Server data from the Official MCP Registry
Turn webhooks into MCP Events that AI agents subscribe to, with Hookdeck Event Gateway.
About
Turn webhooks into MCP Events that AI agents subscribe to, with Hookdeck Event Gateway.
Security Report
Valid MCP server (3 strong, 2 medium validity signals). 5 known CVEs in dependencies (0 critical, 3 high severity) Package registry verified. Imported from the Official MCP Registry.
6 files analyzed · 6 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: HOOKDECK_API_KEY
Environment variable: HOOKDECK_SIGNING_SECRET
Environment variable: BRIDGE_MCP_SECRET
Environment variable: BRIDGE_PORT
Environment variable: RESEND_API_KEY
Environment variable: GITHUB_TOKEN
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-hookdeck-mcp-events-bridge": {
"env": {
"BRIDGE_PORT": "your-bridge-port-here",
"GITHUB_TOKEN": "your-github-token-here",
"RESEND_API_KEY": "your-resend-api-key-here",
"HOOKDECK_API_KEY": "your-hookdeck-api-key-here",
"BRIDGE_MCP_SECRET": "your-bridge-mcp-secret-here",
"HOOKDECK_SIGNING_SECRET": "your-hookdeck-signing-secret-here"
},
"args": [
"-y",
"@hookdeck/mcp-events-bridge"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
MCP Events bridge
Turn webhooks into MCP Events, so AI agents can act the moment something happens: an email arrives, an issue is opened, a workflow fails. Hookdeck Event Gateway receives, verifies and delivers every event.
For example, an email arrives at a Resend address, and ChatGPT, subscribed through the bridge, acts on it:

Why
MCP Events is an experimental MCP extension that lets an agent subscribe to events instead of polling for them, and ChatGPT supports it. But an agent can only subscribe to MCP servers that implement it, and almost none do yet, while nearly every service already sends webhooks.
The bridge closes that gap:
- Webhooks become MCP Events. Sources: Resend inbound email, GitHub, any of 163 Event Gateway source types (Stripe, Slack, Shopify and more), and webhooks from any HTTP sender, such as a service you've built, verified with HMAC, Standard Webhooks, Basic auth or an API key. Add others with
defineSource. - Subscribers choose what wakes them. Events have filters, such as an email's sender, or a GitHub repository and action.
- Every event verified, delivered and recorded. Event Gateway verifies each service's signatures, retries failed deliveries, drops duplicates within an hour, and keeps a record of every event and attempt.
- Stateless. Each subscription is an Event Gateway connection, so there's no database.
It's for developers who want agents (ChatGPT, Claude Code, Hermes Agent and others) to react to events from the services they already use.
Status: 0.9, an open-source project. MCP Events is experimental, and this package may change with it. We're building the same thing into Hookdeck Event Gateway, so tell us what you need. See docs/PLAN.md for what's done and what's next, and CHANGELOG.md for changes between versions. Upgrading from 0.7: see docs/UPGRADING.md.
How it works
- Event Gateway verifies each service's webhook signature, keeps every request, turns each one into an MCP Event, and delivers it to each subscriber, signed with the subscriber's secret, with retries.
- The bridge is the MCP server: it lists the events on offer, handles subscribe (including the spec's endpoint challenge), and manages one Event Gateway connection per subscription. Events don't pass through it.
- The Hookdeck CLI forwards MCP Events to local agents, and Event Gateway's notifications to a bridge on your laptop, so neither needs a public URL of its own.
The design, its trade-offs and how it maps to the spec are in docs/ARCHITECTURE.md.
Supported MCP clients
Clients that support MCP Events subscribe to the bridge, and receive each event as a webhook at their callback URL. Clients that don't, such as Claude Code, poll with the bridge's tools.
