Name: webhooks.cc
Author: kroqdotdev

webhooks.cc MCP

Capture, inspect, send and assert on webhooks and inbound email from your coding agent.

Grade A Remote or local · Streamable HTTP · stdio API key 49 tools v1.15.1 · 29 Oct 2026 MIT

No reviews yet by kroqdotdevnpm Runs on your machine or at its publisher’s address — not through us

96/100

trust score

tools declared

local

or remote

—

downloads a day

What it does

Capture, inspect, send and assert on webhooks and inbound email from your coding agent.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user webhooks-cc-mcp '--' npx -y @webhooks-cc/mcp

# 2 — ask your agent for something these tools do
#   create_endpoint, list_endpoints, list_teams and 46 more

webhooks.cc costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

kroqdotdev1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. This one can run either way — at an address its publisher runs, or as a process under your own user, with your files and your network — and this marketplace is in the path of neither.

Claude Codedeclared by this listing

This is a public server: you run it yourself and this marketplace is not in the path. You need Node.js — the current LTS (24) is the safe choice; npx comes with it. Claude Code registers it in one command; --scope user makes it available in every project. The '--' is in quotes so that PowerShell passes it on.

claude mcp add --scope user webhooks-cc-mcp '--' npx -y @webhooks-cc/mcp

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Or connect to its publisher’s address

Its publisher also runs it at https://webhooks.cc/mcp: nothing to start on your machine, and this marketplace is not in the path.

claude mcp add --scope user --transport http webhooks-cc-mcp https://webhooks.cc/mcp

Free on mcprush, and it runs from its publisher’s own package: this marketplace is not in the path, so there is no key of ours to hold and no card to add.

What it asks of you

Nothing is required, but it can take WHK_API_KEY (webhooks.cc API key (whcc_...). Without one, the server starts connected to the account the agent was connected to before, or in the keyless agent sandbox.) if you want to set it.

What it writes

One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.

What you approve

49 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Read from its source code. A server that builds its tool list when it starts can list more tools than this.

Create a webhook endpoint. Returns the endpoint slug, URL, and metadata.

Parameter	Type	Required	Notes
name	string	no	Display name for the endpoint
ephemeral	boolean	no	Create a temporary endpoint that auto-expires
expiresIn		no	Auto-expire after this duration, for example "12h"
mockResponse	object	no	Optional mock response to return when the endpoint receives a request
responseRules	array	no	Conditional response rules. Each rule has conditions and a response. First matching rule wins.
notificationUrl	string	no	URL to POST a JSON summary to after each captured request (e.g. Slack/Discord webhook)
signingProvider	string	no	Signing provider for automatic signature verification (e.g. stripe, github, shopify)
signingSecret	string	no	Signing secret (encrypted server-side, never returned). Required when signingProvider is set.
signingHeader	string	no	Custom signature header name. Only used with generic-hmac provider.

List webhook endpoints: those you own (with sharedWith) and those shared with you through teams (with fromTeam). Optionally keep only one team's endpoints.

Parameter	Type	Required	Notes
team	string	no	Team id or name (case-insensitive). Keeps endpoints shared with you from that team and endpoints you own that are shared with it.

List the teams you own or belong to, with role, seats, pooled request usage (requestsUsed/requestLimit), period end, and whether the team is suspended for lack of a subscription.

No parameter schema on file.

List a team's members and pending invites. Any member of the team may call this.

Parameter	Type	Required	Notes
teamId	string	yes	Team id (from list_teams)

Share an endpoint you own with a team so its members can inspect, stream, and edit it. The team needs an active subscription; the endpoint's requests then bill the team's pooled quota.

Parameter	Type	Required	Notes
slug	string	yes	Slug of an endpoint you own
teamId	string	yes	Team id (from list_teams)

Stop sharing an endpoint you own with a team. Works even when the team is suspended.

