Webhook inspector

You get a URL. Point a webhook at it and every request that arrives is shown here in full, including headers and body. Useful when a payment or messaging provider says it sent something and your handler disagrees.

Authorization, Cookie and API key headers are redacted before storage, since a captured webhook is exactly the kind of thing people paste into a chat. Captures are held in the server’s memory, so this works on a single long-lived instance. On a serverless platform each request may land on a different instance and captures will appear to vanish; point the same interface at Redis if you need it there.