io.github.pipehero/pipehero

by pipehero · remote · no sign-in to list tools · v0.1.0 · published by GitHub user pipehero

Debug webhooks from your AI agent: inspect and replay captured webhooks on localhost.

Deletes · 4Changes · 10

Compare Registry entry

25 tools: 4 can delete or cancel things, 10 change things and 11 only read.

Scanned Oct 21, 2026

Deletes or cancels4Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things10Claude Code: ask: see these tools
Only reads11Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http pipehero https://mcp.pipehero.app/mcp

Findings

Matches of fixed checks, with the text they matched.

3 info

Infoimport_api_spec
The description mentions "Credentials".
Matched text
description: "...ing, and plan limits are checked first. Credentials are never imported (they become variabl..."
What this check looks for
Infosave_captured_request
The description mentions "Credentials".
Matched text
description: "...n endpoint is created from the request. Credentials, cookies and signatures are replaced by..."
What this check looks for
Infoshare_api_endpoint
The description mentions "credentials".
Matched text
description: "...The page is read-only and always hides credentials and secrets."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

25 tools

Deletes or cancels 4Removes, cancels or revokes something.Claude Code: deny

delete_api_endpointDelete an endpoint and its examples.No findings
Why it is in this group
- The name "delete_api_endpoint" says "delete": a word for removing or ending something.
- The description says "Cannot be undone".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Delete an endpoint and its examples. Use when the route no longer exists in the code. Cannot be undone.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Delete an API endpoint
replay_requestReplay a captured webhook to the user's localhost (the tunnel CLI must be running).No findings
Why it is in this group
- The name "replay_request" says "request": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replay a captured webhook to the user's localhost (the tunnel CLI must be running).
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
- title: Replay a webhook
run_api_endpointSend an endpoint against an environment and return the real response (status, headers, body up to 20 KB).No findings
Why it is in this group
- The name "run_api_endpoint" says "run": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Send an endpoint against an environment and return the real response (status, headers, body up to 20 KB). A `local` environment goes through the user's tunnel to their localhost (the CLI must be running); staging/prod are sent from Pipehero's cloud (Pro/Team) to public addresses only. Sending to a `prod` environment with a write method needs confirm_write_to_prod: true, which you should only pass after the user agrees. Use it to check that the code you wrote behaves as documented.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
- title: Run an API endpoint
send_test_webhookSend a generated test webhook to the user's localhost (the tunnel CLI must be running).No findings
Why it is in this group
- The name "send_test_webhook" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Send a generated test webhook to the user's localhost (the tunnel CLI must be running). Provide a `provider` (stripe, github, shopify, clerk, slack, resend, paddle, polar, lemonsqueezy) and optional `event` for a realistic sample payload, or pass a custom JSON `body`. Pro plan required.
Annotations the server declares
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
- title: Send a test webhook

Changes things 10Creates or changes something that can be changed back.Claude Code: ask

