MCP Tools Reference

Complete reference for all 149 tools exposed by the Hookbase MCP server, across both the local (stdio) and remote HTTP transports. Parameter tables are generated directly from each tool's input schema.

Sources

hookbase_list_sources

List all webhook sources in the organization. A source is an ingest endpoint that receives incoming webhooks from a provider like GitHub or Stripe and records them as events — it forwards nothing on its own until hookbase_create_route connects it to a destination. Returns summary fields including eventCount and routeCount; use hookbase_get_source for one source's full configuration.

Parameters: None

hookbase_get_source

Get full configuration for a single source, including its allowed HTTP methods, rate limit, and signature-verification settings. The signing secret itself is never returned here — only hasSigningSecret and signingSecretLast4; use hookbase_reveal_source_secret to read the full value. awaitingSigningSecret=true means no secret is stored and only the vendor can issue one (e.g. Stripe or Shopify when the create omitted it, or Asana/Notion, which issue it only after the ingest URL is registered), so events are accepted but not verified until it is set with hookbase_update_source signing_secret (or, for Notion, adopted via hookbase_adopt_source_pending_verification). verifiesWithoutSecret=true means the provider publishes a key Hookbase already has (wise, aws-sns), so events are verified with no secret.

hookbase_create_source

Create a new webhook source. Sources receive incoming webhooks and can be connected to destinations via routes. Before creating one for a named vendor, call hookbase_get_provider to find the right provider value and its secretSource: if it is "provider" or "public_key", ask the user for the vendor-issued secret/key and pass it as signing_secret (for public keys and format-checked vendor keys such as Standard Webhooks/svix the API rejects the create without it; for the rest the source is created with no secret and awaitingSigningSecret=true, so events are not verified until it is set); if it is "operator", omit signing_secret and give the user the returned signingSecret to paste into the vendor — it is shown only here (hookbase_reveal_source_secret can read it later). The response also carries ingestUrl (the URL to register with the vendor), verifyToken for WhatsApp/Meta, and awaitingSigningSecret=true when no secret was stored for a vendor-issued provider (including Asana and Notion, which issue it only after the URL is registered).

hookbase_update_source

Update an existing source's configuration — name, provider, signing secret, verify token, signature enforcement, rate limit, transient mode, or allowed methods. Only the fields you provide are changed; omitted fields keep their current value. Switching to a provider whose secret the vendor issues requires signing_secret in the same update. Turning on reject_invalid_signatures immediately starts rejecting webhooks that fail verification; turning on transient_mode stops new payloads from being stored at rest but does not retroactively delete payloads already stored. To have Hookbase generate a fresh secret use hookbase_rotate_source_secret instead. Returns only a confirmation — call hookbase_get_source (or hookbase_get_source_verify_token) to read the result.

hookbase_delete_source

Delete a webhook source. Cascades to delete its routes, their deliveries, and every event ever ingested through this source — event history is not recoverable afterward.

hookbase_rotate_source_secret

Have Hookbase generate a new signing secret for a source. Returns the new secret (save it securely) - unlike endpoint secret rotation, there is no grace period: the old secret stops verifying signatures immediately, so update every sender using it before rotating. Only works for providers whose secret Hookbase generates (secretSource "operator", or custom/no provider). The API returns 400 for built-in-key providers (wise, wise-sandbox, aws-sns: nothing to rotate), public-key providers (paste the vendor's new key via hookbase_update_source signing_secret), vendor-issued secrets such as Standard Webhooks/svix/clerk/resend, gitlab-signing-token or airtable (regenerate it at the vendor, then set it with hookbase_update_source), and every other provider whose secret the vendor issues (secretSource "provider", e.g. stripe, shopify, slack, twilio, and asana/notion after registration).