| Client | How it gets events | Needs a public URL? | Tested | Guide |
|---|---|---|---|---|
| ChatGPT (Plus or above, Developer mode) | MCP Events, webhook delivery | Yes, for the bridge's MCP endpoint: deploy the bridge, or tunnel to a local one | Yes, end to end | Connect ChatGPT |
| Claude Code | Polls, with no MCP Events support: wait_for_event and poll_events during a turn, and the plugin (which runs watch) between prompts | No | 2.1.294 to 2.1.310 | Connect Claude Code |
| Hermes Agent | MCP Events, webhook delivery | No: a local bridge creates its callback URL | v0.22.5 | Hermes Agent guide |
Vercel AI SDK (@ai-sdk/mcp) | MCP Events, webhook delivery | A callback URL: your own public route, or one a local bridge creates | 2.0.84 | Library guide |
Mastra (@mastra/mcp) | MCP Events, poll or webhook delivery | Poll: no. Webhook: a callback URL, as for the Vercel AI SDK | 2.5.0 | Library guide |
TanStack AI (@tanstack/ai-mcp) | MCP Events, webhook delivery | A callback URL: your own public route, or one a local bridge creates | 1.0.0 | Library guide |
| OpenClaw | MCP Events (beta builds only), webhook delivery | Yes: a bare HTTPS origin, with no path, which a local bridge's callback URLs can't be | Not tested | None yet (openclaw#184684) |
| Codex | Polls, with wait_for_event and poll_events | No | codex-cli 0.154.0 (codex exec) | Poll clients guide |
Cursor's CLI (cursor-agent) | Polls, with wait_for_event and poll_events | No | 2026.11.05-86047df (cursor-agent -p) | Poll clients guide |
| Other MCP clients (the Cursor editor's agent, VS Code and others) | Polls, with wait_for_event and poll_events | No | Not tested | Polling |
Versions are the ones tested against the bridge, in October and November 2026. MCP Events support is experimental in Hermes Agent and in the three libraries. Codex and Cursor's CLI were tested non-interactively, and each needs the bridge's tools allowed before it can call them: see the guide.
Set up with a coding agent
The mcp-events-bridge skill walks a coding agent (Claude Code, Cursor, Codex and others that support Agent Skills) through setup, adding sources, connecting an agent and troubleshooting, with a success signal for each step:
npx skills add hookdeck/mcp-events-bridge
Then ask the agent to set up the bridge. It asks you for the credentials. The skill is also in the npm package, under skills/.
Quick start
You need:
- Node 22.12 or later.
- A Hookdeck account and a project for the bridge. From the project's settings (Secrets): the API key and the signing secret.
- The Hookdeck CLI, for running the bridge locally (and for
npm run e2e). - At least one source: a Resend or GitHub account, or any service that sends webhooks, including your own.
-
Create a project and install the bridge:
mkdir my-bridge && cd my-bridge npm init -y && npm pkg set type=module npm install @hookdeck/mcp-events-bridge printf 'node_modules/\n.env\n.hookdeck/\n' > .gitignore # .env and .hookdeck/ hold credentials -
Choose sources in
bridge.config.ts:import { defineConfig, env } from '@hookdeck/mcp-events-bridge'; import { github, resend } from '@hookdeck/mcp-events-bridge/sources'; export default defineConfig({ sources: [ resend({ apiKey: env('RESEND_API_KEY') }), // Only `setup` uses the token, so it's optional here: a deployed bridge runs without it. github({ token: env('GITHUB_TOKEN', { optional: true }), scope: { repos: ['your-org/your-repo'] } }), ], });Keep only the sources you use, or add others, such as Stripe or your own service: see Sources.
-
Add credentials to
.env:HOOKDECK_API_KEY=... HOOKDECK_SIGNING_SECRET=... RESEND_API_KEY=... # if you use Resend GITHUB_TOKEN=... # if you use GitHub -
Create the Event Gateway resources and the webhooks:
npx mcp-events-bridge setupThe first run generates an MCP secret: add it to
.envasBRIDGE_MCP_SECRET. Setup is safe to re-run, and updates the webhooks when you add sources or change events or repositories. A Resend or GitHub webhook deleted at the service is registered again. Removing a source or a repository deletes nothing: delete its webhook (and its Event Gateway source) yourself. Upgrading from 0.7, setup offers to migrate your subscriptions: seedocs/UPGRADING.md. -
Run the bridge:
npx mcp-events-bridge serveLocally,
servechecks that setup has run, and startshookdeck listenfor Event Gateway's notifications (which tell the bridge about failing callbacks) and for local agents; it restartslistenif it stops. Events don't pass through the bridge: Event Gateway delivers each one to its subscribers, so none are lost while the bridge is stopped. Once an agent has subscribed, send an email to your Resend address, or open an issue, and its delivery shows under the subscription's connection,mcp-sub-<id>, in the Event Gateway dashboard. -
Connect an agent: see Connect ChatGPT, Connect Claude Code, or Supported MCP clients for the others. ChatGPT has to reach the bridge's MCP endpoint, so deploy the bridge, or expose your local port with a tunnel such as
cloudflared tunnel --url http://127.0.0.1:8080and usehttps://<tunnel host>/mcp/<BRIDGE_MCP_SECRET>. Events don't need the tunnel: Event Gateway delivers them to ChatGPT directly.