Parameter	Type	Required	Notes
slug	string	yes	Slug of an endpoint you own
teamId	string	yes	Team id (from list_teams)

Get details for a specific webhook endpoint by slug.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug

Update an endpoint name, mock response, conditional response rules, signing configuration, whether codes and links are picked out of its emails, or the named fields picked out of them.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug to update
name	string	no	New display name
mockResponse	object	no	Default mock response (used when no rule matches), or null to clear
responseRules	array	no	Conditional response rules (first match wins), or null to clear
notificationUrl	string	no	Notification webhook URL, or null to clear it
signingProvider	string	no	Signing provider for automatic verification (e.g. stripe, github), or null to disable
signingSecret	string	no	New signing secret (encrypted server-side). Pass null to clear.
signingHeader	string	no	Custom signature header name (only for generic-hmac provider), or null to clear
showEmailExtracts	boolean	no	Pick codes and links out of emails (dashboard and forwarded JSON). Owner only.
emailFields	array	no	Named fields picked out of every email: shown with it, fields in its JSON, read by forwarding templates and filters (email_field). Replaces the list; null or [] removes them. Owner only.

Dry run of an endpoint's responses: which response rule answers a captured request, and the response with its {{ placeholders }} filled in, exactly as the receiver would send it. Nothing is sent. Pass mockResponse or responseRules to try settings before saving them with update_endpoint.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
requestId	string	no	A captured request on the endpoint (default: the newest HTTP request, or a sample)
mockResponse	object	no	Try this default response instead of the saved one (null: none)
responseRules	array	no	Try these rules instead of the saved ones (null: none)

Delete a webhook endpoint and all its captured requests.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug to delete

Create multiple webhook endpoints in one call.

Parameter	Type	Required	Notes
count	integer	yes	Number of endpoints to create
namePrefix	string	no	Optional prefix for endpoint names
ephemeral	boolean	no	Create temporary endpoints that auto-expire
expiresIn		no	Auto-expire after this duration, for example "12h"

Delete multiple webhook endpoints in one call.

Parameter	Type	Required	Notes
slugs	array	yes	Endpoint slugs to delete

Send a test webhook to a hosted endpoint. Supports provider templates and signing.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug to send to
method	string	no	HTTP method (default: POST)
headers	object	no	HTTP headers to include
body		no	Request body
provider	string	no	Optional provider template to send with signed headers
template	string	no	Provider-specific template preset
event	string	no	Provider event or topic name
secret	string	no	Signing secret. Required for signed provider templates; omit for secretless providers (sendgrid, discord, plaid).

List recent captured requests for an endpoint, HTTP requests and emails together (filter with kind). For emails, list_emails is shorter.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug
limit	integer	no	Max requests to return
since	number	no	Only return requests after this timestamp in ms
kind	string	no	Only HTTP requests ("http") or only captured emails ("email")

Search captured webhook requests across endpoints using retained full-text search.

Parameter	Type	Required	Notes
slug	string	no	Filter to a specific endpoint slug
method	string	no	Filter by HTTP method
kind	string	no	Only HTTP requests ("http") or only captured emails ("email")
q	string	no	Free-text search across path, body, and headers
from		no	Start time as a timestamp or duration like "1h" or "7d"
to		no	End time as a timestamp or duration like "1h" or "7d"
limit	integer	no	Max results to return
offset	integer	no	Result offset
order	string	no	Sort order by received time

Count captured webhook requests that match the given filters.

Parameter	Type	Required	Notes
slug	string	no	Filter to a specific endpoint slug
method	string	no	Filter by HTTP method
kind	string	no	Only HTTP requests ("http") or only captured emails ("email")
q	string	no	Free-text search across path, body, and headers
from		no	Start time as a timestamp or duration like "1h" or "7d"
to		no	End time as a timestamp or duration like "1h" or "7d"

Get full details for a specific captured request by ID.

Parameter	Type	Required	Notes
requestId	string	yes	The request ID

Wait for a request to arrive at an endpoint.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug to monitor
timeout		no	How long to wait, for example "30s"
pollInterval		no	Interval between polls, for example "500ms" or "1s"

Wait for multiple requests to arrive at an endpoint.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug to monitor
count	integer	yes	Number of requests to collect
timeout		no	How long to wait, for example "30s"
pollInterval		no	Interval between polls, for example "500ms" or "1s"
method	string	no	Only collect requests with this HTTP method

Replay a previously captured request to a target URL.

