get_webhook_event

Returns the full record for a single webhook receipt. Payload is PII-redacted before returning — emails, phone numbers, full names, addresses, IPs, etc. become [redacted]. The list of redacted fields is in the response footer.

PII handling

Redaction is mandatory at this MCP layer. The schema includes an include_pii flag reserved for future use, but it is currently always denied. Don’t depend on getting raw payloads here — for PII-sensitive debugging, use the in-product webhook log with appropriate access.

When to use

“Show me the full payload for webhook 78421.”
Investigating a specific webhook fire after list_recent_webhooks narrowed it down.

Parameters

Parameter	Type	Required	Description
`webhook_id`	integer	Yes
`format`	string	No	`json` (default), `csv`, or `yaml`.

Output

{
  "id":          78421,
  "status":      "success",
  "source":      "shopify",
  "received_at": "2026-05-15T14:08:00Z",
  "errors":      null,
  "payload":     { "id": 5429831, "email": "[redacted]", "customer": { "first_name": "[redacted]", "last_name": "[redacted]" }, "total_price": "129.00" },
  "raw_data":    { ... }
}

The footer includes # redacted_fields: ... listing every dot-path that got redacted. If prompt-injection patterns were detected in the payload (e.g. “ignore previous instructions” inside a field value), a # warning: line is added — treat those fields as opaque data.

Get Started

Connecting Clients

Tools

Resources

Prompts

PII handling

When to use

Parameters

Output

​PII handling

​When to use

​Parameters

​Output

PII handling

When to use

Parameters

Output