AHOOK

Working · 42 ms Security A

app.ahook/ahookv1.0.1 Domain verified

Webhooks designed for agents. Create inboxes, wait for events, list and extract them.

Developer Tools

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-05T19:08:24.482134Z",
      "publishedAt": "2026-11-05T19:08:24.482134Z",
      "statusChangedAt": "2026-11-05T19:08:24.482134Z"
    }
  },
  "server": {
    "name": "app.ahook/ahook",
    "icons": [
      {
        "src": "https://ahook.app/favicon.svg",
        "sizes": [
          "any"
        ],
        "mimeType": "image/svg+xml"
      }
    ],
    "title": "AHOOK",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://ahook.app/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "Authorization",
            "isSecret": true,
            "description": "Bearer <inbox read token>. Needed for wait, list, get, extract and delete; create_inbox works without it and returns the token."
          }
        ]
      }
    ],
    "version": "1.0.1",
    "repository": {
      "id": "1447273849",
      "url": "https://github.com/ahook-app/ahook",
      "source": "github"
    },
    "websiteUrl": "https://ahook.app",
    "description": "Webhooks designed for agents. Create inboxes, wait for events, list and extract them."
  }
}

Maintained byahook.app(verified)Also a maintainer?

Try it

Call this server's tools from your browser. Nothing to install.

https://ahook.app/mcp

Authorization (optional)

Bearer <inbox read token>. Needed for wait, list, get, extract and delete; create_inbox works without it and returns the token.

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

create_inbox

Create a webhook inbox. Returns its ingest URL and a read token (shown once).

This tool takes no arguments.

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http ahook https://ahook.app/mcp

Headers

Authorization (optional, not in the config above): Bearer <inbox read token>. Needed for wait, list, get, extract and delete; create_inbox works without it and returns the token.

Tools (6)

Tool list last changed Nov 5, 2026.

create_inbox

Create a webhook inbox. Returns its ingest URL and a read token (shown once).

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {}
}

delete_inbox

Delete an inbox and its events. Auth: Authorization Bearer read token header.

destructive

Argument	Type	Description
inbox_id*	string	The inbox id returned when the inbox was created.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

extract_field

Pull a JSON path out of an event body. Auth: Authorization Bearer read token header.

read-only

Argument	Type	Description
event_id*	integer	The numeric id of the event.
inbox_id*	string	The inbox id returned when the inbox was created.
json_path*	string	Dot-separated path into the event JSON body, e.g. user.email.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id",
    "json_path"
  ],
  "properties": {
    "event_id": {
      "type": "integer",
      "description": "The numeric id of the event."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    },
    "json_path": {
      "type": "string",
      "description": "Dot-separated path into the event JSON body, e.g. user.email."
    }
  }
}

get_event

Get one event by id. Auth: Authorization Bearer read token header.

read-only

Argument	Type	Description
event_id*	integer	The numeric id of the event.
inbox_id*	string	The inbox id returned when the inbox was created.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id"
  ],
  "properties": {
    "event_id": {
      "type": "integer",
      "description": "The numeric id of the event."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

list_events

List events in an inbox. Auth: Authorization Bearer read token header.

read-only

Argument	Type	Description
after	integer	Only list events with an id greater than this cursor.
limit	integer	Maximum number of events to return.
inbox_id*	string	The inbox id returned when the inbox was created.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer",
      "description": "Only list events with an id greater than this cursor."
    },
    "limit": {
      "type": "integer",
      "description": "Maximum number of events to return."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

wait_for_event

Wait for the next event in an inbox after a cursor, up to 30s. Auth: Authorization Bearer read token header.

read-only

Argument	Type	Description
after	integer	Only return the first event with an id greater than this cursor (0 for the first event).
inbox_id*	string	The inbox id returned when the inbox was created.
timeout_ms	integer	How long to wait in milliseconds (max 30000).
body_contains	string	Only return an event whose body contains this text.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer",
      "description": "Only return the first event with an id greater than this cursor (0 for the first event)."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    },
    "timeout_ms": {
      "type": "integer",
      "description": "How long to wait in milliseconds (max 30000)."
    },
    "body_contains": {
      "type": "string",
      "description": "Only return an event whose body contains this text."
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 5, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works

Tool changes

What changed in this server's tools since we started watching, newest first. Each change is scanned again.

delete_inboxchanged (inputs, hints)Nov 5, 2026

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "inbox_id": {
      "type": "string"
    }
  }
}

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

extract_fieldchanged (inputs, hints)Nov 5, 2026

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id",
    "json_path"
  ],
  "properties": {
    "event_id": {
      "type": "integer"
    },
    "inbox_id": {
      "type": "string"
    },
    "json_path": {
      "type": "string"
    }
  }
}

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id",
    "json_path"
  ],
  "properties": {
    "event_id": {
      "type": "integer",
      "description": "The numeric id of the event."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    },
    "json_path": {
      "type": "string",
      "description": "Dot-separated path into the event JSON body, e.g. user.email."
    }
  }
}

get_eventchanged (inputs, hints)Nov 5, 2026

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id"
  ],
  "properties": {
    "event_id": {
      "type": "integer"
    },
    "inbox_id": {
      "type": "string"
    }
  }
}

{
  "type": "object",
  "required": [
    "inbox_id",
    "event_id"
  ],
  "properties": {
    "event_id": {
      "type": "integer",
      "description": "The numeric id of the event."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

list_eventschanged (inputs, hints)Nov 5, 2026

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer"
    },
    "limit": {
      "type": "integer"
    },
    "inbox_id": {
      "type": "string"
    }
  }
}

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer",
      "description": "Only list events with an id greater than this cursor."
    },
    "limit": {
      "type": "integer",
      "description": "Maximum number of events to return."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    }
  }
}

wait_for_eventchanged (inputs, hints)Nov 5, 2026

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer"
    },
    "inbox_id": {
      "type": "string"
    },
    "timeout_ms": {
      "type": "integer"
    },
    "body_contains": {
      "type": "string"
    }
  }
}

{
  "type": "object",
  "required": [
    "inbox_id"
  ],
  "properties": {
    "after": {
      "type": "integer",
      "description": "Only return the first event with an id greater than this cursor (0 for the first event)."
    },
    "inbox_id": {
      "type": "string",
      "description": "The inbox id returned when the inbox was created."
    },
    "timeout_ms": {
      "type": "integer",
      "description": "How long to wait in milliseconds (max 30000)."
    },
    "body_contains": {
      "type": "string",
      "description": "Only return an event whose body contains this text."
    }
  }
}

create_inboxchanged (hints)Nov 5, 2026