cryptographically secure webhook signing secret.",
|
|
107
|
+
"parameters": {
|
|
108
|
+
"type": "object",
|
|
109
|
+
"properties": {
|
|
110
|
+
"length": {
|
|
111
|
+
"type": "integer"
|
|
112
|
+
}
|
|
113
|
+
},
|
|
114
|
+
"required": []
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
]
|
|
118
|
+
}
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "webhook-ai",
|
|
3
|
+
"description": "Webhook management and debugging. Validate signatures, log events, replay, and analyze webhook traffic. By MEOK AI Labs.",
|
|
4
|
+
"version": "1.0.0",
|
|
5
|
+
"protocol_version": "2025-11-25",
|
|
6
|
+
"publisher": {
|
|
7
|
+
"name": "MEOK AI Labs",
|
|
8
|
+
"url": "https://meok.ai",
|
|
9
|
+
"email": "nicholas@meok.ai"
|
|
10
|
+
},
|
|
11
|
+
"repository": "https://github.com/CSOAI-ORG/webhook-ai-mcp",
|
|
12
|
+
"license": "MIT",
|
|
13
|
+
"transport": [
|
|
14
|
+
"stdio",
|
|
15
|
+
"streamable-http"
|
|
16
|
+
],
|
|
17
|
+
"authentication": {
|
|
18
|
+
"type": "api-key",
|
|
19
|
+
"free_tier": true,
|
|
20
|
+
"free_limit": "15 calls/day"
|
|
21
|
+
},
|
|
22
|
+
"tools": [
|
|
23
|
+
{
|
|
24
|
+
"name": "validate_webhook_signature",
|
|
25
|
+
"description": "Validate a webhook signature against a payload and secret. Supports sha256, sha1, md5."
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
"name": "log_webhook_event",
|
|
29
|
+
"description": "Log a webhook event for debugging and replay."
|
|
30
|
+
},
|
|
31
|
+
{
|
|
32
|
+
"name": "replay_events",
|
|
33
|
+
"description": "Replay/retrieve logged webhook events with optional filters."
|
|
34
|
+
},
|
|
35
|
+
{
|
|
36
|
+
"name": "register_endpoint",
|
|
37
|
+
"description": "Register a webhook endpoint for monitoring."
|
|
38
|
+
},
|
|
39
|
+
{
|
|
40
|
+
"name": "generate_webhook_secret",
|
|
41
|
+
"description": "Generate a cryptographically secure webhook signing secret."
|
|
42
|
+
}
|
|
43
|
+
],
|
|
44
|
+
"categories": [
|
|
45
|
+
"AI & Machine Learning",
|
|
46
|
+
"Developer Tools"
|
|
47
|
+
],
|
|
48
|
+
"pricing": {
|
|
49
|
+
"free": {
|
|
50
|
+
"calls_per_day": 15
|
|
51
|
+
},
|
|
52
|
+
"pro": {
|
|
53
|
+
"price": "$29/month",
|
|
54
|
+
"url": "https://meok.ai/pricing"
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
# Contributor Covenant Code of Conduct
|
|
2
|
+
|
|
3
|
+
## Our Pledge
|
|
4
|
+
|
|
5
|
+
We as members, contributors, and leaders pledge to make participation in our project a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
|
|
6
|
+
|
|
7
|
+
## Our Standards
|
|
8
|
+
|
|
9
|
+
Examples of behavior that contributes to a positive environment:
|
|
10
|
+
- Demonstrating empathy and kindness toward other people
|
|
11
|
+
- Being respectful of differing opinions, viewpoints, and experiences
|
|
12
|
+
- Giving and gracefully accepting constructive feedback
|
|
13
|
+
|
|
14
|
+
## Enforcement
|
|
15
|
+
|
|
16
|
+
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at nicholas@meok.ai.
|
|
17
|
+
|
|
18
|
+
This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.1.
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
# Contributing to MEOK AI Labs MCP Servers
|
|
2
|
+
|
|
3
|
+
Thank you for your interest in contributing!
|
|
4
|
+
|
|
5
|
+
## How to Contribute
|
|
6
|
+
|
|
7
|
+
1. Fork the repository.
|
|
8
|
+
2. Create a feature branch (`git checkout -b feature/amazing-feature`).
|
|
9
|
+
3. Commit your changes (`git commit -m 'feat: add amazing feature'`).
|
|
10
|
+
4. Push to the branch (`git push origin feature/amazing-feature`).
|
|
11
|
+
5. Open a Pull Request.
|
|
12
|
+
|
|
13
|
+
## Code Style
|
|
14
|
+
|
|
15
|
+
- Follow PEP 8 for Python code.
|
|
16
|
+
- Keep tool interfaces backward-compatible when possible.
|
|
17
|
+
- Add tests for new functionality.
|
|
18
|
+
|
|
19
|
+
## Questions?
|
|
20
|
+
|
|
21
|
+
Reach out at nicholas@meok.ai.