add_api_exampleSave a response example on an endpoint (for instance the 402 your handler returns for a declined card).No findings
Why it is in this group
- The name "add_api_example" says "add": a word for a change.
Description, as the server wrote it
Save a response example on an endpoint (for instance the 402 your handler returns for a declined card). Replaces the example with the same name, so it is safe to repeat.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Add a response example
create_api_collectionCreate an empty API collection.No findings
Why it is in this group
- The name "create_api_collection" says "create": a word for a change.
Description, as the server wrote it
Create an empty API collection. Prefer import_api_spec when there is an OpenAPI file, and upsert_api_endpoint to fill it from the code.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
- title: Create an API collection
export_api_collectionExport a collection as an OpenAPI 3.1 or Postman 2.1 document.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Export a collection as an OpenAPI 3.1 or Postman 2.1 document. Handy to read the whole API at once.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Export an API collection
import_api_specImport an OpenAPI 3.x document (as JSON), a Postman v2.x collection (JSON) or a curl command into a new collection, or into `collection_id`.1 finding
Why it is in this group
- The name "import_api_spec" says "import": a word for a change.
Findings
- Info
  The description mentions "Credentials".
  Matched text
  description: "...ing, and plan limits are checked first. Credentials are never imported (they become variabl..."
  What this check looks for
Description, as the server wrote it
Import an OpenAPI 3.x document (as JSON), a Postman v2.x collection (JSON) or a curl command into a new collection, or into `collection_id`. All or nothing, and plan limits are checked first. Credentials are never imported (they become variables). Convert YAML to JSON before sending.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
- title: Import an API spec
save_captured_requestDocument a real request captured by a tunnel (get its id from list_requests).1 finding
Why it is in this group
- The name "save_captured_request" says "save": a word for a change.
Findings
- Info
  The description mentions "Credentials".
  Matched text
  description: "...n endpoint is created from the request. Credentials, cookies and signatures are replaced by..."
  What this check looks for
Description, as the server wrote it
Document a real request captured by a tunnel (get its id from list_requests). If an endpoint already covers the route, the response is added to it as an example; otherwise an endpoint is created from the request. Credentials, cookies and signatures are replaced by {{variables}} and only JSON bodies are kept. A response already saved as an example is not duplicated. Use it to document webhooks and calls you have only seen in traffic.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Save a captured request as docs
set_long_requestsOpt a tunnel into a 120-second ingress timeout instead of the 30-second default — for tool calls that legitimately run long, e.g.No findings
Why it is in this group
- The name "set_long_requests" says "set": a word for a change.
Description, as the server wrote it
Opt a tunnel into a 120-second ingress timeout instead of the 30-second default — for tool calls that legitimately run long, e.g. an MCP server exposed through the tunnel. Persists on the tunnel; pass enabled: false to revert to the 30-second default.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Set extended request timeout
set_ws_passthroughOpt a tunnel into WebSocket passthrough, so an application-level WebSocket connection (e.g.No findings
Why it is in this group
- The name "set_ws_passthrough" says "set": a word for a change.
Description, as the server wrote it
Opt a tunnel into WebSocket passthrough, so an application-level WebSocket connection (e.g. a mobile/web app's own realtime feature) can be relayed to your localhost. Pro/Team plan required to enable; pass enabled: false to disable on any plan.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Set WebSocket passthrough
share_api_collectionShare a whole collection: every endpoint in it (including ones added later), with its examples and latest run, read-only and with secrets hidden.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Share a whole collection: every endpoint in it (including ones added later), with its examples and latest run, read-only and with secrets hidden. Environments are never shown and it can't be exported. Returns the collection's link, which never changes. With no other arguments it stays restricted to the workspace; set `link_access` or `invite` people only when the user asks to share it outside the team. get_api_collection returns the link as `share` once it exists.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Share a collection
share_api_endpointCreate an endpoint's shareable link and return it.1 finding
Why it is in this group
- The description's first verb is "create": a word for a change.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...The page is read-only and always hides credentials and secrets."
  What this check looks for
Description, as the server wrote it
Create an endpoint's shareable link and return it. With no other arguments the link stays restricted: workspace members can open it (they sign in), which is enough for a PR or an internal message. Only when the user asks to share it outside the workspace: set `link_access` to `viewer` (anyone with the link can read) or `commenter` (Team plan; commenting asks for sign-in), or `invite` people by email (they get an email and sign in with that address). `restricted` turns the public link off; the URL stays the same. The page is read-only and always hides credentials and secrets.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
- title: Share an endpoint
upsert_api_endpointDocument an endpoint: creates it, or updates the existing one for the same method + path.No findings
Why it is in this group
- The name "upsert_api_endpoint" says "upsert": a word for a change.
Description, as the server wrote it
Document an endpoint: creates it, or updates the existing one for the same method + path. Use it whenever you add or change a route in the code, so the docs stay true. Only the fields you send change. `path` may use :id, {id} or {{id}} for variables. `folder` is created by name if missing. Send `version` (from get_api_endpoint) to avoid overwriting a teammate's edit; a stale version is rejected.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
- title: Create or update an API endpoint