Parameter	Type	Required	Notes
requestId	string	yes	The captured request ID
targetUrl	string	yes	The URL to replay the request to

A captured email in the shape an inbound mail provider posts it (postmark, sendgrid, mailgun, cloudmailin), to test the inbound handler you wrote for that provider against real mail. Returns the method, headers and body; with targetUrl (your local handler), posts it there and returns the answer. A…

Parameter	Type	Required	Notes
requestId	string	yes	The captured email's request ID
format	string	yes	Whose shape; json is webhooks.cc's own email.received JSON (unsigned)
mailgunSigningKey	string	no	For mailgun: the signing key your handler verifies with (a test key)
targetUrl	string	no	Post it here, e.g. http://localhost:3000/api/inbound/postmark

Compare two captured requests and show the structured differences.

Parameter	Type	Required	Notes
leftRequestId	string	yes	The first request ID
rightRequestId	string	yes	The second request ID
ignoreHeaders	array	no	Headers to ignore during comparison

Generate TypeScript interfaces, Zod schemas, Pydantic models, or JSON Schema from captured request bodies. Several requests of one event teach which fields are optional or nullable, so filter with event (or pass requestIds) and write the result into the codebase instead of hand-typing the payload.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug
format	string	no	Output: "typescript" interfaces, "zod" schemas, "pydantic" models, or "json-schema"
name	string	no	Root type name (default: from the detected event, else WebhookPayload)
event	string	no	Only requests whose detected provider event matches, e.g. "invoice.paid" or "push". One event per schema gives the tightest types.
method	string	no	Only requests with this HTTP method
path	string	no	Only requests with this path
requestIds	array	no	Use exactly these requests instead of the latest ones
limit	integer	no	How many of the latest requests to read before filtering

Extract specific JSON fields from a captured request body.

Parameter	Type	Required	Notes
requestId	string	yes	The request ID
jsonPaths	array	yes	Dot-notation JSON paths to extract

Verify the webhook signature on a captured request. When called without provider/secret, returns the server-side pre-computed result (if signing is configured on the endpoint). When called with provider+secret, performs client-side verification.

Parameter	Type	Required	Notes
requestId	string	yes	The captured request ID
provider	string	no	Provider whose signature scheme should be verified. Omit to use stored result.
secret	string	no	Provider credential for client-side verification (for example a shared signing secret, Adyen hex HMAC key, or PayPal webhook ID). Required for non-Discord providers.
publicKey	string	no	Discord application public key. Required for provider=discord.
url	string	no	Original signed URL. Required for Twilio, Square, and HubSpot verification.
method	string	no	Original HTTP method used when the signature was generated. Used by HubSpot v3 verification; the SDK assumes POST when omitted.

Delete captured requests for an endpoint without deleting the endpoint itself.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug to clear
before		no	Only clear requests older than this timestamp or duration like "1h"

Send a webhook directly to any URL with optional provider signing.

Parameter	Type	Required	Notes
url	string	yes	Target URL
method	string	no	HTTP method (default: POST)
headers	object	no	HTTP headers to include
body		no	Request body
provider	string	no	Optional provider template for signing
template	string	no	Provider-specific template preset
event	string	no	Provider event or topic name
secret	string	no	Signing secret. Required for signed provider templates; omit for secretless providers (sendgrid, discord, plaid).

Preview a webhook request without sending it. Returns the exact URL, method, headers, and body.

Parameter	Type	Required	Notes
url	string	yes	Target URL
method	string	no	HTTP method (default: POST)
headers	object	no	HTTP headers to include
body		no	Request body
provider	string	no	Optional provider template for signing
template	string	no	Provider-specific template preset
event	string	no	Provider event or topic name
secret	string	no	Signing secret. Required for signed provider templates; omit for secretless providers (sendgrid, discord, plaid).

List supported webhook providers, templates, and signing metadata.

Parameter	Type	Required	Notes
provider	string	no	Filter to a single provider

Check current request usage, remaining quota, plan, and period end, plus the pooled quota of every subscribed team you belong to.

No parameter schema on file.

Run a full webhook test flow: create endpoint, optionally mock, send, wait, verify, replay, and clean up.

Parameter	Type	Required	Notes
provider	string	no	Optional provider template to use when sending the webhook
event	string	no	Optional provider event or topic name
secret	string	no	Signing secret. Required when provider is set or signature verification is enabled.
mockStatus	integer	no	Optional mock response status to configure before sending
targetUrl	string	no	Optional URL to replay the captured request to after capture
verifySignature	boolean	no	Verify the captured request signature after capture
cleanup	boolean	no	Delete the created endpoint after the flow completes

List the emails an endpoint received at its mailhooks.cc address, newest first: subject, sender, tag, and the one-time code and main link found in each.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug
limit	integer	no	Max emails to return. With tag, subject or from, the newest … emails are searched.
since	number	no	Only emails received after this timestamp in ms
tag	string	no	Only emails sent to {slug}+{tag}@mailhooks.cc (exact, case-sensitive)
subject	string	no	Only emails whose subject contains this text
from	string	no	Only emails from this address (case-insensitive)

Get one captured email: by requestId, or the newest at an endpoint (optionally with a tag). Returns the parsed message with its one-time code and main link.

