webhook-inbox

Name: webhook-inbox
Author: co.kymac.inbox

MCP serverMCP

Ephemeral HTTPS inbox for bots: mint URL, capture POSTs, list JSON. TEST. https://inbox.kymac.co

by co.kymac.inboxhomepage ↗v0.4.1

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"webhook-inbox","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability21/27 checks ok

30 days ago

when	check	result	http	latency	detail
28 h ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
9 d ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
12 d ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
14 d ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
15 d ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
16 d ago	mcp initialize	failed	—	—	unsafe: DNS resolution failed
16 d ago	mcp initialize	ok	200	84 ms	server co.kymac.inbox/webhook-inbox 0.4.1 · protocol 2025-03-26 · 15 tools
16 d ago	mcp initialize	ok	200	88 ms	server co.kymac.inbox/webhook-inbox 0.4.1 · protocol 2025-03-26 · 15 tools
17 d ago	mcp initialize	ok	200	103 ms	server co.kymac.inbox/webhook-inbox 0.4.1 · protocol 2025-03-26 · 15 tools
17 d ago	mcp initialize	ok	200	96 ms	server co.kymac.inbox/webhook-inbox 0.4.1 · protocol 2025-03-26 · 15 tools

Tools observed via MCP handshake

issue_key — Mint a caller key (POST /keys). Bot install starts at GET https://inbox.kymac.co/llms.txt (sole advertised entry). Secret whi_… is returned once. Prefer Authori
verify_key — Confirm WEBHOOK_INBOX_API_KEY or Authorization: Bearer (GET /keys/verify). X-API-Key is an alias only. Does not echo the secret.
rotate_key — Replace the presented secret (POST /keys/rotate). Same id/caller_id and credits. New whi_… is returned once. Old secret then fails 401 invalid_api_key. Prefer A
revoke_key — Invalidate the presented secret (POST /keys/revoke). Same id is revoked; old secret then fails 401 invalid_api_key. Prefer Authorization: Bearer; X-API-Key is a
list_credit_packs — Prepaid TEST packs (GET /credits/packs). checkout_credits is intent only; credits grant after confirm_credits.
checkout_credits — Stripe TEST PaymentIntent for a pack (POST /credits/checkout). Intent only — returns credits_pending; credits are not granted or spendable until confirm_credits
confirm_credits — Confirm a TEST PaymentIntent with Stripe test card pm_card_visa (POST /credits/confirm). This is when credits become granted/spendable (appends credit.purchase
quote_credits — Dry-run cost for an op without debit (GET /credits/quote?op=inbox). Returns cost, balance, and would_succeed.
credit_balance — Derived prepaid balance for this caller_id (GET /credits/balance).
credit_events — Append-only Ledger events for this caller_id (GET /credits/events): credit.grant (first_key), credit.purchase, credit.debit reason=inbox_mint, optional credit.b
mint_inbox — Mint a capture URL (POST /inbox). Install via GET https://inbox.kymac.co/llms.txt only. Prefer Authorization: Bearer; X-API-Key is an alias. First key includes
capture_inbox — Public capture (POST /c/{id}). No API key. No debit. Not an install entry. Stores raw body + headers for list_inbox_events. Rejects revoked (410 inbox_revoked)
list_inbox_events — Owner list (GET /inbox/{id}/events). Returns captured POSTs as JSON (headers + body). Does not debit. Other callers see 404.
revoke_inbox — Stop further captures (DELETE /inbox/{id}). Does not refund the mint debit. Owner only.
health — Public readiness (GET /health): billing (test|live|gated) and runner_ready. No key.

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryco.kymac.inbox/webhook-inbox

first seen 22 d ago · fetched 23 h agoopen ↗

Field history (6 recent events)

22 d ago · declared · summary → "Ephemeral HTTPS inbox for bots: mint URL, capture POSTs, list JSON. TEST. https://inbox.kymac.co"
22 d ago · declared · description → "Ephemeral HTTPS inbox for bots: mint URL, capture POSTs, list JSON. TEST. https://inbox.kymac.co"
22 d ago · declared · publisherName → "co.kymac.inbox"
22 d ago · declared · homepageUrl → "https://inbox.kymac.co/llms.txt"
22 d ago · declared · version → "0.4.1"
22 d ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from