Connect ChatGPT
With Developer mode on (ChatGPT Plus or above), go to Plugins, choose Add > Create MCP App, paste https://<your bridge>/mcp/<BRIDGE_MCP_SECRET>, and choose No Authentication. ChatGPT can't send an Authorization header (it offers only OAuth or no authentication), so it takes the secret in the URL. Then, in a Work chat, ask to be told about new events, for example emails from a particular sender. ChatGPT subscribes and sets up a monitoring task:

When an event arrives, the task runs with it, as in the screenshot at the top. A chat that's open shows it on its own, about a minute after the event arrives, even though ChatGPT answers the delivery within about 2 seconds (seen on 28 Oct, in an open, focused tab); if it doesn't appear, reload the page. Pausing the task unsubscribes it from the bridge, and resuming it subscribes again from now, with a new callback URL and no cursor, so events that arrive while it's paused aren't delivered or replayed (seen on 27 Oct). They're still in Event Gateway, so ChatGPT can list them with list_events.
ChatGPT keeps the list of events it can subscribe to from when you added the plugin. After you upgrade the bridge or add a source, refresh the plugin in Plugins, or ChatGPT can't subscribe to the new or renamed events (it may still list them, since that call goes to the bridge). Then ask it to subscribe again.
That URL is a credential: anyone with it can use the bridge. Keep it private (see Security and limitations).
Connect Claude Code
Claude Code doesn't support MCP Events yet, so it polls. Install the plugin, which asks for the bridge's MCP endpoint (https://<bridge>/mcp) and its secret (BRIDGE_MCP_SECRET), sent as an Authorization: Bearer header, and keeps both in secure storage:
/plugin install mcp-events-bridge --marketplace hookdeck/mcp-events-bridge
If you skip them (Esc), the plugin still installs. Set them later with /plugin configure mcp-events-bridge@hookdeck, then start a new session. An endpoint with the secret in it (/mcp/<BRIDGE_MCP_SECRET>), set before the secret field existed, still works.
Then, in any project, ask Claude to watch for events your bridge offers ("what events can the bridge give me?" lists them). For example, with the GitHub source set up for a repository, "watch <owner>/<repo> for new issues and comments"; with Resend, "tell me when an email arrives". The plugin keeps a watch list per project and runs watch for the whole session, so each event wakes Claude, between prompts too, and a new session first catches up on what it missed (up to 24 hours). Webhooks arrive at the bridge's Event Gateway sources and the plugin polls the bridge, so it works with a local bridge, which needs no public URL of its own.
Without the plugin, add the bridge as an MCP server and ask Claude to wait for events with the poll tools (see Polling). The Claude Code guide has both.
Sources
A source is where events come from: a service that sends webhooks. Each source in bridge.config.ts has an id (by default its type: resend, github, stripe), and its events are offered over MCP as {id}.{event}, where event is the service's own name for it: resend.email.received, github.issues, stripe.invoice.paid. So events/list says which source each event comes from, and two sources can offer the same kind of event (two Resend accounts, two trading servers) under different ids. Renaming an id renames its events, so agents need to subscribe again.
| Source | What it gives you | Who registers the webhook |
|---|---|---|
resend(), github() | Event descriptions, summaries and filters written for the service | setup, through the service's API (or you, in GitHub's manual mode) |
source({ type: 'stripe', ... }) and 160 other Event Gateway source types | Event Gateway verifies the service's own signatures; you name the events and where their type and id are | You, with the URL setup prints |
source({ type: 'webhook', ... }) | Any HTTP sender, such as a service you run, verified with HMAC, Standard Webhooks, Basic auth or an API key | You |
Resend
Inbound email. Every Resend account has a receiving domain (<id>.resend.app; Emails > Receiving), so no custom domain is needed.
