# webhook_listen_start Start a loopback HTTP listener that turns each verified POST into a Agent View of the PolicyLayer registry record for `webhook_listen_start`. HTML page: https://policylayer.com/tools/io-github-heznpc-iconnect/webhook-listen-start ## Facts - Tool: `webhook_listen_start` - Server: Iconnect (`iconnect-mcp`) — https://policylayer.com/tools/io-github-heznpc-iconnect.md - Install: `npx -y iconnect-mcp` - Homepage: https://github.com/heznpc/iConnect - Risk category: Execute (High risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Rate-limited ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "webhook_listen_start", "arguments": {} } } ``` ## Why webhook_listen_start is rated High This tool executes an HTTP listener and processes incoming webhook data, making it an Execute category tool. It has high severity because a misconfigured webhook listener could be abused to trigger unintended actions on the system via malicious POST requests, or an AI agent could inadvertently create listeners that interfere with system operations. From the tool's own definition: "webhook_listen_start starts a loopback HTTP listener that processes POST requests. This triggers external operations whose effects depend on the content and source of incoming requests." ## Use case AI agents invoke webhook_listen_start to trigger actions in Iconnect. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started. ## Recommended policy (PolicyLayer) Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Iconnect: ```json { "version": "1", "default": "deny", "tools": { "webhook_listen_start": { "limits": [ { "counter": "webhook_listen_start_rate", "window": "minute", "max": 10, "scope": "grant" } ] } } } ``` ## Other tools on Iconnect (296) - `delete_contact` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-contact.md - `delete_event` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-event.md - `delete_note` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-note.md - `delete_photos` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-photos.md - `delete_playlist` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-playlist.md - `delete_reminder` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-reminder.md - `delete_reminder_list` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-reminder-list.md - `delete_shortcut` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/delete-shortcut.md - `memory_forget` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/memory-forget.md - `move_note` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/move-note.md - `remove_from_playlist` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/remove-from-playlist.md - `semantic_clear` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/semantic-clear.md - `spotlight_clear` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/spotlight-clear.md - `trash_file` — Destructive — https://policylayer.com/tools/io-github-heznpc-iconnect/trash-file.md - `activate_tab` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/activate-tab.md - `ai_agent` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/ai-agent.md - `ai_chat` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/ai-chat.md - `ai_plan_metrics` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/ai-plan-metrics.md - `cloudflow_trigger` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/cloudflow-trigger.md - `connect_bluetooth` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/connect-bluetooth.md - `disconnect_bluetooth` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/disconnect-bluetooth.md - `edit_shortcut` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/edit-shortcut.md - `end_tool_session` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/end-tool-session.md - `event_subscribe` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/event-subscribe.md - `generate_image` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/generate-image.md - `generate_text` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/generate-text.md - `gws_raw` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/gws-raw.md - `import_shortcut` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/import-shortcut.md - `install_module_pack` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/install-module-pack.md - `keynote_start_slideshow` — Execute — https://policylayer.com/tools/io-github-heznpc-iconnect/keynote-start-slideshow.md - …and 266 more: https://policylayer.com/tools/io-github-heznpc-iconnect.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-heznpc-iconnect · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-heznpc-iconnect