Back to Browse

Hooksense MCP Server

by Ozers
Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Webhook & callback layer for AI agents: create a URL, wait_for_callback, and verify over MCP.

About

Webhook & callback layer for AI agents: create a URL, wait_for_callback, and verify over MCP.

Security Report

6.2
Moderate6.2Moderate Risk

This MCP server is well-structured with proper authentication, input validation, and secure credential handling. The API token is correctly sourced from environment variables and never logged or hardcoded. The server appropriately validates input (URL encoding, timeout bounds, limit clamping) and returns errors safely. Permissions align well with the server's purpose as a webhook/callback management tool. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

3 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

API token from https://hooksense.com/account/tokensRequired

Environment variable: HOOKSENSE_TOKEN

Override the API base URL (self-hosted / staging). Defaults to https://hooksense.comOptional

Environment variable: HOOKSENSE_API

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-ozers-hooksense": {
      "env": {
        "HOOKSENSE_API": "your-hooksense-api-here",
        "HOOKSENSE_TOKEN": "your-hooksense-token-here"
      },
      "args": [
        "-y",
        "@hooksense/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@hooksense/mcp

Model Context Protocol server for HookSense — the webhook & callback layer for AI agents. Lets Claude Desktop, Cursor, Claude Code, Continue, and any MCP client create a callback URL, wait for the result instead of polling, and verify its signature — all from the agent session.

Why

Agents that kick off async work — a deploy, a render, a human-in-the-loop approval, a long tool call, another agent — need the result back without burning context on polling loops. With this server the agent creates a callback endpoint, hands the URL to the job, then calls wait_for_callback and is woken the instant the webhook lands — signature-verified and decrypted. Stop polling for async results; await them.

Setup

  1. Get an API token at https://hooksense.com/account/tokens
  2. Configure your MCP client (examples below)

Claude Desktop / Claude Code

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "hooksense": {
      "command": "npx",
      "args": ["-y", "@hooksense/mcp"],
      "env": {
        "HOOKSENSE_TOKEN": "hsk_your_token_here"
      }
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "hooksense": {
      "command": "npx",
      "args": ["-y", "@hooksense/mcp"],
      "env": {
        "HOOKSENSE_TOKEN": "hsk_your_token_here"
      }
    }
  }
}

Hello callback (60 seconds)

Once configured, ask your agent:

  1. Create — "Create a callback endpoint." → the agent calls create_callback_endpoint and gets back a callbackUrl like https://hooksense.com/w/ab12cd.
  2. Fire — point any job at that URL (or just curl -X POST <callbackUrl> -d '{"status":"done"}' from another terminal).
  3. Await — "Wait for the callback." → the agent calls wait_for_callback and blocks until the webhook lands, then receives { status: "received", request: { body, headers, … } }.
  4. Verify (optional) — set a webhook secret on the endpoint, then "Verify the signature." → verify_signature confirms the payload is authentic before the agent acts on it.

No polling, no dashboards, no copy-paste.

Tools

ToolDescription
create_callback_endpointCreate a callback endpoint; returns the callbackUrl
wait_for_callbackBlock until the next callback lands, then return it (timeoutMs, after cursor)
list_callbacksList callbacks received by an endpoint (summary view)
get_callback_payloadFetch one callback with full headers + decrypted body
verify_signatureTiming-safe HMAC check against the endpoint's configured secret
replay_callbackPOST a received callback to any target URL
list_endpointsList your endpoints
get_endpointGet one endpoint's full settings

Environment

VariableDefaultNotes
HOOKSENSE_TOKEN(required)API token from /account/tokens
HOOKSENSE_APIhttps://hooksense.comOverride for self-hosted/staging

Example agent prompts

"Create a callback endpoint, use it as the webhook for my Replicate prediction, and wait for the result — then summarize the output."

"Open a callback URL, give it to the approval step, and block until a human approves before continuing."

"Wait for the next Stripe callback on payments-prod, verify its signature, and tell me the amount."

License

MIT

Reviews

No reviews yet

Be the first to review this server!

Hooksense MCP Server - Webhook & callback layer for AI agents: create a URL, | MCP Marketplace