WebhookLab
Dashboard

site key: webhooklab

PlatPhorm Webhook Lab

Webhook simulator, signature workbench, delivery tracker, contract validator, MCP server, and agent-operable PlatPhorm surface.

Canonical URL
https://webhooks.platphormnews.com
Environment
production
Version
1.0.0
Last checked
2026-05-20T19:55:44.198Z
Health status
degraded

Capability Cards

Webhook Simulation

Generate webhook event payloads and run public-safe local simulations without persistent delivery.

working
Access
public-safe
MCP tool
generate_test_payload
Human
/lab
API
/api/v1/agent
Docs

Signature Generation

Generate HMAC signatures for test webhook payloads without persisting raw secrets.

working
Access
public-safe
MCP tool
generate_signature
API
/api/v1/signatures/generate
Docs

Signature Verification

Verify webhook signatures against payloads and timestamp tolerance without persisting raw secrets.

working
Access
public-safe
MCP tool
verify_signature
API
/api/v1/signatures/verify
Docs

Endpoint Registration

Register webhook receiver endpoints with SSRF-safe URL validation.

working
Access
protected + protected
MCP tool
register_webhook_endpoint
API
/api/v1/endpoints
Docs

Event Creation and Listing

Create persistent webhook events with protected dispatch; public reads are redacted.

working
Access
public-safe + protected
MCP tool
create_webhook_event
API
/api/v1/events
Docs

Delivery Tracking

Inspect webhook delivery and attempt state with public-safe redaction.

working
Access
public-safe
MCP tool
list_deliveries
API
/api/v1/deliveries
Docs

Delivery Replay

Replay webhook deliveries with protected authorization and explicit operator confirmation.

working
Access
protected + protected
MCP tool
replay_webhook
API
/api/v1/deliveries/{id}/replay
Docs

Contract Creation

Create and manage persistent webhook contracts.

working
Access
protected + protected
MCP tool
create_contract
API
/api/v1/contracts
Docs

Payload Validation

Validate webhook payloads against known contracts or demo schemas.

working
Access
public-safe
MCP tool
validate_payload
API
/api/v1/contracts/{id}/validate
Docs

Vercel Webhook Receiver

Receive Vercel webhook events and verify configured Vercel signatures.

working
Access
protected + protected
MCP tool
receive_test_webhook
Human
/docs
API
/api/webhooks
Docs

MCP Integration

Expose webhook tools, resources, and prompts through JSON-RPC MCP.

working
Access
public-safe
MCP tool
none
API
/api/mcp
Docs

Agent Endpoint

Expose safe agent actions with protected mutations gated by PLATPHORM_API_KEY.

working
Access
public-safe + protected
MCP tool
none
API
/api/v1/agent
Docs

Docs and OpenAPI

Publish human API docs and parseable OpenAPI metadata for public and protected routes.

working
Access
public-safe
MCP tool
none
Human
/docs
API
/api/docs
Docs

llms, Sitemap, Robots, Feed

Expose public-safe discovery files for agents and crawlers.