hookbase_reveal_source_secret

Reveal the full signing secret currently stored on a source (hookbase_get_source only shows the last 4 characters). Use it when the user needs to paste a Hookbase-generated secret into the vendor after the create response is gone. Returns 404 when the source has no secret (built-in-key providers, or one still awaiting its secret). Requires an API key with write scope and a member+ role.

hookbase_get_source_verify_token

Read the verify token of a WhatsApp/Meta source — the value the user enters in Meta's "Verify token" field when registering the ingest URL. Returns 400 for providers that have no verify token. Requires an API key with write scope and a member+ role.

hookbase_rotate_source_verify_token

Generate a new verify token for a WhatsApp/Meta source and return it. The old token stops answering Meta's registration check immediately, so the user must enter the new one in Meta before re-verifying the URL. Already-registered webhooks keep flowing (the token is only checked at registration). Returns 400 for providers that have no verify token.

hookbase_get_source_pending_verification

Show the verification token a vendor delivered to the source's ingest URL during registration and Hookbase parked instead of trusting (currently Notion, whose subscription sends a verification_token that is also its signing secret). Returns , or a 404 error when nothing is waiting. The user pastes the token into the vendor's Verify form; once the vendor shows the subscription as verified, call hookbase_adopt_source_pending_verification.

hookbase_adopt_source_pending_verification

Make the parked verification token (see hookbase_get_source_pending_verification) this source's signing secret, replacing any existing one, and discard the pending copy. The token arrived unauthenticated, so only adopt it after the user confirms the vendor accepted it (e.g. Notion shows the subscription as verified). Returns a 404 error when no token is waiting.

Providers

hookbase_list_providers

List the webhook providers in Hookbase's catalog (Stripe, GitHub, Shopify, WhatsApp, ...), optionally filtered by category or a search term matched against name, description and category. Each entry gives the catalog id, the hookbaseProvider value to pass as provider to hookbase_create_source (it can differ from the id — several catalog entries map to "custom"), and a signature-verification summary. signatureVerification.secretSource says who produces the credential a source stores: "provider" — the vendor issues it; ask the user to copy it from the vendor (see secretInstruction) and pass it as signing_secret to hookbase_create_source, which rejects the create without it for format-checked vendor keys; for the rest a create without it stores no secret (awaitingSigningSecret=true, events unverified until it is set). "public_key" — the vendor's public verification key; ask the user to paste it. "operator" — the vendor only has an input field; omit signing_secret, Hookbase generates one, and the user pastes the returned signingSecret into the vendor. "built_in" — the vendor publishes one key Hookbase already has; send no secret (the API rejects one) — events are still verified. "none" — the vendor does not sign (or Hookbase cannot verify it); no secret needed. secretAfterRegistration=true means the vendor issues its secret only after the ingest URL is registered: create the source without one, then set it later (Notion's token is parked — see hookbase_get_source_pending_verification). Call hookbase_get_provider for the full instructions before asking the user for a secret.

hookbase_get_provider

Get one catalog provider's full setup detail: hookbaseProvider (the provider value for hookbase_create_source), signatureVerification (algorithm, headerName, kind, secretSource, secretLabel — the vendor's own name for the credential, secretInstruction — where the user copies it from or pastes it into, secretPlaceholder, secretFormat, secretAfterRegistration, and verifyToken for Meta/WhatsApp, whose create response returns a verify token the user enters in Meta), setupGuide steps, docsUrl, ipRanges, and the event type names. signatureVerification.secretSource says who produces the credential a source stores: "provider" — the vendor issues it; ask the user to copy it from the vendor (see secretInstruction) and pass it as signing_secret to hookbase_create_source, which rejects the create without it for format-checked vendor keys; for the rest a create without it stores no secret (awaitingSigningSecret=true, events unverified until it is set). "public_key" — the vendor's public verification key; ask the user to paste it. "operator" — the vendor only has an input field; omit signing_secret, Hookbase generates one, and the user pastes the returned signingSecret into the vendor. "built_in" — the vendor publishes one key Hookbase already has; send no secret (the API rejects one) — events are still verified. "none" — the vendor does not sign (or Hookbase cannot verify it); no secret needed. secretAfterRegistration=true means the vendor issues its secret only after the ingest URL is registered: create the source without one, then set it later (Notion's token is parked — see hookbase_get_source_pending_verification).