- Options:
resend({ apiKey }). The API key needs permission to create webhooks. - Event:
email.received(offered asresend.email.received), with the sender, recipients, subject and Resend's email id. Read the full email with Resend's own API. - Filters:
from(recommended: it limits who can wake the agent) andto.
GitHub
One event per GitHub webhook type: issues, pull_request, push, and so on (26 types), offered as github.issues, github.pull_request, github.push.
- Events: by default issues, issue comments, pull requests, reviews, pushes, releases and workflow runs. Choose with GitHub's names,
events: ['issues', 'push', ...], or['*']for all. - Filters:
repository,actions(for example["opened"]) andsender. - Summary: repository, action, sender, title, number and URL for every type, plus a few fields for the common ones (labels, branches, merged, ref, commit count, workflow conclusion). Payloads aren't passed through; read details with GitHub's own tools.
Two ways to connect repositories:
| Mode | Options | Who adds the webhooks |
|---|---|---|
| Automatic | github({ token, scope: { repos: ['owner/name', ...] } }), or scope: { org: 'name' } for every repository in an organization | setup, with a fine-grained token that has the Webhooks (read and write) permission. For an organization's repositories, the token's resource owner must be the organization. scope: { org } creates one organization webhook, which needs an organization owner and the organization Webhooks permission |
| Manual | github({ webhookSecret }), no token | You: in each repository, Settings > Webhooks > Add webhook, with the Payload URL setup prints, content type application/json, and the same secret |
Services with an Event Gateway source type
Stripe, Slack, Shopify, Twilio, Linear, Clerk and 157 more: source({ type }) takes any Event Gateway source type that's verified with credentials you give it, and Event Gateway checks the service's own signatures, including those that sign a timestamp with the body, as Stripe and Slack do. For example, Stripe:
import { defineConfig, env } from '@hookdeck/mcp-events-bridge';
import { source } from '@hookdeck/mcp-events-bridge/sources';
export default defineConfig({
sources: [
source({
type: 'stripe', // the id defaults to the type, so events are stripe.<event>
secret: env('STRIPE_WEBHOOK_SECRET'), // the endpoint's signing secret, whsec_...
events: {
'invoice.paid': { description: 'A Stripe invoice was paid.' },
'customer.subscription.deleted': { description: 'A Stripe subscription ended.' },
},
eventType: { field: 'type' }, // where Stripe names the event
eventId: { field: 'id' }, // evt_..., stable across Stripe's retries
occurredAt: { field: 'created' },
}),
],
});
- Credentials: most types take
secret, the service's webhook signing secret. Others take their own fields:source({ type: 'postmark', username, password, ... }),source({ type: 'twitter', apiKey, ... }). The TypeScript types list each type's fields, and the config won't compile with a missing or unknown one. - Events: you name the events and say where the service puts the event type and id, with the same options as a webhook source (below). Presets that fill these in per service are planned.
- Not offered yet: source types with a choice of verification methods (GitLab, Grafana, Azure Event Grid, SendGrid Inbound Parse, Ordinal) and those configured without credentials (AWS SNS and a few others). Use a webhook source, or your own definition, for those.
- Registration handshakes: some services check a URL when you register it. Slack's Events API sends a
url_verificationchallenge, and Event Gateway'sslacksource answers it itself, so registering the URL in Slack needs no code. Awebhooksource answers every request with Event Gateway's standard response, not the challenge. Other services' handshakes haven't been checked. - Tested on 26 Oct 2026 with requests signed or authenticated as each service does (no accounts at the services): Stripe and Slack (a signature over a timestamp and the body) and Postmark (Basic auth). Correct ones reached a subscriber; wrong ones were rejected by Event Gateway (
VERIFICATION_FAILED). The other source types use the same path, but haven't each been tested.