working
Access
public-safe
MCP tool
none
API
/llms-index.json
Docs

Route Verification Panel

Route typeExpected URLCanonical URLStatusSourceCommand
home/https://webhooks.platphormnews.com/workingroute
lab/labhttps://webhooks.platphormnews.com/labworkingroute
dashboard/dashboardhttps://webhooks.platphormnews.com/dashboardworkingroute
docs/docshttps://webhooks.platphormnews.com/docsworkingroute
explore/explorehttps://webhooks.platphormnews.com/exploreworkingroute
changelog/changeloghttps://webhooks.platphormnews.com/changelogworkingroute
status/statushttps://webhooks.platphormnews.com/statusworkingroute
capabilities/capabilitieshttps://webhooks.platphormnews.com/capabilitiesworkingroute
endpoints/endpointshttps://webhooks.platphormnews.com/endpointsworkingroute
events/eventshttps://webhooks.platphormnews.com/eventsworkingroute
deliveries/deliverieshttps://webhooks.platphormnews.com/deliveriesworkingroute
replays/replayshttps://webhooks.platphormnews.com/replaysworkingroute
contracts/contractshttps://webhooks.platphormnews.com/contractsworkingroute
signatures/signatureshttps://webhooks.platphormnews.com/signaturesworkingroute
templates/templateshttps://webhooks.platphormnews.com/templatesworkingroute
integrations/integrationshttps://webhooks.platphormnews.com/integrationsworkingroute
integrations-spec/integrations/spechttps://webhooks.platphormnews.com/integrations/specworkingroute
integrations-evals/integrations/evalshttps://webhooks.platphormnews.com/integrations/evalsworkingroute
integrations-sandbox/integrations/sandboxhttps://webhooks.platphormnews.com/integrations/sandboxworkingroute
integrations-agentui/integrations/agentuihttps://webhooks.platphormnews.com/integrations/agentuiworkingroute
integrations-monitor/integrations/monitorhttps://webhooks.platphormnews.com/integrations/monitorworkingroute
clients-cli/clients/clihttps://webhooks.platphormnews.com/clients/cliworkingroute
faq/faqhttps://webhooks.platphormnews.com/faqworkingroute
api-docs/api/docshttps://webhooks.platphormnews.com/api/docsworkinggenerated
openapi-yaml/openapi.yamlhttps://webhooks.platphormnews.com/openapi.yamlworkinggenerated
openapi-json/openapi.jsonhttps://webhooks.platphormnews.com/openapi.jsonworkinggenerated
llms-txt/llms.txthttps://webhooks.platphormnews.com/llms.txtworkinggenerated
llms-full-txt/llms-full.txthttps://webhooks.platphormnews.com/llms-full.txtworkinggenerated
llms-index-json/llms-index.jsonhttps://webhooks.platphormnews.com/llms-index.jsonworkinggenerated
robots-txt/robots.txthttps://webhooks.platphormnews.com/robots.txtworkinggenerated
well-known-mcp-json/.well-known/mcp.jsonhttps://webhooks.platphormnews.com/.well-known/mcp.jsonworkinggenerated
well-known-agents-json/.well-known/agents.jsonhttps://webhooks.platphormnews.com/.well-known/agents.jsonworkinggenerated
well-known-agent-policy-json/.well-known/agent-policy.jsonhttps://webhooks.platphormnews.com/.well-known/agent-policy.jsonworkinggenerated
well-known-ai-policy-json/.well-known/ai-policy.jsonhttps://webhooks.platphormnews.com/.well-known/ai-policy.jsonworkinggenerated
well-known-trust-json/.well-known/trust.jsonhttps://webhooks.platphormnews.com/.well-known/trust.jsonworkinggenerated
well-known-security-txt/.well-known/security.txthttps://webhooks.platphormnews.com/.well-known/security.txtworkinggenerated
apiCapabilities/api/capabilitieshttps://webhooks.platphormnews.com/api/capabilitiesworkinggenerated
openapi/api/openapi.jsonhttps://webhooks.platphormnews.com/api/openapi.jsonworkingopenapi
mcp/api/mcphttps://webhooks.platphormnews.com/api/mcpworkingmcp
agent/api/v1/agenthttps://webhooks.platphormnews.com/api/v1/agentworkingroute
health/api/healthhttps://webhooks.platphormnews.com/api/healthworkinghealth
v1Health/api/v1/healthhttps://webhooks.platphormnews.com/api/v1/healthworkinghealth
eventsApi/api/v1/eventshttps://webhooks.platphormnews.com/api/v1/eventsworkingroute
endpointsApi/api/v1/endpointshttps://webhooks.platphormnews.com/api/v1/endpointsworkingroute
deliveriesApi/api/v1/deliverieshttps://webhooks.platphormnews.com/api/v1/deliveriesworkingroute
contractsApi/api/v1/contractshttps://webhooks.platphormnews.com/api/v1/contractsworkingroute
templatesApi/api/v1/templateshttps://webhooks.platphormnews.com/api/v1/templatesworkingroute
integrationsApi/api/v1/integrationshttps://webhooks.platphormnews.com/api/v1/integrationsworkingroute
deliveryJobsApi/api/v1/delivery-jobshttps://webhooks.platphormnews.com/api/v1/delivery-jobsworkingroute
feed/feed.xmlhttps://webhooks.platphormnews.com/feed.xmlworkinggenerated
rss/rss.xmlhttps://webhooks.platphormnews.com/rss.xmlworkinggenerated
sitemapIndex/sitemap-index.xmlhttps://webhooks.platphormnews.com/sitemap-index.xmlworkinggenerated
sitemapMain/sitemap-main.xmlhttps://webhooks.platphormnews.com/sitemap-main.xmlworkinggenerated