Destinations

hookbase_list_destinations

List all webhook destinations in the organization. Destinations are endpoints where webhooks are forwarded to.

Parameters: None

hookbase_get_destination

Get detailed information about a specific destination, including authentication configuration.

hookbase_create_destination

Create a new webhook destination. Destinations can be HTTP endpoints or warehouse storage (S3, R2, GCS, Azure Blob).

hookbase_update_destination

Update an existing destination configuration.

hookbase_delete_destination

Delete a destination. This will also delete all associated routes.

hookbase_test_destination

Test connectivity to a destination by sending a test request. Returns response status and timing.

Routes

hookbase_list_routes

List all routes in the organization. Routes connect sources to destinations and define how webhooks are processed.

Parameters: None

hookbase_get_route

Get detailed information about a specific route, including filter and transform configuration.

hookbase_create_route

Create a new route connecting a source to a destination. Optionally add filters to control which webhooks are forwarded.

hookbase_update_route

Update an existing route configuration.

hookbase_delete_route

Delete a route.

Events

hookbase_list_events

Query webhook events with optional filters. Events represent incoming webhooks received by sources.

hookbase_tail_events

Poll for events newer than a previous call, for lightweight monitoring. Not a live stream (MCP tool calls are request/response, not push) - call it repeatedly, each time passing the newestReceivedAt from the prior response as since. Returns the most recent limit matching events at/after since, newest first; if more than limit new events arrived between polls, older ones within that window are omitted - poll more often or raise limit to avoid gaps. Omit since on the first call to get a starting snapshot.

hookbase_get_event

Get detailed information about a specific event, including the full payload and all delivery attempts.

hookbase_get_event_debug

Generate a cURL command to replay an event for debugging purposes.

Deliveries

hookbase_list_deliveries

Query webhook deliveries with optional filters. Deliveries represent attempts to forward webhooks to destinations.

hookbase_get_delivery

Get detailed information about a specific delivery, including the response body and error details.

hookbase_replay_delivery

Retry a failed delivery. This will re-send the original webhook payload to the destination.

hookbase_bulk_replay

Retry multiple failed deliveries at once. Useful for recovering from destination outages.

hookbase_replay_with_edit

Replay a failed delivery with one-shot overrides. Use this to recover from a broken transform, a wrong destination URL, or a missing header without permanently changing the route. Set persist_transform=true to save the new transform code to the route after a successful replay. Always replay one delivery first as a probe before bulk replays — the response includes the new delivery ID so you can poll its status.

hookbase_list_delivery_clusters

List recent failure clusters — distinct failure patterns aggregated by fingerprint (route + destination + status + normalized error). Use this as the entry point when investigating an incident: one cluster row = one root cause, regardless of how many deliveries failed. Returns up to 100 clusters in the chosen time window.

hookbase_replay_cluster

Replay every failed delivery matching a cluster fingerprint with one round trip. Same override shape as hookbase_replay_with_edit. Use this after diagnosing a cluster with hookbase_list_delivery_clusters and probing the fix on a single delivery with hookbase_replay_with_edit. persist_transform requires every delivery in the cluster to share a single route.

Tunnels

hookbase_list_tunnels

List all localhost tunnels in the organization. Tunnels allow forwarding webhooks to local development servers.

Parameters: None

hookbase_create_tunnel

Create a new localhost tunnel. The tunnel can be connected using the Hookbase CLI to forward webhooks to your local server.

hookbase_get_tunnel_status

Check the connection status of a tunnel. Shows whether the tunnel is connected and live statistics.

hookbase_delete_tunnel

Delete a localhost tunnel.