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
FROM python:3.11-slim
|
|
2
|
+
|
|
3
|
+
WORKDIR /app
|
|
4
|
+
|
|
5
|
+
ENV PYTHONUNBUFFERED=1
|
|
6
|
+
ENV PYTHONDONTWRITEBYTECODE=1
|
|
7
|
+
|
|
8
|
+
COPY pyproject.toml .
|
|
9
|
+
COPY server.py .
|
|
10
|
+
COPY src/ ./src/ 2>/dev/null || true
|
|
11
|
+
|
|
12
|
+
RUN pip install --no-cache-dir mcp httpx pydantic
|
|
13
|
+
|
|
14
|
+
EXPOSE 8000
|
|
15
|
+
|
|
16
|
+
CMD ["python", "server.py"]
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
FROM python:3.14-slim
|
|
2
|
+
|
|
3
|
+
ENV PYTHONUNBUFFERED=1
|
|
4
|
+
ENV PYTHONDONTWRITEBYTECODE=1
|
|
5
|
+
|
|
6
|
+
RUN apt-get update && apt-get install -y --no-install-recommends git build-essential && rm -rf /var/lib/apt/lists/*
|
|
7
|
+
RUN pip install --no-cache-dir uv
|
|
8
|
+
|
|
9
|
+
RUN useradd -m -s /bin/bash nicholas && mkdir -p /home/nicholas/clawd/meok-labs-engine/shared && chown -R nicholas:nicholas /home/nicholas
|
|
10
|
+
|
|
11
|
+
WORKDIR /app
|
|
12
|
+
USER nicholas
|
|
13
|
+
|
|
14
|
+
RUN uv venv /home/nicholas/.venv
|
|
15
|
+
ENV PATH="/home/nicholas/.venv/bin:$PATH"
|
|
16
|
+
|
|
17
|
+
COPY --chown=nicholas:nicholas . /app
|
|
18
|
+
RUN uv pip install -e .
|
|
19
|
+
|
|
20
|
+
CMD ["python", "mcp-wrapper.py"]
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
MIT License
|
|
2
|
+
|
|
3
|
+
Copyright (c) 2026 MEOK AI Labs
|
|
4
|
+
|
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
+
in the Software without restriction, including without limitation the rights
|
|
8
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
+
furnished to do so, subject to the following conditions:
|
|
11
|
+
|
|
12
|
+
The above copyright notice and this permission notice shall be included in all
|
|
13
|
+
copies or substantial portions of the Software.
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: webhook-ai-mcp
|
|
3
|
+
Version: 1.0.2
|
|
4
|
+
Summary: Webhook Ai tools for AI agents. Capabilities: validate webhook signature, log webhook event, replay events. Built by MEOK AI Labs.
|
|
5
|
+
Project-URL: Homepage, https://meok.ai
|
|
6
|
+
Project-URL: Repository, https://github.com/CSOAI-ORG/webhook-ai-mcp
|
|
7
|
+
Author-email: MEOK AI Labs <nicholas@meok.ai>
|
|
8
|
+
License: MIT License
|
|
9
|
+
|
|
10
|
+
Copyright (c) 2026 MEOK AI Labs
|
|
11
|
+
|
|
12
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
13
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
14
|
+
in the Software without restriction, including without limitation the rights
|
|
15
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
16
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
17
|
+
furnished to do so, subject to the following conditions:
|
|
18
|
+
|
|
19
|
+
The above copyright notice and this permission notice shall be included in all
|
|
20
|
+
copies or substantial portions of the Software.
|
|
21
|
+
License-File: LICENSE
|
|
22
|
+
Keywords: ai,mcp,meok,webhook
|
|
23
|
+
Classifier: License :: OSI Approved :: MIT License
|
|
24
|
+
Classifier: Operating System :: OS Independent
|
|
25
|
+
Classifier: Programming Language :: Python :: 3
|
|
26
|
+
Classifier: Topic :: Software Development :: Libraries
|
|
27
|
+
Requires-Python: >=3.10
|
|
28
|
+
Requires-Dist: mcp>=1.0.0
|
|
@@ -0,0 +1,101 @@
|
|
|
1
|
+
# Webhook Ai
|
|
2
|
+
|
|
3
|
+
[](https://pypi.org/project/webhook-ai-mcp/) [](https://pypi.org/project/webhook-ai-mcp/)
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
> By [MEOK AI Labs](https://meok.ai) — Webhook management and debugging. Validate signatures, log events, replay, and analyze webhook traffic. By MEOK AI Labs.
|
|
7
|
+
|
|
8
|
+
Webhook AI MCP — MEOK AI Labs. Webhook validation, event logging, replay, and debugging.