Parameter	Type	Required	Notes
requestId	string	no	The email's request ID
endpointSlug	string	no	Get the newest email at this endpoint instead (with requestId unset)
tag	string	no	With endpointSlug: only emails sent to this +tag
includeHtml	boolean	no	Include the HTML part (default: false, only its size)

Wait for an email to arrive at an endpoint (for example after triggering a signup), then return it with its one-time code and main link. Use a tag per run to find your own email.

Parameter	Type	Required	Notes
endpointSlug	string	yes	The endpoint slug
tag	string	no	Only emails sent to {slug}+{tag}@mailhooks.cc
subject	string	no	Only emails whose subject contains this text
from	string	no	Only emails from this address (case-insensitive)
timeout		no	How long to wait (default "30s"). Keep it under your MCP client's request timeout, often 60 seconds.
since	number	no	Only emails received after this timestamp in ms (default: five minutes ago)
includeHtml	boolean	no	Include the HTML part (default: false)

Deliver a sample email (with a 6-digit code and a link) to an endpoint, optionally to a +tag address. It counts as one request and skips SMTP, so sender checks do not run on it.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
tag	string	no	Deliver to {slug}+{tag}@mailhooks.cc

List where an endpoint's captures go: its destinations (up to 10) with their URL, kinds, filter, format, templates and timing, and with summary: true their last 24 hours. Owner only.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
summary	boolean	no	Add each destination's last 24 hours

Add a destination for an endpoint's captures: your server (as received or signed JSON), a Slack or Discord channel (chat, optionally your own messageTemplate, throttleSeconds 1 for a heads-up), or a JSON body you shape with bodyTemplate (for Zapier, n8n or your API). filter sends only matching…

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
url	string	yes	https URL on a public host name, or a Slack or Discord webhook

Change a destination: any of its fields; only the ones you pass change. Owner only.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
destinationId	string	yes	The destination's id (from list_destinations)
url	string	no	A new URL

Remove a destination. Deliveries still waiting for it are marked failed; its log stays. Owner only.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
destinationId	string	yes	The destination's id

Dry run of a destination against a captured request: whether its filter lets the request through and the exact request it would send (method, URL, headers, body with placeholders filled in). Nothing is sent. Use destinationId for a saved destination, destination for unsaved fields (on top of the…

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
destinationId	string	no	A saved destination
destination	object	no	Unsaved fields to try
requestId	string	no	A captured request (default: the newest of the kind it takes, or a sample)

Change an endpoint's primary forwarding destination (the one the endpoint's forward* fields stand for): the URL, on or off, which kinds, the format, your own headers, and the advanced options. Only the arguments you pass change. Owner only. For several destinations, filters, templates, throttling…

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
url	string	no	https URL on a public host name, or null to remove it (forwarding must be off)
enabled	boolean	no	Turn forwarding on (needs a URL) or off (fails deliveries still waiting)
http	boolean	no	Forward HTTP requests
email	boolean	no	Forward emails
format	string	no	auto (pick from the URL), as_received (relay HTTP requests unchanged; emails as signed JSON), json (signed JSON envelope for both kinds) or chat (Slack or Discord message)
headers	array	no	Your own headers for every delivery (not chat). Replaces the whole list; [] removes them
appendPath	boolean	no	Add the path after the slug to the URL for relayed requests (default true)
retrySeconds		no	Retry failed deliveries for 86400 (default), 3600 or 0 seconds
keepOrder	boolean	no	One delivery at a time, in capture order (default false)
sentField	string	no	JSON body field with the sender's own timestamp, e.g. publishedAt or data.publishedAt; null clears it

Read (or with rotate: true, replace) the whsec_ secret forwarded deliveries are signed with. Owner only. Treat the value as a credential: put it in the handler's environment, not in code.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
destinationId	string	no	A destination (default: the endpoint's primary destination)
rotate	boolean	no	Replace the secret; every delivery from now on uses the new one

Send the endpoint's newest captured request of a kind (or a sample, or requestId) to a destination once, exactly as a delivery would go out, and report the answer. Works whether it is on or off, and whatever its filter says; nothing is retried or logged.