Cron Jobs

hookbase_list_cron_jobs

List all scheduled cron jobs in the organization. Cron jobs make HTTP requests on a schedule.

Parameters: None

hookbase_create_cron_job

Create a new scheduled cron job that makes HTTP requests on a schedule.

hookbase_get_cron_job

Get full details for a single cron job, including schedule, target URL, headers/payload, and last/next run times.

hookbase_update_cron_job

Update a cron job. Pass only the fields you want to change. Changing cron_expression or timezone recalculates next run time.

hookbase_delete_cron_job

Delete a scheduled cron job.

hookbase_trigger_cron

Manually trigger a cron job immediately, regardless of its schedule.

Cron Groups

hookbase_list_cron_groups

List cron job groups. Groups organize cron jobs in the dashboard and can be referenced via group_id when creating/updating jobs.

Parameters: None

hookbase_get_cron_group

Get a single cron group by ID or slug.

hookbase_create_cron_group

Create a cron group. Slug is derived from the name. New groups are appended to the end of the sort order.

hookbase_update_cron_group

Update a cron group's name, description, sort order, or collapsed state.

hookbase_delete_cron_group

Delete a cron group. Jobs in this group are not deleted; their group_id is set to null.

API Pollers

hookbase_list_api_pollers

List all API pollers in the organization. Pollers make scheduled HTTP requests to a third-party API and re-emit new/changed items as inbound events.

Parameters: None

hookbase_get_api_poller

Get full details for a single API poller, including its schedule, target URL, response parsing config, and last-run status.

hookbase_create_api_poller

Create a new API poller. On each scheduled run it makes an HTTP request to url, extracts a list of items from the JSON response (response_path), and emits each new item as an event on source_id. Items are deduped across runs by id_field.

hookbase_update_api_poller

Update an API poller. Pass only the fields you want to change.

hookbase_delete_api_poller

Delete an API poller. Does not affect the source it fed or events it already emitted.

hookbase_trigger_api_poller

Manually run an API poller immediately, regardless of its schedule. Makes a real HTTP request to the poller's target URL and emits any new items as events; never delays or skips the next scheduled run.

Analytics

hookbase_get_analytics

Get dashboard analytics and metrics for the organization, including event counts, delivery success rates, and top sources/destinations.

Filters

hookbase_list_filters

List filter definitions in the organization. Filters are reusable condition sets attached to routes to gate which events are delivered.

hookbase_get_filter

Get a filter definition including its conditions and AND/OR logic.

hookbase_create_filter

Create a reusable filter that can be attached to routes. A filter evaluates a list of conditions (combined via AND or OR) against incoming event payloads.

hookbase_update_filter

Update a filter's name, description, conditions, or logic. Pass only the fields you want to change.

hookbase_delete_filter

Delete a filter. Routes referencing it will have the reference cleared.

Transforms

hookbase_list_transforms

List transform definitions. Transforms reshape an event payload before delivery (JSONata, XSLT, Liquid, or JavaScript).

hookbase_get_transform

Get a transform definition including its source code, language, and input/output formats.

hookbase_create_transform

Create a transform that reshapes payloads. The code is validated server-side before being saved. Requires the "transforms" feature on the org plan.

hookbase_update_transform

Update a transform. If code changes it is re-validated server-side.

hookbase_delete_transform

Delete a transform. Routes referencing it will have the reference cleared.

hookbase_test_transform

Run a transform expression against a sample payload without saving. Useful for iterating on JSONata/XSLT/Liquid/JS code.

Schemas

hookbase_list_schemas

List JSON Schema definitions in the organization. Schemas validate event payloads on routes and reject malformed deliveries.