Any HTTP sender: webhook sources
source({ type: 'webhook' }) takes webhooks from any HTTP sender: a service you run yourself, or one without an Event Gateway source type. For example, instead of an agent polling a trading server's orders every bar to see whether an order filled, the server sends a webhook when it fills, and the agent subscribes to fills.order.filled for the symbols it trades:
import { defineConfig, env } from '@hookdeck/mcp-events-bridge';
import { source } from '@hookdeck/mcp-events-bridge/sources';
export default defineConfig({
sources: [
source({
id: 'fills', // names the Event Gateway source: bridge-fills
type: 'webhook',
verification: { type: 'hmac', algorithm: 'sha256', encoding: 'hex', header: 'x-signature', secret: env('FILLS_WEBHOOK_SECRET') },
events: { 'order.filled': { description: 'An order on my trading server filled.' } },
eventId: { header: 'x-delivery-id' }, // stable across the sender's retries
occurredAt: { field: 'filled_at' },
filters: ['symbol', 'side'], // an agent subscribes with { "symbol": "AAPL" }
}),
],
});
The server signs each request's raw body with HMAC-SHA256 and the shared secret, hex-encoded in x-signature, and POSTs JSON such as { "symbol": "AAPL", "side": "buy", "quantity": 100, "price": 187.5, "filled_at": "2026-10-07T14:30:00Z" }.
verification(required forwebhook): Event Gateway verifies every request and rejects the rest, so they reach no subscriber. One of:{ type: 'hmac', algorithm, encoding, header, secret }: an HMAC of the raw body in a header.algorithmissha1,sha256orsha512;encodingishex,base64orbase64url. Asha256=prefix on the value is accepted. The key is the secret string as written (UTF-8), not decoded from hex or base64.{ type: 'standard-webhooks', secret }: Standard Webhooks signatures, usually with awhsec_...secret.{ type: 'basic-auth', username, password }or{ type: 'api-key', header, key }: a shared credential sent with every request. Prefer a signature: Event Gateway keeps request headers, so these credentials are stored with each request, and anyone who sees one can replay it. There's no unverified option: anyone with the URL could otherwise wake your agents with whatever they send.
These options work for every source(), whatever its type:
events: the sender's event names (offered as{id}.{name}, e.g.fills.order.filled), as a list or with a description each. Keep a description under about 400 characters: ChatGPT has been reported to leave out events with longer ones, andsetupandservewarn about them. With more than one,eventTypesays where the sender names the event,{ header }or{ field }(a dot path into the body), and each event'svalueis the sender's name for it (default: the event name). Requests for other values are ignored.eventId: the sender's id for an event, from{ header }or{ field }. It becomes the MCP event'seventId(and itswebhook-id), and Event Gateway drops repeats within an hour. Default: a hash of the JSON body (the first 32 hex characters of its SHA-256), so a sender's retry with the same body is dropped as a repeat, and two different events with identical bodies count as one. Set it if your sender has an id.occurredAt: a body field with an ISO 8601 or Unix time. Default: when Event Gateway received the request (for a live delivery, when Event Gateway built the event from it, moments later).- Data: the JSON body as sent, or only the top-level fields in
fields: [...]. Bodies must be JSON (anything else is skipped, and stays in Event Gateway), and the event at most 256 KiB. filters: top-level body fields subscribers can filter on, by exact match of value and type:{ "quantity": 100 }matches the number 100, not the string"100".
Adding a source from the command line
Credentials are env() references. A service usually gives you its secret only after you register the URL, so the bridge can create the source first:
-
Create the source and the config entry:
npx mcp-events-bridge sources add fills --type webhook --event order.filled --event-id-header x-delivery-id --filter symbol --filter side npx mcp-events-bridge sources add stripe --type stripe --event invoice.paid --event-type-field type --event-id-field id --occurred-at-field createdIt creates the Event Gateway source (
bridge-fills,bridge-stripe) and prints its URL, adds the credential variables to.env(FILLS_WEBHOOK_SECRET=,STRIPE_WEBHOOK_SECRET=: empty, and only if.envdoesn't have them), and prints thesource({...})entry to paste intosources.--write-configadds the entry tobridge.config.tsitself (creating the file if there isn't one), or prints it if the file isn't a shape it can edit safely (for example sources built conditionally). For--type webhook,--verificationchooseshmac(the default;--algorithm,--encodingand--headerset the rest),standard-webhooks,basic-authorapi-key;sources add --helplists every option. Re-running it reuses the source and adds nothing twice. -
Register the URL with the sender, and copy the secret it gives you (or, for your own server, generate one with
openssl rand -hex 32and give it to the server). -
Put the secret in
.env:FILLS_WEBHOOK_SECRET=.... -
Run
npx mcp-events-bridge setup. It sets the secret on the source. A new or changed secret can take up to about a minute to take effect at Event Gateway, which rejects requests signed with it until then.
