circleci-webhooks
Receive and verify CircleCI outbound webhooks. Use when setting up a CircleCI webhook handler, debugging `circleci-signature` verification, or handling the `workflow-completed`…
Plugin bundle · by Hookdeck
About
circleci-webhooks is a plugin bundle for AI coding tools published by Hookdeck. Marketplaces we read that list it: 1 (Community GitHub marketplaces). We first saw it on 2026-10-21 and have recorded no change since. As of our marketplace pass on 2026-10-21.
Receive and verify CircleCI outbound webhooks. Use when setting up a CircleCI webhook handler, debugging `circleci-signature` verification, or handling the `workflow-completed` and `job-completed` events CircleCI sends when a workflow or job reaches a terminal state. CircleCI signs the raw body with HMAC-SHA256 and sends a hex digest in a comma-separated versioned list (`v1=<hex>`) — only the latest version (`v1`) should ever be checked. Not Circle (circle.com, USDC/Circle Mint, ECDSA `X-Circle-Signature`) — unrelated company. Not CircleCI custom webhooks, which are inbound pipeline triggers going the other direction.
What it asks for
- Installs as a plugin bundle
None of the marketplaces we read publishes its tools or the settings it asks for.
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Works with
- Claude Code
From the marketplaces that list it and the MCP transport it declares, as each client documents them. We do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a Claude Code plugin
Built from what Community GitHub marketplaces declares.
/plugin marketplace add hookdeck/webhook-skills
/plugin install circleci-webhooks@webhook-skillsWhere it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Community marketplace hookdeck/webhook-skills (Open the source on GitHub) | Listed | not stated | Forks (GitHub): 16 Stars (GitHub): 92 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
Listed in one community marketplace
| Marketplace | Repository | Stars (GitHub) |
|---|---|---|
| webhook-skills | hookdeck/webhook-skills | 92 |
What changed
- Became a product we track
- Community GitHub marketplaces: appeared
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Verify Vercel webhook signatures (HMAC-SHA1, x-vercel-signature), handle deployment and project events.
-
Receive and verify Pipedream Connect webhooks. Use when setting up a Pipedream Connect trigger webhook handler, verifying the x-pd-signature header (t=<timestamp>,v1=<hex>…
-
Verify GitHub webhook signatures (HMAC-SHA256, X-Hub-Signature-256), handle push, pull_request, and issue events.
-
Verify GitLab webhook signatures (signing token, Standard Webhooks HMAC-SHA256) or legacy X-Gitlab-Token, handle push, merge_request, issue, and pipeline events.
-
Hookwarden — Webhook Integrity
Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic.
-
Verify Google Gemini API webhook signatures (Standard Webhooks HMAC + dynamic RS256 JWKS modes), handle batch and long-running operation events.
-
Receive and verify Svix webhooks (the Standard Webhooks scheme used by many providers). Use when setting up a Svix webhook handler, debugging svix-id / svix-timestamp…
-
hookdeck-event-gateway-webhooks
Verify x-hookdeck-signature (HMAC-SHA256 base64) and handle webhooks forwarded by the Hookdeck Event Gateway.
-
Webhook patterns, signature verification, and retry logic expert
-
Verify Bitbucket webhook signatures (X-Hub-Signature, HMAC-SHA256), handle repo push and pull request events.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Receive webhooks from any provider (GitHub, Stripe, CI pipelines, monitoring tools) in your Claude Code session via Hookdeck. Hookdeck captures, inspects, and forwards webhook…
-
Webhooks and cron scheduling for Claude Code. Receive events from external services like GitHub, Stripe, and Sentry, route them to the right session, and let Claude act on them…
-
Ed25519-signs every tool call and appends to a hash-chained, tamper-evident audit log. Zero config — signing starts immediately after install. No native dependencies (embedded…
-
Connect AI agents to external APIs with zero credential management. The OneCLI gateway transparently proxies all HTTPS traffic and injects stored credentials (OAuth tokens, API…
-
GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3…
Has a listing on Claude Code: claude-plugins-official (5)
-
Enhance code quality and security through PagerDuty risk scoring and incident correlation. Score pre-commit diffs against historical incident data and surface deployment risk…
-
Skills for using the Sentry CLI to interact with Sentry from the command line
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Agent skill for interacting with TeamCity CI/CD using the teamcity CLI. Enables Claude to explore builds, view logs, start jobs, manage queues, agents, and more.
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
Has a listing on Claude: knowledge-work-plugins (5)
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Inspect recent issues and events in Sentry from Codex.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Codex Security workflows for security scans, analysis, and investigation.
Has a listing on Community GitHub marketplaces (5)
-
Verify Vercel webhook signatures (HMAC-SHA1, x-vercel-signature), handle deployment and project events.
-
Receive and verify Pipedream Connect webhooks. Use when setting up a Pipedream Connect trigger webhook handler, verifying the x-pd-signature header (t=<timestamp>,v1=<hex>…
-
Verify GitHub webhook signatures (HMAC-SHA256, X-Hub-Signature-256), handle push, pull_request, and issue events.
-
Verify GitLab webhook signatures (signing token, Standard Webhooks HMAC-SHA256) or legacy X-Gitlab-Token, handle push, merge_request, issue, and pipeline events.
-
Verify Google Gemini API webhook signatures (Standard Webhooks HMAC + dynamic RS256 JWKS modes), handle batch and long-running operation events.
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Browse repository GitHub Actions workflows, inspect recent runs, and trigger manual workflow_dispatch runs from a Copilot canvas.
-
Navigate pull requests and securely explore GitHub Actions artifacts, including test results, static sites, terminal recordings, and source files.
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Capture, annotate, and embed screenshots and animated GIF demos in pull request descriptions. Includes Playwright-based UI capture, PIL image annotations, PR embedding workflows…
-
A focused set of prompts, instructions, and a chat mode to help triage incidents and respond quickly with DevOps tools and Azure resources.
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
-
power-automate
Build, edit, run, and debug Power Automate cloud flows via the FlowAgent MCP server — connection lifecycle, surgical edits, copy across environments, run management, and validated…
Has a listing on Cursor: cursor/plugins (5)
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
Scaffold and validate new agent plugins.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
Has a listing on Docker MCP Catalog (5)
-
buildkite-mcp-server io.github.buildkite/buildkite-mcp-server
MCP server exposing Buildkite API data (pipelines, builds, jobs, tests) to AI tooling and editors.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
-
MCP server for AI access to SmartBear tools, including BugSnag, Reflect, Swagger, PactFlow, QTM4J.
-
Give your AI agents trusted access to the full Postman platform.
Has a listing on Official MCP Registry (5)
-
Hookwarden — Webhook Integrity
Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic.
-
Generates deterministic webhook HMAC-SHA256 fixtures and optionally verifies a supplied signature...
-
Public webhook inboxes for agents. Receive OAuth redirects, payment callbacks and CI notifications.
-
Public webhook relay with signed observations, retries and verified receivers. Self-service.
-
Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…).
Has a listing on npm registry (MCP servers) (5)
-
Live AWS, database & Kafka infrastructure context for AI coding assistants via MCP.
-
dsh-verify io.github.263311487-ux/dsh-verify
Agent-built web app quality gate. Real browser is the judge. PASS/FAIL with receipts.
-
guardvibe io.github.goklab/guardvibe
Deterministic security layer your AI can't be. 611 rules, 39 tools, CLI + doctor + host audit.
-
insumer com.insumermodel/insumer
Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.
-
Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Want this mark on your plugin in our catalog?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record, and you can show this mark on the card, with live banners for your site and README. How verification works
You also get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and its remote endpoint goes on monitoring as a web service.
Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.