Parameters: None

hookbase_get_schema

Get a JSON Schema definition (parsed as an object).

hookbase_create_schema

Create a JSON Schema. Requires the "schemas" feature on the org plan. The slug is derived from the name.

hookbase_update_schema

Update a schema. Pass any subset of name/description/json_schema. Uses HTTP PUT under the hood.

hookbase_delete_schema

Delete a schema. Routes referencing it will have the reference cleared.

hookbase_validate_against_schema

Validate a sample payload against a stored schema and return any validation errors.

Alert Rules

hookbase_list_alert_rules

List configured alert rules. Each rule pairs a trigger condition (failure rate, source silence, latency, volume anomalies, schema drift) with one or more notification channels.

Parameters: None

hookbase_get_alert_rule

Get a single alert rule including its trigger config and notification channel IDs.

hookbase_create_alert_rule

Create an alert rule. trigger_config shape depends on trigger_type: - source_silence: { type, sourceId?, silenceMinutes } - failure_rate: { type, destinationId?, thresholdPercent, windowMinutes } - latency_threshold: { type, destinationId?, thresholdMs, windowMinutes } - volume_spike: { type, sourceId?, maxEvents, windowMinutes } - volume_drop: { type, sourceId?, minEvents, windowMinutes } - anomaly_volume: { type, sourceId, direction?, zThreshold?, windowMinutes?, minBaselineSamples? } (Pro+ only) - schema_drift: { type, sourceId, alertOn? } (Pro+ only) The "type" field inside trigger_config must equal trigger_type.

hookbase_update_alert_rule

Update an alert rule. Pass only fields you want to change.

hookbase_delete_alert_rule

Delete an alert rule.

hookbase_test_alert_rule

Fire a test notification through all channels attached to this alert rule. Useful for verifying channel configuration.

Notification Channels

hookbase_list_notification_channels

List notification channels (email, Slack, webhook, Teams, PagerDuty, Discord). Sensitive fields like webhook URLs and PagerDuty routing keys are masked in the response.

Parameters: None

hookbase_get_notification_channel

Get a single notification channel. Sensitive fields are masked in the response.

hookbase_create_notification_channel

Create a notification channel. config shape depends on type: - email: { addresses: ["a@b.com", ...] } - slack: { webhookUrl } - discord: { webhookUrl } - teams: { webhookUrl } - pagerduty: { routingKey, severity? } - webhook: { url, secret? } (signed with HMAC-SHA256 if secret provided) Requires the "notification_channels" feature on the org plan; admin or owner role required.

hookbase_update_notification_channel

Update a notification channel. Pass any subset of name/config/is_active. Replacing config requires the same shape as create.

hookbase_delete_notification_channel

Delete a notification channel. Alert rules referencing it will lose this channel from their notification list.

Outbound Webhooks (Applications, Endpoints, Subscriptions)

hookbase_list_applications

List webhook applications in the organization. Applications group endpoints that receive outbound webhooks for a customer or integration.

hookbase_get_application

Get detailed information about a specific webhook application, including its endpoints and delivery statistics.

hookbase_create_application

Create a new webhook application. Applications represent a customer or integration that will receive webhooks.

hookbase_update_application

Update a webhook application configuration.

hookbase_delete_application

Delete a webhook application. This also deletes all endpoints and subscriptions for this application.

hookbase_list_endpoints

List webhook endpoints. Endpoints are URLs that receive webhook deliveries.

hookbase_get_endpoint

Get detailed information about a webhook endpoint, including circuit breaker state and delivery statistics.

hookbase_create_endpoint

Create a new webhook endpoint. The signing secret is only returned once on creation - save it securely.

hookbase_update_endpoint

Update a webhook endpoint configuration.

hookbase_delete_endpoint

Delete a webhook endpoint. This also removes all subscriptions for this endpoint.

hookbase_rotate_endpoint_secret

Rotate the signing secret for an endpoint. Returns the new secret (save it securely). Old secret remains valid during grace period.

hookbase_reset_endpoint_circuit

Reset the circuit breaker for an endpoint. Use this to immediately re-enable deliveries after fixing an issue.

hookbase_list_subscriptions

List webhook subscriptions. Subscriptions connect endpoints to event types they should receive.

hookbase_get_subscription

Get detailed information about a webhook subscription.

hookbase_create_subscription

Create a subscription to connect an endpoint to an event type. The endpoint will receive events of this type. Use label_filters to only receive events with matching labels.

hookbase_update_subscription

Update a webhook subscription.

hookbase_delete_subscription

Delete a webhook subscription. The endpoint will no longer receive events of this type.