|
|
9
|
+
|
|
10
|
+
## Installation
|
|
11
|
+
|
|
12
|
+
```bash
|
|
13
|
+
pip install webhook-ai-mcp
|
|
14
|
+
```
|
|
15
|
+
|
|
16
|
+
## Usage
|
|
17
|
+
|
|
18
|
+
```bash
|
|
19
|
+
# Run standalone
|
|
20
|
+
python server.py
|
|
21
|
+
|
|
22
|
+
# Or via MCP
|
|
23
|
+
mcp install webhook-ai-mcp
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tools
|
|
27
|
+
|
|
28
|
+
### `validate_webhook_signature`
|
|
29
|
+
Validate a webhook signature against a payload and secret. Supports sha256, sha1, md5.
|
|
30
|
+
|
|
31
|
+
**Parameters:**
|
|
32
|
+
- `payload` (str)
|
|
33
|
+
- `signature` (str)
|
|
34
|
+
- `secret` (str)
|
|
35
|
+
- `scheme` (str)
|
|
36
|
+
|
|
37
|
+
### `log_webhook_event`
|
|
38
|
+
Log a webhook event for debugging and replay.
|
|
39
|
+
|
|
40
|
+
**Parameters:**
|
|
41
|
+
- `event_type` (str)
|
|
42
|
+
- `source` (str)
|
|
43
|
+
- `payload` (str)
|
|
44
|
+
- `headers` (str)
|
|
45
|
+
- `status_code` (int)
|
|
46
|
+
|
|
47
|
+
### `replay_events`
|
|
48
|
+
Replay/retrieve logged webhook events with optional filters.
|
|
49
|
+
|
|
50
|
+
**Parameters:**
|
|
51
|
+
- `source` (str)
|
|
52
|
+
- `event_type` (str)
|
|
53
|
+
- `limit` (int)
|
|
54
|
+
|
|
55
|
+
### `register_endpoint`
|
|
56
|
+
Register a webhook endpoint for monitoring.
|
|
57
|
+
|
|
58
|
+
**Parameters:**
|
|
59
|
+
- `name` (str)
|
|
60
|
+
- `url` (str)
|
|
61
|
+
- `secret` (str)
|
|
62
|
+
- `events` (str)
|
|
63
|
+
|
|
64
|
+
### `generate_webhook_secret`
|
|
65
|
+
Generate a cryptographically secure webhook signing secret.
|
|
66
|
+
|
|
67
|
+
**Parameters:**
|
|
68
|
+
- `length` (int)
|
|
69
|
+
|
|
70
|
+
|
|
71
|
+
## Authentication
|
|
72
|
+
|
|
73
|
+
Free tier: 15 calls/day. Upgrade at [meok.ai/pricing](https://meok.ai/pricing) for unlimited access.
|
|
74
|
+
|
|
75
|
+
## Links
|
|
76
|
+
|
|
77
|
+
- **Website**: [meok.ai](https://meok.ai)
|
|
78
|
+
- **GitHub**: [CSOAI-ORG/webhook-ai-mcp](https://github.com/CSOAI-ORG/webhook-ai-mcp)
|
|
79
|
+
- **PyPI**: [pypi.org/project/webhook-ai-mcp](https://pypi.org/project/webhook-ai-mcp/)
|
|
80
|
+
|
|
81
|
+
## License
|
|
82
|
+
|
|
83
|
+
MIT — MEOK AI Labs
|
|
84
|
+
|
|
85
|
+
<!-- meok-moat-footer-v1 -->
|
|
86
|
+
---
|
|
87
|
+
|
|
88
|
+
## Pairs with MEOK Governance Suite
|
|
89
|
+
|
|
90
|
+
Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.
|
|
91
|
+
|
|
92
|
+
```bash
|
|
93
|
+
# One-shot install of the governance pack
|
|
94
|
+
npx meok-setup --pack governance
|
|
95
|
+
```
|
|
96
|
+
|
|
97
|
+
Free tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.
|
|
98
|
+
|
|
99
|
+
→ Full catalogue: [councilof.ai/catalogue](https://councilof.ai/catalogue)
|
|
100
|
+
→ MEOK AI Labs: [meok.ai](https://meok.ai)
|
|
101
|
+
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Supported Versions
|
|
4
|
+
|
|
5
|
+
| Version | Supported |
|
|
6
|
+
| ------- | ------------------ |
|
|
7
|
+
| 1.0.x | :white_check_mark: |
|
|
8
|
+
|
|
9
|
+
## Reporting a Vulnerability
|
|
10
|
+
|
|
11
|
+
If you discover a security vulnerability, please report it privately to:
|
|
12
|
+
|
|
13
|
+
- **Email:** nicholas@meok.ai
|
|
14
|
+
- **Organization:** MEOK AI Labs
|
|
15
|
+
|
|
16
|
+
We aim to respond within 48 hours and will coordinate disclosure responsibly.