Until the secret is set, the source verifies nothing, so serve refuses to start and no agent can subscribe to its events. Requests that arrive meanwhile are kept in Event Gateway. setup still sets up everything else, then exits with an error naming the variable (so a deploy script or CI notices).
Your own source definition
When the options above aren't enough (a payload that needs summarizing, filters on nested fields, registering the webhook through the service's API), write a defineSource({...}) definition: the Event Gateway source type (or a WEBHOOK source with the verification config in sourceConfig), a runtime that recognizes and summarizes each event, each event's subscribe filter, and optionally how to register the webhook. The runtime runs inside Event Gateway's transformation as well as in the bridge, so it must be self-contained: no imports, no API calls. See "Adding a source" and the built-in Resend and GitHub sources, and source().
Removed in 0.8.0
Sources were called providers before 0.6.0, and the old names were deprecated aliases until 0.8.0, which removes them: providers in the config (now sources), webhook() (now source({ type: 'webhook', ... })), defineProvider (now defineSource), @hookdeck/mcp-events-bridge/providers (now /sources), providers add webhook (now sources add), and the list_providers tool (now list_sources). providers in the config and providers add fail with a message naming the replacement; the removed exports no longer import. See docs/UPGRADING.md.
Deploy to Fly.io
Any host that runs Node works; Fly.io is the reference. The bridge needs no volume, since Event Gateway is the store.
Add a Dockerfile to your project:
FROM node:22-slim
WORKDIR /app
ENV NODE_ENV=production
COPY package.json package-lock.json ./
RUN npm ci --omit=dev
COPY bridge.config.ts ./
EXPOSE 8080
CMD ["npx", "mcp-events-bridge", "serve"]
Then:
fly launch --no-deploy # creates fly.toml: set internal_port = 8080, and BRIDGE_DEPLOYMENT = 'fly' under [env]
fly secrets set HOOKDECK_API_KEY=... HOOKDECK_SIGNING_SECRET=... RESEND_API_KEY=... BRIDGE_MCP_SECRET=...
BRIDGE_DEPLOYMENT=fly BRIDGE_INBOUND=http BRIDGE_PUBLIC_URL=https://<app>.fly.dev npx mcp-events-bridge setup
fly deploy
On Fly.io, the bridge receives Event Gateway's notifications over HTTP at its public URL instead of through the Hookdeck CLI, using the fly resources that setup created. Only setup needs GITHUB_TOKEN, so it doesn't have to be a Fly secret; in GitHub's manual mode, set GITHUB_WEBHOOK_SECRET as a Fly secret too, and likewise each source()'s credentials. The Dockerfile copies only bridge.config.ts: copy any other files your config imports, such as your own source definitions.
When an upgrade needs a migration (from 0.7 to 0.8, for example), serve doesn't start without a terminal to ask in. Run setup with the deployment's settings (as above) before fly deploy, or end the Dockerfile with CMD ["npx", "mcp-events-bridge", "serve", "--migrate"] to migrate without asking (see docs/UPGRADING.md).
Use a separate Hookdeck project for each environment you want isolated: deployments in one project share the sources and the subscriptions. An optional namespace for sharing a project is proposed in #13.
What setup creates
In the Event Gateway dashboard:
bridge-resend source: Resend's webhooks, verified with Resend's signatures
mcp-sub-sub_3f9a... one connection per subscription, created when an agent subscribes:
transformation bridge-resend-envelope, filter, dedupe, retry,
to the agent's callback URL, signed with its secret
bridge-hookdeck-notifications source: Event Gateway's issue notifications
bridge-notifications-local to the bridge (one connection per deployment)
bridge-<source id>(herebridge-resend) is the source's Event Gateway source, the URL its webhooks are registered with. Setup also writes its transformation,bridge-<source id>-envelope, which turns each request into an MCP Event; every subscription to the source's events uses it.mcp-sub-<id>is one subscription: a connection on the source with the transformation, a filter for the event name and the subscription's arguments, dedupe onwebhook-idand retries, and a destination at the subscriber's callback URL that signs every attempt with the subscriber's secret. The bridge creates it when an agent subscribes, and deletes it when the subscription ends.bridge-hookdeck-notificationsreceives Event Gateway's issue notifications and forwards them to each deployment, so the bridge hears about failing callbacks and reports them to subscribers.bridge-replay(created by the first replay) is a Publish API source: while a subscription made with a cursor catches up, a connection from it,bridge-replay-<subscription id>, delivers the replayed events to the subscription's destination, and the bridge deletes it when they're delivered.