Event Types

hookbase_list_event_types

List event types defined in the organization. Event types define the different kinds of webhook events that can be sent.

hookbase_get_event_type

Get detailed information about an event type, including its JSON schema and example payload.

hookbase_create_event_type

Create a new event type. Event types define the structure and meaning of webhook events.

hookbase_update_event_type

Update an event type. Use is_deprecated to mark an event type as deprecated.

hookbase_delete_event_type

Delete an event type. This also removes all subscriptions to this event type.

Public Event Catalog

hookbase_get_public_catalog

List an organization's published event types as they appear in the public event catalog. Defaults to your own organization — pass org_slug to preview another org's catalog. Only event types marked is_public and is_enabled (see hookbase_update_event_type) appear here.

hookbase_get_public_catalog_event_type

Get full published detail (schema + example payload) for one event type from the public event catalog. Defaults to your own organization — pass org_slug to look up another org's catalog.

Outbound Messages

hookbase_send_event

Send a webhook event to all subscribed endpoints. The event is queued for delivery to matching subscriptions. Use labels for filtering which subscriptions receive the event.

hookbase_list_outbound_messages

List outbound message delivery records. Messages track the delivery status of each event to each endpoint.

hookbase_get_outbound_message

Get detailed information about an outbound message delivery.

hookbase_get_message_attempts

Get the delivery attempt history for an outbound message. Shows each attempt with response details.

hookbase_replay_message

Replay a failed or exhausted message. Creates a new delivery attempt for the original event payload.

hookbase_get_outbound_stats

Get delivery statistics for outbound webhooks. Shows counts by status (pending, success, failed, etc.).

Parameters: None

Webhook Analytics

hookbase_get_webhook_analytics

Get outbound webhook delivery analytics: status counts, success rate, latency percentiles, top failing endpoints, error type breakdown, DLQ reasons, and a time-bucketed chart series. Optionally filter by application_id and/or endpoint_id.

hookbase_get_webhook_endpoint_analytics

Get analytics for a single outbound webhook endpoint: circuit-breaker state, lifetime totals, status counts, average response time, and the most recent 100 delivery attempts in the window.

Operational Webhooks

hookbase_list_operational_webhooks

List operational webhooks configured for a webhook application.

hookbase_get_operational_webhook

Get details for a single operational webhook, including delivery counters and last error.

hookbase_create_operational_webhook

Create an operational webhook for an application. Returns a whsec_-prefixed signing secret shown only once — save it immediately.

hookbase_update_operational_webhook

Update an operational webhook's URL, description, subscribed event flags, or enabled state. Pass only the fields you want to change.

hookbase_delete_operational_webhook

Delete an operational webhook. Does not affect the application's actual outbound endpoints or traffic.

hookbase_get_operational_webhook_logs

Get recent delivery logs for an operational webhook, for debugging why notifications aren't arriving.

hookbase_test_operational_webhook

Send a test event of every operational webhook type to verify connectivity and signature handling. Makes a real HTTP request to the configured URL for each type.

hookbase_rotate_operational_webhook_secret

Rotate the signing secret for an operational webhook. Takes effect immediately (no grace period) — the new secret is returned once and must be saved.

API Keys

hookbase_list_api_keys

List API keys for the current org. Returns id, name, key prefix, scopes, expiry — never the raw key (which is only returned once at creation).