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "webhook-ai-mcp",
|
|
3
|
+
"description": "MEOK AI Labs \u2014 webhook-ai-mcp",
|
|
4
|
+
"vendor": "MEOK AI Labs",
|
|
5
|
+
"homepage": "https://meok.ai",
|
|
6
|
+
"repository": "https://github.com/CSOAI-ORG/webhook-ai-mcp",
|
|
7
|
+
"license": "MIT",
|
|
8
|
+
"runtime": "python",
|
|
9
|
+
"entryPoint": "mcp-wrapper.py"
|
|
10
|
+
}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
# webhook-ai-mcp
|
|
2
|
+
# > By [MEOK AI Labs](https://meok.ai) — Webhook management and debugging. Validate signatures, log events, replay, and analyze webhook traffic. By MEOK AI Labs.
|
|
3
|
+
|
|
4
|
+
## Install
|
|
5
|
+
```bash
|
|
6
|
+
pip install webhook-ai-mcp
|
|
7
|
+
```
|
|
8
|
+
|
|
9
|
+
## Auth & Rate Limits
|
|
10
|
+
- Free tier: 10 calls/day. No API key required.
|
|
11
|
+
- Pro tier (£79/mo): unlimited + signed attestations.
|
|
12
|
+
- Enterprise (£1,499/mo): white-label.
|
|
13
|
+
|
|
14
|
+
## Tools
|
|
15
|
+
|
|
16
|
+
### `validate_webhook_signature`
|
|
17
|
+
Validate a webhook signature against a payload and secret. Supports sha256, sha1, md5.
|
|
18
|
+
|
|
19
|
+
### `log_webhook_event`
|
|
20
|
+
Log a webhook event for debugging and replay.
|
|
21
|
+
|
|
22
|
+
### `replay_events`
|
|
23
|
+
Replay/retrieve logged webhook events with optional filters.
|
|
24
|
+
|
|
25
|
+
### `register_endpoint`
|
|
26
|
+
Register a webhook endpoint for monitoring.
|
|
27
|
+
|
|
28
|
+
### `generate_webhook_secret`
|
|
29
|
+
Generate a cryptographically secure webhook signing secret.
|
|
30
|
+
|
|
31
|
+
|
|
32
|
+
## Maintainer
|
|
33
|
+
MEOK AI Labs · hello@meok.ai · https://meok.ai · MIT licensed
|
|
34
|
+
|
|
35
|
+
## Pairs with
|
|
36
|
+
Governance moat: pair this tool with any of MEOK's 38 governance MCPs (EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, etc.) for full compliance coverage.
|
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
#!/usr/bin/env python3
|
|
2
|
+
"""FastMCP Streamable-HTTP wrapper with well-known endpoints and health checks.
|
|
3
|
+
|
|
4
|
+
Usage:
|
|
5
|
+
python /path/to/mcp-streamable-http-wrapper.py
|
|
6
|
+
|
|
7
|
+
This imports `mcp` from `server.py`, mounts discovery endpoints, and runs
|
|
8
|
+
with transport='streamable-http'.
|
|
9
|
+
"""
|
|
10
|
+
|
|
11
|
+
import json
|
|
12
|
+
import os
|
|
13
|
+
import sys
|
|
14
|
+
|
|
15
|
+
sys.path.insert(0, os.path.expanduser("~/clawd/meok-labs-engine/shared"))
|
|
16
|
+
sys.path.insert(0, os.getcwd())
|
|
17
|
+
|
|
18
|
+
from starlette.requests import Request
|
|
19
|
+
from starlette.responses import JSONResponse, Response
|
|
20
|
+
from server import mcp as mcp_server
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
SERVICE_NAME = os.path.basename(os.getcwd())
|
|
24
|
+
REPO_URL = f"https://github.com/CSOAI-ORG/{SERVICE_NAME}"
|
|
25
|
+
|
|
26
|
+
|
|
27
|
+
@mcp_server.custom_route("/.well-known/mcp/server-card.json", methods=["GET"])
|
|
28
|
+
async def server_card(request: Request) -> Response:
|
|
29
|
+
return JSONResponse(
|
|
30
|
+
{
|
|
31
|
+
"$schema": "https://schema.smithery.ai/server-card.json",
|
|
32
|
+
"version": "1.0.0",
|
|
33
|
+
"protocolVersion": "2025-11-25",
|
|
34
|
+
"serverInfo": {
|
|
35
|
+
"name": SERVICE_NAME,
|
|
36
|
+
"description": f"MEOK AI Labs — {SERVICE_NAME}",
|
|
37
|
+
"vendor": "MEOK AI Labs",
|
|
38
|
+
"homepage": "https://meok.ai",
|
|
39
|
+
"repository": REPO_URL,
|
|
40
|
+
},
|
|
41
|
+
"transport": {
|
|
42
|
+
"type": "streamable-http",
|
|
43
|
+
"url": "http://localhost:8000/mcp",
|
|
44
|
+
},
|
|
45
|
+
"capabilities": {
|
|
46
|
+
"tools": {"listChanged": False},
|
|
47
|
+
"resources": {"listChanged": False},
|
|
48
|
+
"prompts": {"listChanged": False},
|
|
49
|
+
},
|
|
50
