webhook.co

A free, permanent, signed webhook URL you can inspect and replay to localhost — from the CLI, API, dashboard, or MCP.

`webhook.co` captures the webhooks other services send you, so you can see exactly what arrived, check the signature, and replay it to your local dev server without redeploying. The same operations run from the CLI, the REST API, the web dashboard, and an MCP server. - **Receive** — a stable, signed URL on a dedicated apex (`https://wbhk.my/`). No expiring tunnels. - **Inspect** — every request, headers and body, with a clear signature result. - **Replay to localhost** — forward any captured event to `http://localhost:3000` with one command. - **Deliver** — send events on to your own destinations, in order, with retries. **Want to see it work first?** Open **[webhook.co/play](https://webhook.co/play)** — send a webhook, watch it land. No signup, nothing to install. Open source · Apache-2.0 · private by default. ## Try it in 60 seconds Sign in, create an endpoint, forward its webhooks to your machine, and send it a test request. No install needed — this uses `npx` (Node 22+): ```sh # 1. sign in — opens your browser (GitHub or Google) and creates your free account npx @webhook-co/cli login # 2. create an endpoint — it prints an id and your permanent, signed ingest URL: npx @webhook-co/cli endpoints create orders # id d7e4f8a1-3b60-4c2e-9f15-0a8c6b2e1d94 # ingest url https://wbhk.my/whep_8QmZ4tN1p… # 3. forward that endpoint's events to your local server (leave this running) npx @webhook-co/cli listen d7e4f8a1-3b60-4c2e-9f15-0a8c6b2e1d94 --forward http://localhost:3000 # 4. in another terminal, send it a test request — or point Stripe, GitHub, Shopify, … at the URL curl -X POST https://wbhk.my/whep_8QmZ4tN1p… -d '{"hello":"webhook.co"}' ``` With `--forward`, each captured event prints one line as it lands on your local server — the event id, the target, the status it returned, and how long it took: ```text caught up — now tailing live events forwarded 019f8b88-55f0-7534-9ae9-f9fcfd07758c → http://localhost:3000 · 200 · 8ms forwarded 019f8b88-6121-72e7-b640-56ecb2b2ffb2 → http://localhost:3000 · 200 · 3ms forwarded 019f8b88-6c40-7bdf-a81f-7290b2752992 → http://localhost:3000 · 200 · 2ms ``` Drop `--forward` and `wbhk listen` opens a live view of what's arriving instead — one row per event, with the provider it came from and whether its signature checked out:

wbhk listen streaming captured webhooks, each row showing the provider and whether its signature verified

`--forward` targets must be a full loopback URL (`http://localhost:3000`, `http://127.0.0.1:8080/webhooks`). Replay a past event with `wbhk replay --forward http://localhost:3000`. Prefer a permanent install? Pick one: ```sh brew install webhook-co/tap/wbhk # Homebrew (macOS / Linux) npm install -g @webhook-co/cli # npm — installs the wbhk command curl -fsSL https://get.webhook.co | sh # standalone binary, no Node required ```

Command Palette

Tagged “signature-verification”

Servers

webhook