HMAC-signed webhook delivery for autonomous agents — retries, dead letter queues, event subscriptions, verification. MCP server.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 14 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
delivery_cancel
-
delivery_get
-
delivery_list
-
delivery_retry
-
endpoint_add
-
endpoint_delete
-
endpoint_get
-
endpoint_list
-
endpoint_update
-
health_check
-
process_pending
-
stats
-
webhook_batch_send
-
webhook_send
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit df842ad · analyzer v33 · 4w ago
danger signals1
- suspicious endpoint discord.com nyx-builds-agent-webhook-df842ad/src/agent_webhook/templates.py :122
url_placeholder="https://discord.com/api/webhooks/XXXX/XXXX",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 48
filesystem 13
- fs nyx-builds-agent-webhook-df842ad/src/agent_webhook/cli.py :9
from pathlib import Path - fs nyx-builds-agent-webhook-df842ad/src/agent_webhook/import_export.py :341
with open(file_path, "w") as f: - fs nyx-builds-agent-webhook-df842ad/src/agent_webhook/store.py :7
from pathlib import Path - fs nyx-builds-agent-webhook-df842ad/src/agent_webhook/store_sqlite.py :9
from pathlib import Path - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_circuit_breaker.py :314
os.remove("test_cb_block.json") - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_cli_v050.py :143
with open(file_path) as f: - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_import_export.py :130
with open(file_path) as f: - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_signature_verification.py :434
os.remove("test_relay_verify_valid.json") - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_store.py :5
from pathlib import Path - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_v060_features.py :9
from pathlib import Path - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_v070_features.py :9
from pathlib import Path - fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_v100_fanout.py :18
from pathlib import Path
show 1 more
- fs (weak) nyx-builds-agent-webhook-df842ad/tests/test_v100_features.py :9
from pathlib import Path
network 3
- net nyx-builds-agent-webhook-df842ad/src/agent_webhook/engine.py :13
import httpx - net (weak) nyx-builds-agent-webhook-df842ad/tests/test_rest_api.py :6
from httpx import ASGITransport, AsyncClient - net (weak) nyx-builds-agent-webhook-df842ad/tests/test_worker.py :9
import httpx
database 1
- db nyx-builds-agent-webhook-df842ad/src/agent_webhook/store_sqlite.py :6
import sqlite3
tool registrations 14
- endpoint_add nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :73
- endpoint_list nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :124
- endpoint_get nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :135
- endpoint_update nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :144
- endpoint_delete nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :171
- webhook_send nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :180
- webhook_batch_send nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :196
- delivery_list nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :211
- delivery_get nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :224
- delivery_retry nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :233
- delivery_cancel nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :242
- process_pending nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :251
show 2 more
- health_check nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :256
- stats nyx-builds-agent-webhook-df842ad/src/agent_webhook/mcp_server.py :265
declared dependencies 11
- mcp@>=1.0
- pydantic@>=2.0
- httpx@>=0.25
- click@>=8.0
- rich@>=13.0
- fastapi@>=0.100
- uvicorn@>=0.20
- pytest@>=7.0
- pytest-asyncio@>=0.21
- pytest-cov@>=4.0
- respx@>=0.20