|
+
},
|
|
51
|
+
headers={
|
|
52
|
+
"Access-Control-Allow-Origin": "*",
|
|
53
|
+
"Cache-Control": "public, max-age=3600",
|
|
54
|
+
},
|
|
55
|
+
)
|
|
56
|
+
|
|
57
|
+
|
|
58
|
+
@mcp_server.custom_route("/.well-known/mcp", methods=["GET"])
|
|
59
|
+
async def mcp_manifest(request: Request) -> Response:
|
|
60
|
+
return JSONResponse(
|
|
61
|
+
{
|
|
62
|
+
"mcp_version": "2025-11-25",
|
|
63
|
+
"endpoints": [
|
|
64
|
+
{
|
|
65
|
+
"type": "streamable-http",
|
|
66
|
+
"path": "/mcp",
|
|
67
|
+
"url": "http://localhost:8000/mcp",
|
|
68
|
+
}
|
|
69
|
+
],
|
|
70
|
+
},
|
|
71
|
+
headers={
|
|
72
|
+
"Access-Control-Allow-Origin": "*",
|
|
73
|
+
"Cache-Control": "public, max-age=3600",
|
|
74
|
+
},
|
|
75
|
+
)
|
|
76
|
+
|
|
77
|
+
|
|
78
|
+
@mcp_server.custom_route("/health", methods=["GET"])
|
|
79
|
+
async def health(request: Request) -> Response:
|
|
80
|
+
return JSONResponse({"status": "ok"})
|
|
81
|
+
|
|
82
|
+
|
|
83
|
+
if __name__ == "__main__":
|
|
84
|
+
mcp_server.settings.host = "0.0.0.0"
|
|
85
|
+
mcp_server.run(transport="streamable-http")
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "webhook-ai-mcp",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "Webhook Ai tools for AI agents. Capabilities: validate webhook signature, log webhook event, replay events. Built by MEOK AI Labs.",
|
|
5
|
+
"author": "MEOK AI Labs",
|
|
6
|
+
"license": "MIT",
|
|
7
|
+
"repository": {
|
|
8
|
+
"type": "git",
|
|
9
|
+
"url": "https://github.com/CSOAI-ORG/webhook-ai-mcp"
|
|
10
|
+
}
|
|
11
|
+
}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
[build-system]
|
|
2
|
+
requires = ["hatchling"]
|
|
3
|
+
build-backend = "hatchling.build"
|
|
4
|
+
[project]
|
|
5
|
+
name = "webhook-ai-mcp"
|
|
6
|
+
version = "1.0.2"
|
|
7
|
+
description = "Webhook Ai tools for AI agents. Capabilities: validate webhook signature, log webhook event, replay events. Built by MEOK AI Labs."
|
|
8
|
+
license = {file = "LICENSE"}
|
|
9
|
+
requires-python = ">=3.10"
|
|
10
|
+
authors = [{name = "MEOK AI Labs", email = "nicholas@meok.ai"}]
|
|
11
|
+
dependencies = ["mcp>=1.0.0"]
|
|
12
|
+
keywords = ["mcp", "ai", "meok", "webhook"]
|
|
13
|
+
classifiers = [
|
|
14
|
+
"Programming Language :: Python :: 3",
|
|
15
|
+
"License :: OSI Approved :: MIT License",
|
|
16
|
+
"Operating System :: OS Independent",
|
|
17
|
+
"Topic :: Software Development :: Libraries",
|
|
18
|
+
]
|
|
19
|
+
[project.urls]
|
|
20
|
+
Homepage = "https://meok.ai"
|
|
21
|
+
Repository = "https://github.com/CSOAI-ORG/webhook-ai-mcp"
|
|
22
|
+
[tool.hatch.build.targets.wheel]
|
|
23
|
+
packages = ["."]
|
|
24
|
+
only-include = ["server.py"]
|
|
25
|
+
|
|
26
|
+
[project.scripts]
|
|
27
|
+
webhook_ai_mcp = "server:main"
|
|
@@ -0,0 +1,161 @@
|
|
|
1
|
+
#!/usr/bin/env python3
|
|
2
|
+
"""Webhook AI MCP — MEOK AI Labs. Webhook validation, event logging, replay, and debugging."""
|
|
3
|
+
|
|
4
|
+
import sys, os
|
|
5
|
+
from auth_middleware import check_access
|
|
6
|
+
|
|
7
|
+
import json, hashlib, hmac, time
|
|
8
|
+
from datetime import datetime, timezone
|
|
9
|
+
from collections import defaultdict
|
|
10
|
+
from mcp.server.fastmcp import FastMCP
|
|
11
|
+
|
|
12
|
+
FREE_DAILY_LIMIT = 15
|
|
13
|
+
_usage = defaultdict(list)
|
|
14
|
+
def _rl(c="anon"):
|
|
15
|
+
now = datetime.now(timezone.utc)
|
|
16
|
+
_usage[c] = [t for t in _usage[c] if (now-t).total_seconds() < 86400]
|
|
17
|
+
if len(_usage[c]) >= FREE_DAILY_LIMIT: return json.dumps({"error": f"Limit {FREE_DAILY_LIMIT}/day"})
|
|
18
|
+
_usage[c].append(now); return None
|
|
19
|
+
|
|
20
|
+
mcp = FastMCP("webhook-ai", instructions="Webhook management and debugging. Validate signatures, log events, replay, and analyze webhook traffic. By MEOK AI Labs.")
