diff --git a/tools/clis/zapier.js b/tools/clis/zapier.js
index 082583d..ce18223 100755
--- a/tools/clis/zapier.js
+++ b/tools/clis/zapier.js
@@ -122,7 +122,9 @@ async function main() {
     case 'hooks':
       switch (sub) {
         case 'send': {
+          // Sends a POST to a Zapier webhook catch hook URL (e.g. https://hooks.zapier.com/hooks/catch/...)
           if (!args.url) { result = { error: '--url required' }; break }
+          if (!args.url.startsWith('https://')) { result = { error: '--url must use https://' }; break }
           if (!args.data) { result = { error: '--data required (JSON string)' }; break }
           let data
           try {