Only reads 11Looks things up and changes nothing.Claude Code: allow

check_api_driftCompare a collection's docs with the real traffic a tunnel captured (Pro/Team).No findings
Why it is in this group
- The description's first verb is "compare": a word for reading.
Description, as the server wrote it
Compare a collection's docs with the real traffic a tunnel captured (Pro/Team). Returns routes nobody documented, status codes with no example, response or request fields missing from every example (or with another type), undocumented query parameters, and documented fields that never appear. Each finding includes `request_id` of the newest request that shows it: pass it to save_captured_request to add it to the docs, or fix the docs with upsert_api_endpoint and add_api_example. Use it to find out what drifted after a code change.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Check API docs against real traffic
get_api_collectionGet one collection's folders, endpoints (id, method, path, name, version, example count) and environments (with their variables).No findings
Why it is in this group
- The name "get_api_collection" says "get": a word for reading.
Description, as the server wrote it
Get one collection's folders, endpoints (id, method, path, name, version, example count) and environments (with their variables).
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Get an API collection
get_api_endpointGet one endpoint in full: description, parameters, headers, request body, saved response examples and its current `version`.No findings
Why it is in this group
- The name "get_api_endpoint" says "get": a word for reading.
Description, as the server wrote it
Get one endpoint in full: description, parameters, headers, request body, saved response examples and its current `version`. Identify it by endpoint_id or by method + path.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Get an API endpoint
get_api_share_linkGet the shareable link of an endpoint (a read-only page with its docs, examples and latest run, secrets hidden), who can open it and who was invited.No findings
Why it is in this group
- The name "get_api_share_link" says "get": a word for reading.
Description, as the server wrote it
Get the shareable link of an endpoint (a read-only page with its docs, examples and latest run, secrets hidden), who can open it and who was invited. Use it to put the link in a PR, an issue or a message. Each endpoint has one link that never changes; `shared: false` means it has none yet (see share_api_endpoint).
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Get an endpoint's share link
get_requestGet the full request and response (headers + body) of one captured webhook by id.No findings
Why it is in this group
- The name "get_request" says "get": a word for reading.
Description, as the server wrote it
Get the full request and response (headers + body) of one captured webhook by id.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: Get a captured request
list_api_collectionsList the workspace's API collections (saved endpoints with examples and environments).No findings
Why it is in this group
- The name "list_api_collections" says "list": a word for reading.
Description, as the server wrote it
List the workspace's API collections (saved endpoints with examples and environments). Start here to find a collection_id.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List API collections
list_api_monitorsSee which endpoints of a collection are checked on a schedule (Pro/Team monitors) and how they are doing: state (healthy, failing, blip, paused, waiting), the last check with its s…No findings
Why it is in this group
- The name "list_api_monitors" says "list": a word for reading.
Description, as the server wrote it
See which endpoints of a collection are checked on a schedule (Pro/Team monitors) and how they are doing: state (healthy, failing, blip, paused, waiting), the last check with its status, latency and error, and since when it has been failing. Use it to find out what is broken in staging or production, then read the endpoint and its code. Read-only: people decide what to monitor.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List API monitors
list_api_proposalsSee what happened to the changes you proposed.No findings
Why it is in this group
- The name "list_api_proposals" says "list": a word for reading.
Description, as the server wrote it
See what happened to the changes you proposed. Some workspaces review AI changes: your write tools then answer `pending_review` and change nothing until a teammate approves. This lists the latest proposals with their status (pending, approved, rejected with the reviewer's reason, or failed with why) so you can tell whether a change went through.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List proposed API changes
list_api_runsRecent runs of an endpoint (newest first, default 5): who/what was sent and what came back.No findings
Why it is in this group
- The name "list_api_runs" says "list": a word for reading.
Description, as the server wrote it
Recent runs of an endpoint (newest first, default 5): who/what was sent and what came back. Use to see what happened the last time it was run.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List recent runs
list_requestsList recent webhooks/requests captured for a tunnel.No findings
Why it is in this group
- The name "list_requests" says "list": a word for reading.
Description, as the server wrote it
List recent webhooks/requests captured for a tunnel. Returns id, method, path, status and bodies.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List captured requests
list_tunnelsList the user's Pipehero tunnels and whether each is currently online.No findings
Why it is in this group
- The name "list_tunnels" says "list": a word for reading.
Description, as the server wrote it
List the user's Pipehero tunnels and whether each is currently online.
Annotations the server declares
- destructiveHint: false
- openWorldHint: false
- readOnlyHint: true
- title: List tunnels

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http pipehero https://mcp.pipehero.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__pipehero__list_tunnels",
      "mcp__pipehero__list_requests",
      "mcp__pipehero__get_request",
      "mcp__pipehero__list_api_collections",
      "mcp__pipehero__get_api_collection",
      "mcp__pipehero__get_api_endpoint",
      "mcp__pipehero__list_api_monitors",
      "mcp__pipehero__list_api_proposals",
      "mcp__pipehero__check_api_drift",
      "mcp__pipehero__get_api_share_link",
      "mcp__pipehero__list_api_runs"
    ],
    "ask": [
      "mcp__pipehero__set_long_requests",
      "mcp__pipehero__set_ws_passthrough",
      "mcp__pipehero__create_api_collection",
      "mcp__pipehero__upsert_api_endpoint",
      "mcp__pipehero__add_api_example",
      "mcp__pipehero__import_api_spec",
      "mcp__pipehero__export_api_collection",
      "mcp__pipehero__save_captured_request",
      "mcp__pipehero__share_api_endpoint",
      "mcp__pipehero__share_api_collection"
    ],
    "deny": [
      "mcp__pipehero__replay_request",
      "mcp__pipehero__send_test_webhook",
      "mcp__pipehero__delete_api_endpoint",
      "mcp__pipehero__run_api_endpoint"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as pipehero. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.pipehero/pipehero/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

14 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:43 UTC.

For agents: Markdown · JSON · report this listing