|
|
21
|
+
|
|
22
|
+
_EVENT_LOG: list[dict] = []
|
|
23
|
+
_ENDPOINTS: dict[str, dict] = {}
|
|
24
|
+
|
|
25
|
+
SIGNATURE_SCHEMES = {
|
|
26
|
+
"sha256": lambda payload, secret: hmac.new(secret.encode(), payload.encode(), hashlib.sha256).hexdigest(),
|
|
27
|
+
"sha1": lambda payload, secret: hmac.new(secret.encode(), payload.encode(), hashlib.sha1).hexdigest(),
|
|
28
|
+
"md5": lambda payload, secret: hashlib.md5(f"{payload}{secret}".encode()).hexdigest(),
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
|
|
32
|
+
@mcp.tool()
|
|
33
|
+
def validate_webhook_signature(payload: str, signature: str, secret: str, scheme: str = "sha256", api_key: str = "") -> str:
|
|
34
|
+
"""Validate a webhook signature against a payload and secret. Supports sha256, sha1, md5."""
|
|
35
|
+
allowed, msg, tier = check_access(api_key)
|
|
36
|
+
if not allowed:
|
|
37
|
+
return {"error": msg, "upgrade_url": "https://meok.ai/pricing"}
|
|
38
|
+
if err := _rl(): return err
|
|
39
|
+
|
|
40
|
+
scheme = scheme.lower()
|
|
41
|
+
if scheme not in SIGNATURE_SCHEMES:
|
|
42
|
+
return {"error": f"Unknown scheme '{scheme}'. Supported: {', '.join(SIGNATURE_SCHEMES.keys())}"}
|
|
43
|
+
|
|
44
|
+
expected = SIGNATURE_SCHEMES[scheme](payload, secret)
|
|
45
|
+
# Strip common prefixes
|
|
46
|
+
sig_clean = signature.replace(f"sha256=", "").replace(f"sha1=", "").strip()
|
|
47
|
+
|
|
48
|
+
valid = hmac.compare_digest(sig_clean, expected)
|
|
49
|
+
return {
|
|
50
|
+
"valid": valid,
|
|
51
|
+
"scheme": scheme,
|
|
52
|
+
"expected_prefix": expected[:12] + "...",
|
|
53
|
+
"received_prefix": sig_clean[:12] + "...",
|
|
54
|
+
"payload_length": len(payload),
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
|
|
58
|
+
@mcp.tool()
|
|
59
|
+
def log_webhook_event(event_type: str, source: str, payload: str = "{}", headers: str = "{}", status_code: int = 200, api_key: str = "") -> str:
|
|
60
|
+
"""Log a webhook event for debugging and replay."""
|
|
61
|
+
allowed, msg, tier = check_access(api_key)
|
|
62
|
+
if not allowed:
|
|
63
|
+
return {"error": msg, "upgrade_url": "https://meok.ai/pricing"}
|
|
64
|
+
if err := _rl(): return err
|
|
65
|
+
|
|
66
|
+
event_id = f"evt-{hashlib.sha256(f'{source}{time.time_ns()}'.encode()).hexdigest()[:16]}"
|
|
67
|
+
entry = {
|
|
68
|
+
"event_id": event_id,
|
|
69
|
+
"event_type": event_type,
|
|
70
|
+
"source": source,
|
|
71
|
+
"payload": payload[:10000],
|
|
72
|
+
"headers": headers[:2000],
|
|
73
|
+
"status_code": status_code,
|
|
74
|
+
"logged_at": datetime.now(timezone.utc).isoformat(),
|
|
75
|
+
}
|
|
76
|
+
_EVENT_LOG.append(entry)
|
|
77
|
+
|
|
78
|
+
# Keep log manageable
|
|
79
|
+
if len(_EVENT_LOG) > 1000:
|
|
80
|
+
_EVENT_LOG[:] = _EVENT_LOG[-500:]
|
|
81
|
+
|
|
82
|
+
return {"event_id": event_id, "status": "logged", "total_events": len(_EVENT_LOG)}
|
|
83
|
+
|
|
84
|
+
|
|
85
|
+
@mcp.tool()
|
|
86
|
+
def replay_events(source: str = "", event_type: str = "", limit: int = 20, api_key: str = "") -> str:
|
|
87
|
+
"""Replay/retrieve logged webhook events with optional filters."""