Parameters: None

hookbase_create_api_key

Create a new API key (admin or owner only). The raw key is returned ONCE in the response under apiKey.key — store it securely; it cannot be retrieved later. Default scopes are ["read","write"]. Pass expiresIn (seconds from now) for time-limited keys.

hookbase_delete_api_key

Delete (revoke) an API key. Admin or owner only, requires the "delete" scope. The key currently being used to authenticate this request cannot be deleted.

Audit Logs

hookbase_list_audit_logs

List org audit log entries with optional filters. Admins/owners always have access; non-admins require the "audit_logs" feature on the plan. Filter by action, entityType, or userId.

hookbase_list_audit_log_actions

List the distinct action types present in this org's audit log. Useful for discovering filter values.

Parameters: None

hookbase_list_audit_log_users

List the distinct users who appear in this org's audit log. Useful for discovering user_id filter values.

Parameters: None

Redaction Policies

hookbase_list_redaction_policies

List redaction policies for this org. Optionally filter by source_id (org-wide policies have null sourceId).

hookbase_get_redaction_policy

Get a single redaction policy with its full ruleset.

hookbase_create_redaction_policy

Create a redaction policy (admin or owner; requires the "redaction_policies" feature). Each rule has a match (type: path | field_name | regex_value | header, value) and action (type: redact | mask | hash | remove, optional keepLastN for mask). Pass source_id to scope to one source, omit/null for org-wide. scope controls when rules apply: "storage" (before R2 write), "delivery" (before forwarding), or "both" (default).

hookbase_update_redaction_policy

Update a redaction policy. PUT semantics — pass the full policy state (name, rules, scope, isActive). Optional source_id reassigns the policy. Cache busts on save but org-wide policies (sourceId null) may take up to 5 min to propagate.

hookbase_delete_redaction_policy

Delete a redaction policy (admin or owner).

hookbase_preview_redaction_policy

Apply a candidate ruleset to a sample payload (and optional headers) without saving. Returns the redacted payload, redacted headers, and the count of fields touched.

Scheduled Sends

hookbase_list_scheduled_sends

List one-shot scheduled HTTP sends. Optionally filter by status (pending | sending | sent | failed | cancelled). Paginated.

hookbase_get_scheduled_send

Get a single scheduled send including its current status, response, and error info.

hookbase_create_scheduled_send

Schedule a one-shot HTTP request to fire at a future time. URL must be http or https. scheduled_for must be a future ISO-8601 timestamp. Default method POST. headers and payload are arbitrary objects (JSON-encoded server-side).

hookbase_update_scheduled_send

Update a scheduled send. Only allowed while status is "pending". Pass any subset of fields to change.

hookbase_cancel_scheduled_send

Cancel a pending or failed scheduled send. Sent or already-cancelled sends cannot be cancelled.

hookbase_send_scheduled_send_now

Trigger a pending or failed scheduled send immediately, bypassing its scheduled_for time. Returns the live HTTP response status and latency.

Test Webhook Bins

hookbase_create_bin

Create a new test webhook bin. Returns a public ingest URL that captures any HTTP request sent to it. Bins expire after a fixed TTL. Rate-limited to 10 per IP per day.

Parameters: None

hookbase_get_bin

Get a bin's metadata, current event count, configured response, and the 50 most recent captured events (summary form).

hookbase_list_bin_events

List captured events in a bin (summary view, paginated). Use hookbase_get_bin_event for a single event's headers and body.

hookbase_get_bin_event

Get a single bin event with full headers and body. Body is fetched from R2 if it was offloaded.

hookbase_update_bin_response

Configure the response a bin returns to incoming webhook requests. status_code clamped to 100–599, body capped at 10KB. Useful for simulating different upstream behavior during integration testing.

Signature Verification

hookbase_verify_signature

Check whether a webhook signature matches a payload and secret, using the same verification logic as inbound ingest signature checking. Useful for debugging a rejected webhook or validating a provider integration before wiring up a source. Read-only - makes no changes and does not require an existing source.