@hookwarden/mcp
An MCP server providing the scan_handler tool for AI coding agents, allowing them to analyze webhook handlers for signature verification bugs. It returns the same three-state verdicts (verified, not-verified, manual-review) as the CLI, running locally and deterministically without network traffic.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Analyze webhook handler code for signature verification bugs
- Get deterministic three-state verdicts for webhook security
- Integrate webhook security scanning into AI coding agents like Cursor or Claude
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@hookwarden/mcp 0.9.5
{
"version": "0.9.5",
"transport": "stdio",
"identifier": "@hookwarden/mcp",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"hookwarden-mcp": {
"command": "npx",
"args": [
"-y",
"@hookwarden/mcp@0.9.5"
]
}
}
}Cline
{
"mcpServers": {
"hookwarden-mcp": {
"command": "npx",
"args": [
"-y",
"@hookwarden/mcp@0.9.5"
]
}
}
}VS Code
{
"servers": {
"hookwarden-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@hookwarden/mcp@0.9.5"
]
}
}
}Claude Desktop
{
"mcpServers": {
"hookwarden-mcp": {
"command": "npx",
"args": [
"-y",
"@hookwarden/mcp@0.9.5"
]
}
}
}Let your agent find its tools
Find servers like @hookwarden/mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.