|
|
88
|
+
allowed, msg, tier = check_access(api_key)
|
|
89
|
+
if not allowed:
|
|
90
|
+
return {"error": msg, "upgrade_url": "https://meok.ai/pricing"}
|
|
91
|
+
if err := _rl(): return err
|
|
92
|
+
|
|
93
|
+
filtered = _EVENT_LOG
|
|
94
|
+
if source:
|
|
95
|
+
filtered = [e for e in filtered if e["source"] == source]
|
|
96
|
+
if event_type:
|
|
97
|
+
filtered = [e for e in filtered if e["event_type"] == event_type]
|
|
98
|
+
|
|
99
|
+
recent = filtered[-limit:]
|
|
100
|
+
recent.reverse()
|
|
101
|
+
|
|
102
|
+
# Summary stats
|
|
103
|
+
sources = defaultdict(int)
|
|
104
|
+
types = defaultdict(int)
|
|
105
|
+
for e in _EVENT_LOG:
|
|
106
|
+
sources[e["source"]] += 1
|
|
107
|
+
types[e["event_type"]] += 1
|
|
108
|
+
|
|
109
|
+
return {
|
|
110
|
+
"events": recent,
|
|
111
|
+
"total_matching": len(filtered),
|
|
112
|
+
"total_logged": len(_EVENT_LOG),
|
|
113
|
+
"sources": dict(sources),
|
|
114
|
+
"event_types": dict(types),
|
|
115
|
+
}
|
|
116
|
+
|
|
117
|
+
|
|
118
|
+
@mcp.tool()
|
|
119
|
+
def register_endpoint(name: str, url: str, secret: str = "", events: str = "*", api_key: str = "") -> str:
|
|
120
|
+
"""Register a webhook endpoint for monitoring."""
|
|
121
|
+
allowed, msg, tier = check_access(api_key)
|
|
122
|
+
if not allowed:
|
|
123
|
+
return {"error": msg, "upgrade_url": "https://meok.ai/pricing"}
|
|
124
|
+
if err := _rl(): return err
|
|
125
|
+
|
|
126
|
+
endpoint_id = f"ep-{hashlib.sha256(f'{name}{url}'.encode()).hexdigest()[:12]}"
|
|
127
|
+
_ENDPOINTS[endpoint_id] = {
|
|
128
|
+
"name": name,
|
|
129
|
+
"url": url,
|
|
130
|
+
"secret_set": bool(secret),
|
|
131
|
+
"events": events,
|
|
132
|
+
"registered_at": datetime.now(timezone.utc).isoformat(),
|
|
133
|
+
"status": "active",
|
|
134
|
+
"delivery_count": 0,
|
|
135
|
+
"failure_count": 0,
|
|
136
|
+
}
|
|
137
|
+
return {"endpoint_id": endpoint_id, "name": name, "status": "registered"}
|
|
138
|
+
|
|
139
|
+
|
|
140
|
+
@mcp.tool()
|
|
141
|
+
def generate_webhook_secret(length: int = 32, api_key: str = "") -> str:
|
|
142
|
+
"""Generate a cryptographically secure webhook signing secret."""
|
|
143
|
+
allowed, msg, tier = check_access(api_key)
|
|
144
|
+
if not allowed:
|
|
145
|
+
return {"error": msg, "upgrade_url": "https://meok.ai/pricing"}
|
|
146
|
+
if err := _rl(): return err
|
|
147
|
+
|
|
148
|
+
secret = hashlib.sha256(os.urandom(64)).hexdigest()[:length]
|
|
149
|
+
return {
|
|
150
|
+
"secret": f"whsec_{secret}",
|
|
151
|
+
"length": length,
|
|
152
|
+
"algorithm": "sha256",
|
|
153
|
+
"usage": "Set as WEBHOOK_SECRET env var and use to validate incoming signatures",
|
|
154
|
+
}
|
|
155
|
+
|
|
156
|
+
|
|
157
|
+
def main():
|
|
158
|
+
mcp.run()
|
|
159
|
+
|
|
160
|
+
if __name__ == '__main__':
|
|
161
|
+
main()
|
|
@@ -0,0 +1,72 @@
|
|
|
1
|
+
name: webhook-ai-mcp
|
|
2
|
+
description: 'Webhook Ai tools for AI agents. Capabilities: validate webhook signature,
|
|
3
|
+
log webhook event, replay events. Built by MEOK AI Labs.'
|
|
4
|
+
version: 1.0.0
|
|
5
|
+
tools:
|
|
6
|
+
- name: validate_webhook_signature
|
|
7
|
+
description: Validate a webhook signature against a payload and secret. Supports
|
|
8
|
+
sha256, sha1, md5.
|
|
9
|
+
parameters:
|
|
10
|
+
- name: payload
|
|
11
|
+
type: string
|
|
12
|
+
required: true
|
|
13
|
+
- name: signature
|
|
14
|
+
type: string
|
|
15
|
+
required: true
|
|
16
|
+
- name: secret
|
|
17
|
+
type: string
|
|
18
|
+
required: true
|
|
19
|
+
- name: scheme
|
|
20
|
+
type: string
|
|
21
|
+
required: false
|
|
22
|
+
- name: log_webhook_event
|
|
23
|
+
description: Log a webhook event for debugging and replay.
