78trust / 100

Porch

by porch.okibi.ai in Other

MCP serverPassing, checked 9 h ago

Public URLs for AI agents to catch webhooks, OAuth redirects, job callbacks and approval clicks.

https://porch.okibi.ai/mcp
Tools
10
open to any client
Uptime
100%
last 30 days
Response time
393 ms
466 ms slowest 5%
Last check
Passed
9 h ago, next any minute now

Scan it nowHow to connect

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "porch": {
      "type": "http",
      "url": "https://porch.okibi.ai/mcp"
    }
  }
}

10 tools

  • create_inbox

    Get a public URL that records every HTTP request sent to it, plus the inbox_key that all other tools need. Use it as a webhook endpoint, OAuth redirect URI, job callback URL, or with create_approval_link. The key is shown only once: keep it.

  • get_inbox

    Show an inbox: its URL, expiry, request count, latest request id, configured responses and approval links.

  • list_requests

    List captured requests as summaries, oldest first. Without "after" you get the most recent ones; with "after" you page forward from that request id. Use get_request for headers and body. Does not move wait_for_request's position.

  • get_request

    Full details of one captured request: method, path, parsed query, headers, body (UTF-8 text or base64), plus "json" or "form" when the body parses. Pass replay_to to also get a byte-exact curl command and fetch recipe for delivering it somewhere Porch cannot reach, such as…

  • wait_for_request

    Block until a request arrives, then return it in full (same shape as get_request). By default it returns the next request not yet returned by wait_for_request for this inbox and these filters, so nothing that arrives between calls is missed, including requests that came in…

  • set_response

    Choose what Porch sends back to callers, for the whole inbox or a sub-path: status, headers and body. Useful for webhook verification handshakes, or a friendly page after an OAuth redirect (or a 302 with a Location header). Pages are served in a browser sandbox: scripts and…

  • create_approval_link

    Make a link to send a person when you need their decision ("Deploy to production?"). It opens a page with your title, message and one button per choice. Only a button press counts, so link previews and email scanners cannot answer by accident, only the first answer is accepted…

  • wait_for_approval

    Block until the person answers an approval link, then return their choice. Returns at once if it was already answered. On timeout, call it again.

  • clear_requests

    Delete all captured requests from the inbox. The URL, key and response settings stay the same.

  • delete_inbox

    Delete the inbox and everything it captured. Its URL starts returning 404 and the key stops working.

Security scan

No findings

We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTime
9 h agoPassed200432 ms
20 h agoPassed200392 ms
30 h agoPassed200366 ms
39 h agoPassed200462 ms
2 days agoPassed200451 ms
Show 7 older checks
2 days agoPassed200466 ms
3 days agoPassed200373 ms
3 days agoPassed200393 ms
4 days agoPassed200390 ms
4 days agoPassed200394 ms
4 days agoPassed200440 ms
5 days agoPassed200379 ms