Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "pipehero": {
      "type": "http",
      "url": "https://mcp.pipehero.app/mcp"
    }
  }
}

claude mcp add --transport http pipehero https://mcp.pipehero.app/mcp

[mcp_servers.pipehero]
url = "https://mcp.pipehero.app/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "pipehero": {
      "type": "remote",
      "url": "https://mcp.pipehero.app/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "pipehero": {
      "type": "http",
      "url": "https://mcp.pipehero.app/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=pipehero&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnBpcGVoZXJvLmFwcC9tY3AifQ%3D%3D"
}

{
  "servers": {
    "pipehero": {
      "type": "http",
      "url": "https://mcp.pipehero.app/mcp"
    }
  }
}

{
  "mcpServers": {
    "pipehero": {
      "httpUrl": "https://mcp.pipehero.app/mcp"
    }
  }
}

extensions:
  "pipehero":
    enabled: true
    name: "pipehero"
    type: streamable_http
    uri: "https://mcp.pipehero.app/mcp"
    timeout: 300

Quality 88 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations25 of 25 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints13 of 25 tools declare all four hints; missing: list_requests (idempotentHint); get_request (idempotentHint); list_api_collections (idempotentHint); …
pass
tools.token_costabout 4,593 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changes3 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

25 tools, about 4,593 tokens to load them all · tool set 3c9aeac74523 · tools last changed 2026-10-08 · checked 2026-10-19 15:48 UTC

Tool changes

2026-10-08share_api_collectionadded
Share a whole collection: every endpoint in it (including ones added later), with its examples and latest run, read-only and with secrets hidden. Environments are never shown and it can't be exported. Returns the collection's link, which never changes. With no other arguments it stays restricted to the workspace; set `link_access` or `invite` people only when the user asks to share it outside the team. get_api_collection returns the link as `share` once it exists.
2026-10-07share_api_endpointadded
Create an endpoint's shareable link and return it. With no other arguments the link stays restricted: workspace members can open it (they sign in), which is enough for a PR or an internal message. Only when the user asks to share it outside the workspace: set `link_access` to `viewer` (anyone with the link can read) or `commenter` (Team plan; commenting asks for sign-in), or `invite` people by email (they get an email and sign in with that address). `restricted` turns the public link off; the URL stays the same. The page is read-only and always hides credentials and secrets.
2026-10-07get_api_share_linkadded
Get the shareable link of an endpoint (a read-only page with its docs, examples and latest run, secrets hidden), who can open it and who was invited. Use it to put the link in a PR, an issue or a message. Each endpoint has one link that never changes; `shared: false` means it has none yet (see share_api_endpoint).

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 89 / 100

provenance90

liveness98

freshness65

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-96% ~updated-102d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.pipehero.app/mcp` streamable-http	none	yes	96%	391 ms	2024-11-05	2026-10-19

Tools (25)