Webhook Workflow Smoke Tests

Public-safe checks only. They do not persist endpoint registrations, send external webhooks, replay deliveries, or store signing secrets.

Check health

GET /api/health

Not run in this browser session.

Fetch OpenAPI

GET /api/docs

Not run in this browser session.

Fetch llms.txt

GET /llms.txt

Not run in this browser session.

Fetch llms-index.json

GET /llms-index.json

Not run in this browser session.

Fetch robots.txt

GET /robots.txt

Not run in this browser session.

Fetch sitemap

GET /sitemap.xml

Not run in this browser session.

Initialize MCP

POST /api/mcp

Not run in this browser session.

List MCP tools

POST /api/mcp

Not run in this browser session.

Generate sample payload

POST /api/v1/agent

Not run in this browser session.

Generate demo signature

POST /api/v1/signatures/generate

Not run in this browser session.

Protected Controls

These require PLATPHORM_API_KEY, explicit protected mode, confirmation, redacted evidence, and SSRF-safe URL validation.

Degraded Feature Panel

Docs, Sheets, and Deck report publishing integrations

medium
Classification
degraded_backend
Expected
Protected report tools should create durable docs, sheets, or deck artifacts after PLATPHORM_API_KEY confirmation.
Actual
The MCP handlers currently return explicit degraded responses for docs, sheets, and deck publishing integrations.
Suggested fix
Wire protected report tools to the canonical Docs, Sheets, and Decks APIs with dry-run evidence first.

Agent Handoff Panel

Inspect site

public-safe

npx @platphormnews/platphormctl site inspect https://webhooks.platphormnews.com --json --trace

Verify routes

public-safe

npx @platphormnews/platphormctl site routes https://webhooks.platphormnews.com --json --trace

Validate OpenAPI

public-safe

npx @platphormnews/platphormctl site openapi https://webhooks.platphormnews.com --json --trace

Inspect llms discovery

public-safe

npx @platphormnews/platphormctl site llms https://webhooks.platphormnews.com --json --trace

Validate sitemap

public-safe

npx @platphormnews/platphormctl site sitemap https://webhooks.platphormnews.com --json --trace

Initialize MCP

public-safe

npx @platphormnews/platphormctl mcp initialize https://webhooks.platphormnews.com/api/mcp --json --trace

List MCP tools

public-safe

npx @platphormnews/platphormctl mcp tools https://webhooks.platphormnews.com/api/mcp --json --trace

Network validation

public-safe

npx @platphormnews/platphormctl --include webhooks.platphormnews.com network validate --best-effort --evidence --json --trace

Generate degraded docs

public-safe

npx @platphormnews/platphormctl docs degraded generate --from-route-map <route-map.json> --json --trace

Protected validation

requires PLATPHORM_API_KEY

PLATPHORM_API_KEY=... npx @platphormnews/platphormctl --include webhooks.platphormnews.com network validate --protected --best-effort --evidence --json --trace