Available Tools
The Hooklistener MCP server exposes 67 tools, grouped into seven toolsets.
Toolsets
To keep your assistant's context small, each session lists only the toolsets your organization uses:
| Toolset | Listed when |
|---|---|
webhooks | Always |
rules | Your organization has a mock response rule, request-thread rule, or endpoint alert |
cases | Your organization has a saved replay case |
realtime | Your organization has a real-time endpoint |
email | Your organization has an email inbox |
monitors | Your organization has an uptime monitor |
tunnels | Your organization has an active tunnel investigation case |
Each toolset's entry tool (create_response_rule, save_request_case, create_realtime_endpoint, create_inbox, create_monitor) is always listed, so your assistant can start using any product. After it creates the first resource of that kind, reconnect the MCP client to list the rest of that toolset.
To choose toolsets yourself, send the x-hooklistener-toolsets header with a comma-separated list (for example email,monitors) or all. webhooks is always included. See Setup.
Toolsets only change which tools are listed. Every tool stays callable within your grant's scope.
Webhooks
Listed in every session.
Debug endpoints
| Tool | Description |
|---|---|
list_endpoints | List debug endpoints in the current organization |
get_endpoint | Get endpoint details and webhook URL |
create_endpoint | Create a debug endpoint |
update_endpoint | Update endpoint name, status, or default response |
delete_endpoint | Preview or permanently delete an endpoint |
Captured requests
| Tool | Description |
|---|---|
list_requests | List captured requests for an endpoint, or search across the organization with fuzzy text and event, status, or time filters |
get_request | Get full request details, including headers and body |
wait_for_request | Wait for a matching request, check existing traffic, or resume from a cursor |
delete_request | Preview or permanently delete a captured request |
diagnose_request | Summarize response, forwarding, body, and mock-rule issues for a request |
investigate_request_retries | Correlate repeated deliveries and compare their payloads, timing, and outcomes |
verify_request_signature | Verify a Stripe, GitHub, or Slack signature with a stored secret |
validate_request | Validate a captured JSON body against a JSON Schema |
diff_requests | Deterministically compare two requests, including across endpoints |
compare_requests | Compare 2–5 requests with AI-assisted analysis |
replay_request | Preview and replay a request, optionally edited or re-signed, to a URL or active CLI listener |
list_request_forwards | Page through forward and replay receipts for a request |
Secrets and async tasks
Secrets are encrypted organization-scoped values that tools can reference, for example to verify or re-sign webhooks.
| Tool | Description |
|---|---|
list_secrets | List secret names and metadata; values are never returned |
create_secret | Create an encrypted secret |
delete_secret | Preview or permanently delete a secret |
cancel_task | Stop a queued or running asynchronous task |
Rules
Conditional mock responses, request threads, and alerts.
| Tool | Description |
|---|---|
create_response_rule | Create or preview a conditional response rule (always listed) |
update_response_rule | Update, enable, disable, or preview a response rule |
delete_response_rule | Preview or permanently delete a response rule |
test_response_rules | Evaluate an endpoint's rules against a synthetic request |
list_request_threads | List correlation threads for an endpoint |
list_thread_requests | List the requests in one thread |
set_thread_rule | Create or update an endpoint's thread correlation rule |
delete_thread_rule | Preview or delete a thread rule |
set_endpoint_alerts | Turn request alerts on or off for an endpoint |
list_endpoint_anomalies | List anomalies detected in an endpoint's traffic |
Cases
Replay cases save captured requests as repeatable integration tests with optional response assertions.
| Tool | Description |
|---|---|
save_request_case | Save a captured request as a replay case (always listed) |
list_endpoint_cases | List saved cases for an endpoint |
update_request_case | Update case metadata, replay overrides, or assertions |
delete_request_case | Preview or permanently delete a saved case |
replay_request_case | Replay one saved case |
list_endpoint_case_suites | List named suites for an endpoint |
create_endpoint_case_suite | Create a named case suite |
update_case_suite | Update a suite name or description |
delete_case_suite | Preview or permanently delete a suite |
add_case_to_suite | Add a saved case to a suite |
remove_case_from_suite | Remove a saved case from a suite |
run_endpoint_cases | Run all endpoint cases, or one suite |
list_endpoint_case_runs | List case run reports for an endpoint |
get_case_run | Get a case run report |
wait_for_case_run | Wait for a case run to complete |
Common replay case fields:
| Field | Used by | Description |
|---|---|---|
endpoint_id | List/save/run tools | Debug endpoint ID |
request_id | save_request_case | Captured request ID to save |
case_id | Case replay/update/delete tools | Saved request case ID |
case_suite_id | Suite run/report tools | Optional suite ID |
target_url | Replay/run tools | Destination URL |
target_id | Replay/run tools | Saved endpoint replay target ID |
target | Replay/run tools | Set to cli to use an active CLI listener |
target_name | run_endpoint_cases | Optional name to save for a custom URL |
expected_status_code | Save/update tools | Response status assertion |
expected_json_body_subset_json | Save/update tools | JSON object expected in the replay response body |
wait | run_endpoint_cases | Wait for queued forwards and return aggregate results |
timeout_ms | Run/wait tools | Maximum wait time, capped at 120 seconds |
Realtime
WebSocket, Socket.IO, MQTT-over-WebSocket, and SSE debugging.
| Tool | Description |
|---|---|
create_realtime_endpoint | Create a real-time debug endpoint (always listed) |
list_realtime_endpoints | List real-time endpoints with connection URLs and live session counts |
list_realtime_sessions | List open and closed client sessions for an endpoint |
get_realtime_messages | Read a session's messages, or search across an endpoint's sessions |
send_realtime_message | Send a message to one client, or broadcast to every open session |
wait_for_realtime_message | Wait for a client message or a new session |
manage_realtime_rules | List, create, update, or delete auto-responder rules |
Email
| Tool | Description |
|---|---|
create_inbox | Create a test inbox (always listed) |
list_inboxes | List test email inboxes |
list_emails | List captured emails for an inbox |
get_email | Get a captured email |
wait_for_email | Wait for a matching email to arrive |
Monitors
| Tool | Description |
|---|---|
create_monitor | Create an uptime monitor (always listed) |
list_monitors | List uptime monitors |
get_monitor_status | Get uptime, status, and recent checks for a monitor |
update_monitor | Update monitor configuration |
delete_monitor | Preview or permanently delete a monitor |
Tunnels
Tunnel investigation tools require a finite grant created through the authenticated Hooklistener API. MCP cannot create or broaden grants.
| Tool | Description |
|---|---|
plan_tunnel_action | Plan a tunnel action without changing state |
read_tunnel_capture_sensitive | Read sensitive capture evidence with an exact scoped grant |
add_tunnel_case_capture | Add a capture to a case after explicit confirmation |
replay_tunnel_capture | Replay a capture after explicit confirmation |
Removed tools
search_requests: uselist_requestswithqueryor an event, status, or time filter.forward_request: usereplay_requestwithtarget_url.- Datastore and endpoint action tools are no longer available. Use replay cases for repeatable webhook integration testing, and secrets for encrypted configuration values.