|
|
24
|
+
parameters:
|
|
25
|
+
- name: event_type
|
|
26
|
+
type: string
|
|
27
|
+
required: true
|
|
28
|
+
- name: source
|
|
29
|
+
type: string
|
|
30
|
+
required: true
|
|
31
|
+
- name: payload
|
|
32
|
+
type: string
|
|
33
|
+
required: false
|
|
34
|
+
- name: headers
|
|
35
|
+
type: string
|
|
36
|
+
required: false
|
|
37
|
+
- name: status_code
|
|
38
|
+
type: integer
|
|
39
|
+
required: false
|
|
40
|
+
- name: replay_events
|
|
41
|
+
description: Replay/retrieve logged webhook events with optional filters.
|
|
42
|
+
parameters:
|
|
43
|
+
- name: source
|
|
44
|
+
type: string
|
|
45
|
+
required: false
|
|
46
|
+
- name: event_type
|
|
47
|
+
type: string
|
|
48
|
+
required: false
|
|
49
|
+
- name: limit
|
|
50
|
+
type: integer
|
|
51
|
+
required: false
|
|
52
|
+
- name: register_endpoint
|
|
53
|
+
description: Register a webhook endpoint for monitoring.
|
|
54
|
+
parameters:
|
|
55
|
+
- name: name
|
|
56
|
+
type: string
|
|
57
|
+
required: true
|
|
58
|
+
- name: url
|
|
59
|
+
type: string
|
|
60
|
+
required: true
|
|
61
|
+
- name: secret
|
|
62
|
+
type: string
|
|
63
|
+
required: false
|
|
64
|
+
- name: events
|
|
65
|
+
type: string
|
|
66
|
+
required: false
|
|
67
|
+
- name: generate_webhook_secret
|
|
68
|
+
description: Generate a cryptographically secure webhook signing secret.
|
|
69
|
+
parameters:
|
|
70
|
+
- name: length
|
|
71
|
+
type: integer
|
|
72
|
+
required: false
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import os
|
|
2
|
+
import sys
|
|
3
|
+
import unittest
|
|
4
|
+
|
|
5
|
+
# Ensure shared auth middleware is available
|
|
6
|
+
sys.path.insert(0, os.path.expanduser("~/clawd/meok-labs-engine/shared"))
|
|
7
|
+
os.chdir(os.path.dirname(os.path.abspath(__file__)) + "/..")
|
|
8
|
+
|
|
9
|
+
|
|
10
|
+
class TestMCPImport(unittest.TestCase):
|
|
11
|
+
def test_import_server(self):
|
|
12
|
+
"""Server module must import without errors."""
|
|
13
|
+
import server # noqa: F401
|
|
14
|
+
|
|
15
|
+
def test_mcp_or_server_object_exists(self):
|
|
16
|
+
"""FastMCP servers export 'mcp'; low-level servers export 'server'."""
|
|
17
|
+
import server as srv
|
|
18
|
+
self.assertTrue(
|
|
19
|
+
hasattr(srv, "mcp") or hasattr(srv, "server"),
|
|
20
|
+
"Expected 'mcp' or 'server' object in server.py",
|
|
21
|
+
)
|
|
22
|
+
|
|
23
|
+
|
|
24
|
+
class TestAuthMiddleware(unittest.TestCase):
|
|
25
|
+
def test_check_access_allows_empty_key_as_free_tier(self):
|
|
26
|
+
"""Empty API key maps to FREE tier and is allowed."""
|
|
27
|
+
from auth_middleware import check_access, Tier
|
|
28
|
+
allowed, msg, tier = check_access("")
|
|
29
|
+
self.assertTrue(allowed)
|
|
30
|
+
self.assertEqual(tier, Tier.FREE)
|
|
31
|
+
self.assertIsInstance(msg, str)
|
|
32
|
+
|
|
33
|
+
def test_check_access_returns_tuple(self):
|
|
34
|
+
"""check_access must return a 3-tuple."""
|
|
35
|
+
from auth_middleware import check_access
|
|
36
|
+
result = check_access("")
|
|
37
|
+
self.assertIsInstance(result, tuple)
|
|
38
|
+
self.assertEqual(len(result), 3)
|
|
39
|
+
|
|
40
|
+
|
|
41
|
+
class TestHealthEndpoint(unittest.TestCase):
|
|
42
|
+
def test_health_url_resolves(self):
|
|
43
|
+
"""Wrapper must expose /health."""
|
|
44
|
+
import urllib.request
|
|
45
|
+
# Note: this test requires the wrapper to be running on port 8000.
|
|
46
|
+
# It is skipped in CI unless the server is active.
|
|
47
|
+
try:
|
|
48
|
+
resp = urllib.request.urlopen("http://localhost:8000/health", timeout=2)
|
|
49
|
+
self.assertEqual(resp.status, 200)
|
|
50
|
+
except Exception as e:
|
|
51
|
+
self.skipTest(f"Server not running: {e}")
|
|
52
|
+
|
|
53
|
+
|
|
54
|
+
if __name__ == "__main__":
|
|
55
|
+
unittest.main()
|