Parameter	Type	Required	Notes
slug	string	yes	The endpoint slug
destinationId	string	no	A destination (default: the endpoint's primary destination)
kind	string	no	Which kind to send (default: http when the destination takes HTTP requests)
requestId	string	no	With destinationId: a captured request to send

List forwarding deliveries: an endpoint's delivery log with its counts (endpointSlug), or every delivery and try of one captured request or email (requestId). Rows carry senderAt when the request had the sender's own timestamp, so receivedAt - senderAt is the time to reach webhooks.cc.

Parameter	Type	Required	Notes
endpointSlug	string	no	List the endpoint's delivery log
requestId	string	no	List every delivery and try of this request
limit	integer	no	With endpointSlug: max rows
status	string	no	With endpointSlug: all, pending (queued or retrying), failed or skipped (filtered out)
destinationId	string	no	With endpointSlug: only this destination
before	string	no	With endpointSlug: a row's cursor, to list older rows

Forward again with the current settings: one captured request or email (requestId; to every destination that takes it, or with destinationId to that one whatever its filter says), or every request whose latest delivery failed (endpointSlug, optionally only destinationId, oldest first, up to 1,000…

Parameter	Type	Required	Notes
requestId	string	no	The request or email to send again
endpointSlug	string	no	Send every failed delivery of this endpoint again
destinationId	string	no	Only this destination

Describe all available SDK operations, parameters, and types.

No parameter schema on file.

Free

$0 forever

Every tool, no call limit
No card, and mcprush charges nothing for it
Source published under MIT
Runs on your machine — nothing of it reaches our gateway
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install webhooks.cc or to call it, at any volume.

ATrust score 96 / 100

Release 1.15.1 · scanned 29 Oct 2026

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score96

Findings1 threat · 3 capability

Capabilitymoderate

Coveragesource

Verificationrepo

Surface digestd2f1a3ebb2585b5900e0305e25eefb0839e55b43dc745fe91f0ebe1906820e66

Score vectorthreat 100 → client 96

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
verification-discount	repo	publisher verification (public source) — no provenance, but the source is public and inspectable	−1
coverage-honesty	source	inspection depth (source) — how much of the target the scan could see	−0

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

Tool surfaceread

Implementation sourceread

Package metadataread

Live transportnot available

Tools were statically extracted from the published source (49 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
create_endpoint	external-sink	external-sink: keyword "webhook"
list_endpoints	no tags
list_teams	no tags
list_team_members	no tags
share_endpoint	no tags
unshare_endpoint	no tags
get_endpoint	no tags
update_endpoint	no tags
preview_response	no tags
delete_endpoint	external-sink	external-sink: keyword "webhook"
create_endpoints	external-sink	external-sink: keyword "webhook"
delete_endpoints	external-sink	external-sink: keyword "webhook"
send_webhook	external-sink	external-sink: keyword "webhook"
list_requests	no tags
search_requests	no tags
count_requests	no tags
get_request	no tags
wait_for_request	no tags
wait_for_requests	no tags
replay_request	no tags
render_email	no tags
compare_requests	no tags
generate_payload_schema	no tags
extract_from_request	no tags
verify_signature	external-sink	external-sink: keyword "webhook"
clear_requests	no tags
send_to	external-sink	external-sink: keyword "webhook"
preview_webhook	external-sink	external-sink: keyword "webhook"
list_provider_templates	no tags
get_usage	no tags
test_webhook_flow	external-sink	external-sink: keyword "webhook"
list_emails	no tags
get_email	no tags
wait_for_email	no tags
send_test_email	no tags
list_destinations	no tags
add_destination	no tags
update_destination	no tags
remove_destination	no tags
preview_destination	no tags
configure_forwarding	no tags
get_forwarding_secret	no tags
test_forwarding	no tags
list_deliveries	no tags
redeliver	no tags
describe	no tags
connect_account	no tags
wait_for_connection	no tags
about_sandbox	no tags

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digestd2f1a3ebb2585b59

Scanned2026-10-29

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

webhooks.cc MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also