no-secrets
25Cursor rule Cursor
Never commit secrets, keys, or account identifiers.
Cursor rule Cursor
Never commit secrets, keys, or account identifiers.
Cursor rule Cursor
Apply the webhook.co writing voice to any user-facing copy — docs, UI text, CLI output, error messages, changelogs, and READMEs. Request this rule when writing or editing prose.
Skill Claude CodeCodexCursor
Build interactive MCP UI widgets (forms, pickers, confirmation dialogs, charts, live status) rendered in sandboxed iframes. Use when an MCP tool genuinely needs a visual/interactive surface instead of text. Pairs with build-mcp-server.
Skill Claude CodeCodexCursor
Design and scaffold an MCP server for webhook.co. Use when adding or extending the MCP surface (apps/mcp), exposing a capability as MCP tools, or deciding how an MCP server should be deployed and structured.
Skill Claude CodeCodexCursor
Package a local stdio MCP server into an installable MCPB bundle. Use only when shipping a server users install and run on their own machine (e.g. alongside the CLI tunnel), not for the Workers-hosted remote server.
Skill Claude CodeCodexCursor
A disciplined 4-phase method for debugging in webhook.co — root-cause investigation, pattern analysis, hypothesis testing, then implementation. Use when chasing a bug or unexpected behavior instead of guessing-and-checking. Stop and review architecture after 3 failed fixes.
Skill Claude CodeCodexCursor
Strict red-green-refactor TDD for webhook.co. Use when implementing or changing behavior — especially correctness-critical paths (signing/verification, dedup/idempotency, retries, ordering, replay, metering). Tests must fail before any implementation.
Instructions file CodexOpenCode
AGENTS.md instructions for webhook-co/webhook, covering agents.md — webhook constitution & governance index, what this is, non-negotiables (every change must respect these) and governance layer (how this repo guides agents).
Instructions file
Claude Code instructions for webhook-co/webhook, a project described as: Capture, inspect, replay and deliver webhooks. Open source, with a free permanent signed URL, signature verification, and one-command replay to localhost.
MCP server Claude CodeCodexCursor
MCP server "webhook", hosted remotely at mcp.webhook.co, as configured in webhook-co/webhook.
Skill Claude CodeCodex
Diagnose why an inbound webhook signature fails to verify, and write correct verification code for a named provider. Use when a signature check rejects real traffic, when a webhook works in a provider's test console but not against your server, or when you are implementing verification for Stripe, GitHub, Shopify…
MCP server Claude CodeCodexCursor
Receive, inspect, replay and deliver webhooks — with signature verification and agent triggers. Remote server at mcp.webhook.co.