`add_api_example`	Save a response example on an endpoint (for instance the 402 your handler returns for a declined card). Replaces the example with the same name, so it is safe to repeat.
`check_api_drift`read-only	Compare a collection's docs with the real traffic a tunnel captured (Pro/Team). Returns routes nobody documented, status codes with no example, response or request fields missing from every example (or with another type), undocumented query parameters, and documented fields that never appear. Each finding includes `request_id` of the newest request that shows it: pass it to save_captured_request to add it to the docs, or fix the docs with upsert_api_endpoint and add_api_example. Use it to find out what drifted after a code change.
`create_api_collection`	Create an empty API collection. Prefer import_api_spec when there is an OpenAPI file, and upsert_api_endpoint to fill it from the code.
`delete_api_endpoint`destructive	Delete an endpoint and its examples. Use when the route no longer exists in the code. Cannot be undone.
`export_api_collection`read-only	Export a collection as an OpenAPI 3.1 or Postman 2.1 document. Handy to read the whole API at once.
`get_api_collection`read-only	Get one collection's folders, endpoints (id, method, path, name, version, example count) and environments (with their variables).
`get_api_endpoint`read-only	Get one endpoint in full: description, parameters, headers, request body, saved response examples and its current `version`. Identify it by endpoint_id or by method + path.
`get_api_share_link`read-only	Get the shareable link of an endpoint (a read-only page with its docs, examples and latest run, secrets hidden), who can open it and who was invited. Use it to put the link in a PR, an issue or a message. Each endpoint has one link that never changes; `shared: false` means it has none yet (see share_api_endpoint).
`get_request`read-only	Get the full request and response (headers + body) of one captured webhook by id.
`import_api_spec`	Import an OpenAPI 3.x document (as JSON), a Postman v2.x collection (JSON) or a curl command into a new collection, or into `collection_id`. All or nothing, and plan limits are checked first. Credentials are never imported (they become variables). Convert YAML to JSON before sending.
`list_api_collections`read-only	List the workspace's API collections (saved endpoints with examples and environments). Start here to find a collection_id.
`list_api_monitors`read-only	See which endpoints of a collection are checked on a schedule (Pro/Team monitors) and how they are doing: state (healthy, failing, blip, paused, waiting), the last check with its status, latency and error, and since when it has been failing. Use it to find out what is broken in staging or production, then read the endpoint and its code. Read-only: people decide what to monitor.
`list_api_proposals`read-only	See what happened to the changes you proposed. Some workspaces review AI changes: your write tools then answer `pending_review` and change nothing until a teammate approves. This lists the latest proposals with their status (pending, approved, rejected with the reviewer's reason, or failed with why) so you can tell whether a change went through.
`list_api_runs`read-only	Recent runs of an endpoint (newest first, default 5): who/what was sent and what came back. Use to see what happened the last time it was run.
`list_requests`read-only	List recent webhooks/requests captured for a tunnel. Returns id, method, path, status and bodies.
`list_tunnels`read-only	List the user's Pipehero tunnels and whether each is currently online.
`replay_request`destructive	Replay a captured webhook to the user's localhost (the tunnel CLI must be running).
`run_api_endpoint`destructive	Send an endpoint against an environment and return the real response (status, headers, body up to 20 KB). A `local` environment goes through the user's tunnel to their localhost (the CLI must be running); staging/prod are sent from Pipehero's cloud (Pro/Team) to public addresses only. Sending to a `prod` environment with a write method needs confirm_write_to_prod: true, which you should only pass after the user agrees. Use it to check that the code you wrote behaves as documented.
`save_captured_request`	Document a real request captured by a tunnel (get its id from list_requests). If an endpoint already covers the route, the response is added to it as an example; otherwise an endpoint is created from the request. Credentials, cookies and signatures are replaced by {{variables}} and only JSON bodies are kept. A response already saved as an example is not duplicated. Use it to document webhooks and calls you have only seen in traffic.
`send_test_webhook`destructive	Send a generated test webhook to the user's localhost (the tunnel CLI must be running). Provide a `provider` (stripe, github, shopify, clerk, slack, resend, paddle, polar, lemonsqueezy) and optional `event` for a realistic sample payload, or pass a custom JSON `body`. Pro plan required.
`set_long_requests`	Opt a tunnel into a 120-second ingress timeout instead of the 30-second default — for tool calls that legitimately run long, e.g. an MCP server exposed through the tunnel. Persists on the tunnel; pass enabled: false to revert to the 30-second default.
`set_ws_passthrough`	Opt a tunnel into WebSocket passthrough, so an application-level WebSocket connection (e.g. a mobile/web app's own realtime feature) can be relayed to your localhost. Pro/Team plan required to enable; pass enabled: false to disable on any plan.
`share_api_collection`	Share a whole collection: every endpoint in it (including ones added later), with its examples and latest run, read-only and with secrets hidden. Environments are never shown and it can't be exported. Returns the collection's link, which never changes. With no other arguments it stays restricted to the workspace; set `link_access` or `invite` people only when the user asks to share it outside the team. get_api_collection returns the link as `share` once it exists.
`share_api_endpoint`	Create an endpoint's shareable link and return it. With no other arguments the link stays restricted: workspace members can open it (they sign in), which is enough for a PR or an internal message. Only when the user asks to share it outside the workspace: set `link_access` to `viewer` (anyone with the link can read) or `commenter` (Team plan; commenting asks for sign-in), or `invite` people by email (they get an email and sign in with that address). `restricted` turns the public link off; the URL stays the same. The page is read-only and always hides credentials and secrets.
`upsert_api_endpoint`	Document an endpoint: creates it, or updates the existing one for the same method + path. Use it whenever you add or change a route in the code, so the docs stay true. Only the fields you send change. `path` may use :id, {id} or {{id}} for variables. `folder` is created by name if missing. Send `version` (from get_api_endpoint) to avoid overwriting a teammate's edit; a stale version is rejected.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.pipehero/pipehero",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.pipehero.app/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "repository": {
    "url": "https://github.com/pipehero/pipehero-mcp",
    "source": "github"
  },
  "websiteUrl": "https://pipehero.app",
  "description": "Debug webhooks from your AI agent: inspect and replay captured webhooks on localhost."
}