Locally (CLI inbound), setup also logs the Hookdeck CLI in to the bridge's project in .hookdeck/config.toml (gitignore it: it holds a key), so hookdeck commands run in the bridge's directory use that project rather than your global login.
Configuration
The bridge
Every deployment needs these, whichever sources it uses.
| Variable | Required | Purpose |
|---|---|---|
HOOKDECK_API_KEY | Yes | Project API key, for the Event Gateway API and the Publish API (which replay uses) |
HOOKDECK_SIGNING_SECRET | Yes | Verifies Event Gateway's signature on the notifications it sends the bridge |
BRIDGE_MCP_SECRET | To run serve | The MCP endpoint's secret: sent as Authorization: Bearer <BRIDGE_MCP_SECRET> to /mcp, or in the URL (/mcp/<BRIDGE_MCP_SECRET>) by clients that can't send a header, such as ChatGPT. setup generates one, and saves it in .env for a local bridge |
BRIDGE_MCP_SECRET_URL | No | false turns the URL form (/mcp/<BRIDGE_MCP_SECRET>) off, leaving the header; for a bridge no ChatGPT connects to. Default true |
BRIDGE_INBOUND | No | How Event Gateway's notifications reach the bridge: cli (through hookdeck listen; also what offers callback URLs to local agents) or http (a public URL). Default: http on Fly.io, cli elsewhere |
BRIDGE_PUBLIC_URL | For http inbound off Fly.io | The bridge's public URL. Default on Fly.io: https://$FLY_APP_NAME.fly.dev |
BRIDGE_PORT | No | Listener port (default: PORT, else 8080) |
BRIDGE_DEPLOYMENT | No | Names this bridge's Event Gateway resources: its notifications connection becomes bridge-notifications-<deployment>. It doesn't keep bridges in one Hookdeck project apart: they share the sources, subscriptions and callback URLs, so give each bridge its own project (#13). Default: local with cli inbound, public with http inbound (deployment in bridge.config.ts takes precedence) |
BRIDGE_HOOKDECK_CLI_CONFIG | No | Where setup and serve log the Hookdeck CLI in to the bridge's project, for hookdeck listen and any hookdeck command run in that directory (default .hookdeck/config.toml); the inbound recovery watermark is kept next to it |
defineConfig also takes inbound, publicUrl, port and hookdeck directly, and subscriptions for subscription lifetimes. Run npx mcp-events-bridge for the commands and flags.
Sources
Set only what the sources in your bridge.config.ts need. The names are the ones the examples pass to env(); use your own if you prefer.
Resend
| Variable | Required | Purpose |
|---|---|---|
RESEND_API_KEY | Yes | API key that can create webhooks. setup registers the webhook with it, and the example config requires it wherever the bridge runs |
GitHub
| Variable | Required | Purpose |
|---|---|---|
GITHUB_TOKEN | In automatic mode | Fine-grained token with the Webhooks (read and write) permission, or the GitHub CLI's (gh auth token, scope repo). Only setup uses it |
GITHUB_WEBHOOK_SECRET | In manual mode | The secret on the webhooks you add (at least 16 characters). Needed wherever the bridge runs |
source()
Each source()'s credentials, named as its env() references name them. sources add <id> uses these names:
| Variable | Required | Purpose |
|---|---|---|
<ID>_WEBHOOK_SECRET | For a webhook source with hmac or standard-webhooks, and for most source types (secret) | The signing secret the sender uses |
<ID>_WEBHOOK_API_KEY | For api-key | The key the sender sends in its header |
<ID>_WEBHOOK_USERNAME, <ID>_WEBHOOK_PASSWORD | For basic-auth | The sender's Basic auth credentials |
<ID>_<FIELD> | For a source type's other credential fields | For example POSTMARK_USERNAME for source({ type: 'postmark', username }) |
<ID> is the source id, upper-cased, with other characters as _ (fills gives FILLS_WEBHOOK_SECRET). Needed wherever the bridge runs: setup sets them on the Event Gateway source, and serve refuses to start without them.
