webhook

<p align="center"> <a href="https://www.webhook.co"><img src="https://www.webhook.co/logo.png" alt="webhook.co" width="120" height="120" /></a> </p> <h1 align="center">webhook.co</h1> <p align="center"> <strong>A free, permanent, signed webhook URL you can inspect and replay to localhost — from the CLI, API, dashboard, or MCP.</strong> </p> <p align="center"> <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-blue.svg" alt="License: Apache-2.0" /></a> <a href="https://www.npmjs.com/package/@webhook-co/cli"><img src="https://img.shields.io/npm/v/%40webhook-co%2Fcli?label=cli&logo=npm" alt="CLI on npm" /></a> <a href="https://github.com/webhook-co/webhook/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/webhook-co/webhook/ci.yml?branch=main&label=ci" alt="CI" /></a> <a href="https://docs.webhook.co"><img src="https://img.shields.io/badge/docs-docs.webhook.co-informational" alt="Docs" /></a> </p>

webhook.co captures the webhooks other services send you, so you can see exactly what arrived, check the signature, and replay it to your local dev server without redeploying. The same operations run from the CLI, the REST API, the web dashboard, and an MCP server.

• Receive — a stable, signed URL on a dedicated apex (https://wbhk.my/<token>). No expiring tunnels.
• Inspect — every request, headers and body, with a clear signature result.
• Replay to localhost — forward any captured event to http://localhost:3000 with one command.
• Deliver — send events on to your own destinations, in order, with retries.

Want to see it work first? Open webhook.co/play — send a webhook, watch it land. No signup, nothing to install.

Open source · Apache-2.0 · private by default.

Try it in 60 seconds

Sign in, create an endpoint, forward its webhooks to your machine, and send it a test request. No install needed — this uses npx (Node 22+):

# 1. sign in — opens your browser (GitHub or Google) and creates your free account
npx @webhook-co/cli login

# 2. create an endpoint — it prints an id and your permanent, signed ingest URL:
npx @webhook-co/cli endpoints create orders
#    id          d7e4f8a1-3b60-4c2e-9f15-0a8c6b2e1d94
#    ingest url  https://wbhk.my/whep_8QmZ4tN1p…

# 3. forward that endpoint's events to your local server (leave this running)
npx @webhook-co/cli listen d7e4f8a1-3b60-4c2e-9f15-0a8c6b2e1d94 --forward http://localhost:3000

# 4. in another terminal, send it a test request — or point Stripe, GitHub, Shopify, … at the URL
curl -X POST https://wbhk.my/whep_8QmZ4tN1p… -d '{"hello":"webhook.co"}'

With --forward, each captured event prints one line as it lands on your local server — the event id, the target, the status it returned, and how long it took:

caught up — now tailing live events
forwarded 019f8b88-55f0-7534-9ae9-f9fcfd07758c → http://localhost:3000 · 200 · 8ms
forwarded 019f8b88-6121-72e7-b640-56ecb2b2ffb2 → http://localhost:3000 · 200 · 3ms
forwarded 019f8b88-6c40-7bdf-a81f-7290b2752992 → http://localhost:3000 · 200 · 2ms

Drop --forward and wbhk listen opens a live view of what's arriving instead — one row per event, with the provider it came from and whether its signature checked out:

<p align="center"> <img src=".github/assets/listen-demo.gif" alt="wbhk listen streaming captured webhooks, each row showing the provider and whether its signature verified" width="820" /> </p>

--forward targets must be a full loopback URL (http://localhost:3000, http://127.0.0.1:8080/webhooks). Replay a past event with wbhk replay <event-id> --forward http://localhost:3000.

Prefer a permanent install? Pick one:

brew install webhook-co/tap/wbhk           # Homebrew (macOS / Linux)
npm install -g @webhook-co/cli             # npm — installs the wbhk command
curl -fsSL https://get.webhook.co | sh     # standalone binary, no Node required

Full wal