Hookline
Sign up

Catch every webhook. Replay anything. Pipe it to localhost.

Hookline gives you a URL that captures any HTTP request, shows it live, lets you inspect, replay and forward it, and streams it to your machine through a CLI tunnel.

Get a webhook URLRead the docs

No account needed. It lasts 24 hours.

Terminal
$ hookline listen k3Jx9QpL2mWa --forward http://localhost:3000/api/webhooks
✓ Forwarding https://hooks.example.com/h/k3Jx9QpL2mWa → http://localhost:3000/api/webhooks
12:04:31 POST /h/k3Jx9QpL2mWa/stripe  → 200  38 ms  payment_intent.succeeded
12:04:33 POST /h/k3Jx9QpL2mWa/stripe  → 200  21 ms  checkout.session.completed
12:05:02 POST /h/k3Jx9QpL2mWa/github  → 500  112 ms  push
12:05:40 POST /h/k3Jx9QpL2mWa/github (replay)  → 200  44 ms  push

Everything between the sender and your code

  • Capture

    A URL that accepts every method on any sub-path and stores headers, query, body, source and timing.

  • Live inbox

    Requests appear within about 100 ms, and the stream resumes where it left off after a disconnect.

  • Replay

    Send any request again as captured, or edit the method, headers and body first.

  • Forward

    Route to destinations with filters, durable retries with backoff and a full attempt log.

  • Tunnel

    hookline listen pipes requests to localhost, and sync mode returns your response to the sender.

  • Verify

    Built-in signature checks for Stripe, GitHub, Shopify, Slack, Standard Webhooks and Discord.

How it works

  1. 01

    Get a URL

    Create an endpoint in one click, or with hookline endpoints create. Paste it wherever webhooks are configured.

  2. 02

    Watch it arrive

    Every request lands in the inbox live, with headers masked, the body pretty-printed and the signature checked.

  3. 03

    Send it where it matters

    Tunnel it to localhost, forward it to staging with retries, or replay it after you fix the bug.

Built for payloads that carry secrets

Webhooks carry tokens, emails and payment data. Hookline masks sensitive headers until you reveal them, records every reveal in the audit log, encrypts signing secrets at rest and refuses to forward to internal networks.

How Hookline protects your data
Signatures verified at capture
  • Stripe
  • GitHub
  • Shopify
  • Slack
  • Standard Webhooks
  • Discord
  • any HMAC-SHA256

Free to start, open source forever

Use the hosted service, or run the whole stack yourself under the GNU GPL v3.

See pricingView the source