MCP surface
events/list,events/subscribe,events/unsubscribe, with webhook delivery, andevents/poll, for poll delivery. Event names are{id}.{event}(see Sources).poll_events(name, arguments?, cursor?, maxAgeMs?, maxEvents?)andwait_for_event(name, arguments?, cursor?, timeoutMs?): the same polling as tools, for MCP clients without MCP Events support (see Polling).get_event(name, eventId)andlist_events(name?, since?, limit?): events that happened, read from Event Gateway (events/listis the catalog of events you can subscribe to).get_eventtakes the event's name as well as its id, since an id is the service's own and two sources can share one.list_sources(): configured sources, each with its type, its event types (events: each one'sname,descriptionandinputSchema, the arguments it takes, asevents/listdescribes them, for clients that can't callevents/list), and its webhook subscriptions (subscriptions; poll subscriptions are held by the client, so they aren't counted).create_callback_url(agent, name, port?, path?, secret?)andlist_callback_urls(agent): public callback URLs for agents on the same machine as a local bridge (see Local agents). Calling again with the sameagent,nameand secret returns the existing URL; a different secret, port or path for that name is an error. Not offered by a deployed bridge.- Every tool is annotated
readOnlyHint: trueexceptcreate_callback_url, which isidempotentHint: trueanddestructiveHint: false.list_sourcesandlist_callback_urlsare alsoopenWorldHint: false: they answer from the bridge's own state.
Polling
For MCP clients that can't receive webhooks, or don't support MCP Events yet. A client that implements MCP Events poll mode calls events/poll; any other MCP client, such as Claude Code, Codex or Cursor, calls the poll_events and wait_for_event tools, which take the same arguments and cursor:
claude mcp add --transport http events-bridge https://<bridge>/mcp --header "Authorization: Bearer <BRIDGE_MCP_SECRET>"
Any MCP client that can send a header connects the same way: the /mcp endpoint, with BRIDGE_MCP_SECRET as a bearer token.
Then ask the agent to wait for an event (Claude Code: see the guide; Codex and Cursor's CLI: see the poll clients guide), for example "wait for fills.order.filled for AAPL and tell me about each fill". It calls wait_for_event, which returns as soon as there are events (or after up to 50 seconds with none), and calls it again with the cursor it returned.

- No public URL of your own: services send webhooks to the public URL of the bridge's Event Gateway source, and each poll reads them from Event Gateway, so it works from a laptop or behind a NAT, with a deployed or a local bridge.
- Start from now: a first call without a cursor returns no events, only a cursor. For events that already happened, use
list_events. - At least once: events can repeat, so dedupe by
eventId.truncated: truemeans events were skipped (maxAgeMs, or older than Event Gateway keeps). - Replay: every delivery and every subscribe response includes a
cursor, a position in Event Gateway's history of the source's requests. Subscribe again with the latest one, after an unsubscribe, an expiry or downtime, and the bridge delivers what you missed, alongside live events, up to Event Gateway's retention (3 days on the Developer plan). Refreshing a live subscription with it changes nothing. Poll mode uses the same cursors. - Latency: an event reaches a poller about 2 seconds after Event Gateway receives it, sometimes up to 15. Polls share one listing of Event Gateway's requests, at most every 2 seconds, so the API's rate limit (240 requests a minute per key) is shared, however many agents poll, as long as each polls at the
nextPollMsit's given (wait_for_eventdoes). When the limit runs low,nextPollMsgrows to 30 seconds.
In the background: watch
mcp-events-bridge watch polls a running bridge from now on and prints each event on its own line, as JSON ({ eventId, name, timestamp, data }), until stopped:
npx @hookdeck/mcp-events-bridge watch github.issues github.issue_comment --filter repository=<owner>/<repo>
Documentation truncated — see the full README on GitHub.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
