MCP serverco.kymac.inbox/webhook-inbox

Ephemeral HTTPS inbox for bots: mint URL, capture POSTs, list JSON.

Ephemeral HTTPS inbox for bots: mint URL, capture POSTs, list JSON. TEST. https://inbox.kymac.co

UNRATEDActivestreamable-httpinbox.kymac.co

Overview

Score?

UNRATED 0.037

of what a free look can see, on 8 looks

Looks

last 1 day ago

Tools

More info

URL

inbox.kymac.co/mcp

streamable-http

Says it is

co.kymac.inbox/webhook-inbox 0.4.1

protocol 2025-03-26

In the record since

16 days ago

Among servers18,413 with a card

0median 0.606 · this server 0.037 · highest on record 0.8561

Toolsfrom sha256:48293424e5…024479

The tools this server lists, read out of the definition it returned
Tool	Schema
capture_inbox Public capture (POST /c/{id}). No API key. No debit. Not an install entry. Stores raw body + headers for list_inbox_events. Rejects revoked (410 inbox_revoked) or expired (410 inbo	input · no output
checkout_credits Stripe TEST PaymentIntent for a pack (POST /credits/checkout). Intent only — returns credits_pending; credits are not granted or spendable until confirm_credits succeeds. Requires	input · no output
confirm_credits Confirm a TEST PaymentIntent with Stripe test card pm_card_visa (POST /credits/confirm). This is when credits become granted/spendable (appends credit.purchase with credits_added).	input · no output
credit_balance Derived prepaid balance for this caller_id (GET /credits/balance).	input · no output
credit_events Append-only Ledger events for this caller_id (GET /credits/events): credit.grant (first_key), credit.purchase, credit.debit reason=inbox_mint, optional credit.balance_snapshot.	input · no output
health Public readiness (GET /health): billing (test\|live\|gated) and runner_ready. No key.	input · no output
issue_key Mint a caller key (POST /keys). Bot install starts at GET https://inbox.kymac.co/llms.txt (sole advertised entry). Secret whi_… is returned once. Prefer Authorization: Bearer; X-AP	input · no output
list_credit_packs Prepaid TEST packs (GET /credits/packs). checkout_credits is intent only; credits grant after confirm_credits.	input · no output
list_inbox_events Owner list (GET /inbox/{id}/events). Returns captured POSTs as JSON (headers + body). Does not debit. Other callers see 404.	input · no output
mint_inbox Mint a capture URL (POST /inbox). Install via GET https://inbox.kymac.co/llms.txt only. Prefer Authorization: Bearer; X-API-Key is an alias. First key includes 1 free credit. Quote	input · no output
quote_credits Dry-run cost for an op without debit (GET /credits/quote?op=inbox). Returns cost, balance, and would_succeed.	input · no output
revoke_inbox Stop further captures (DELETE /inbox/{id}). Does not refund the mint debit. Owner only.	input · no output
revoke_key Invalidate the presented secret (POST /keys/revoke). Same id is revoked; old secret then fails 401 invalid_api_key. Prefer Authorization: Bearer; X-API-Key is an alias only. No ops	input · no output
rotate_key Replace the presented secret (POST /keys/rotate). Same id/caller_id and credits. New whi_… is returned once. Old secret then fails 401 invalid_api_key. Prefer Authorization: Bearer	input · no output
verify_key Confirm WEBHOOK_INBOX_API_KEY or Authorization: Bearer (GET /keys/verify). X-API-Key is an alias only. Does not echo the secret.	input · no output

Verify it yourselfnpx teppi-check https://inbox.kymac.co/mcpcurl -s https://api.teppi.xyz/v1/trust/mcp/mcs_01M2SHA38MAFGXWJ5PFMG0EWGX