protogrid

Search / lighting.comiza/hookjar

Hookjar

R0· no sign-in

Public webhook inboxes for agents. Receive OAuth redirects, payment callbacks and CI notifications.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality83good
Trust79of 100
Uptime, 30 days98%
Latency p50508 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "hookjar": {
      "type": "http",
      "url": "https://comiza.lighting/mcp"
    }
  }
}
claude mcp add --transport http hookjar https://comiza.lighting/mcp
[mcp_servers.hookjar]
url = "https://comiza.lighting/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hookjar": {
      "type": "remote",
      "url": "https://comiza.lighting/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "hookjar": {
      "type": "http",
      "url": "https://comiza.lighting/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=hookjar&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vY29taXphLmxpZ2h0aW5nL21jcCJ9"
}
{
  "servers": {
    "hookjar": {
      "type": "http",
      "url": "https://comiza.lighting/mcp"
    }
  }
}
{
  "mcpServers": {
    "hookjar": {
      "httpUrl": "https://comiza.lighting/mcp"
    }
  }
}
extensions:
  "hookjar":
    enabled: true
    name: "hookjar"
    type: streamable_http
    uri: "https://comiza.lighting/mcp"
    timeout: 300

Quality 83 / 100good

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list carries no ttlMs, so clients re-fetch it
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: list_inboxes (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_inbox (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_request (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 468 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 468 tokens to load them all · tool set 0a6d7d9b7057 · checked 2026-10-19 10:20 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 79 / 100

no-repository
provenance55
liveness99
freshness85
hygiene80

+dns-namespace +website +reachable +uptime-98% ~updated-71d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://comiza.lighting/mcp streamable-httpnoneyes98%508 ms2026-07-282026-10-19

Tools (6)

create_inboxCreate a public URL that captures any HTTP request sent to it. Use it when you need something outside this session to reach you: an OAuth redirect, a payment provider callback, a CI notification, a webhook you are testing. Returns the URL to hand to the other service. Requests are readable with get_requests or wait_for_request.
delete_inboxDelete an inbox and everything captured in it.
get_requestReturn the full method, headers, query string and body of a single captured request. Text bodies come back as text, binary as base64.
get_requestsList what has arrived in an inbox, newest last. Returns summaries without bodies. Use get_request for the full contents of one.
list_inboxesList the inboxes you currently own, with their URLs and expiry.
wait_for_requestBlock until a request lands in the inbox, then return it. This is the tool to use straight after you have triggered the action that should produce the callback. Returns immediately if something already arrived after the sequence number you pass.

Schemas: list_tools.

Similar MCP servers

More from lighting.comiza

Official server.json
{
  "name": "lighting.comiza/hookjar",
  "title": "Hookjar",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://comiza.lighting/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://comiza.lighting/hookjar/",
  "description": "Public webhook inboxes for agents. Receive OAuth redirects, payment callbacks and CI notifications."
}