A webhook inspection and debugging tool. Capture, inspect, replay, and debug webhook requests from any provider with live SSE updates and failure analysis.
- Next.js 16 (App Router) + TypeScript
- Prisma + PostgreSQL (Neon)
- NextAuth v5 with GitHub OAuth
- TailwindCSS + shadcn/ui
- Vitest
- Node.js 20+
- A PostgreSQL database (Neon, Supabase, or local)
- A GitHub OAuth app (Settings → Developer settings → OAuth Apps)
- Clone and install:
npm install- Create
.envfrom.env.exampleand fill in the values:
cp .env.example .envGenerate secrets:
openssl rand -base64 32- Set up the database:
npx prisma db push- Run the dev server:
npm run devOpen http://localhost:3000.
- Webhook capture — Unique URL per endpoint, supports POST/GET/PUT/DELETE/PATCH
- Signature verification — HMAC-SHA256 verification for GitHub webhooks (
x-hub-signature-256header). Support for other providers (Stripe, Shopify, Slack) is planned - Live feed — Real-time request updates via Server-Sent Events
- Request inspector — View headers, body, query params with JSON formatting
- cURL export — Copy any captured request as a curl command
- Failure Lens — Compares failed requests against successful ones to identify root cause
- Replay — Resend captured requests to any URL, with automatic recovery tracking
- SSRF protection — Blocks private IPs, cloud metadata endpoints, and link-local addresses
- Tenant isolation — All data scoped per user, authorization checks on every API route
npm test # unit tests (32 tests)
npm run test:load # load test (requires dev server running)
npx tsc --noEmit # type check
npm run lint # lintsrc/
app/
api/ # API routes (endpoints, requests, stream, auth)
u/[slug]/ # webhook capture route
dashboard/ # dashboard + endpoint detail pages
components/ # React components
lib/ # crypto, ssrf, signature, replay, failure-lens, etc
types/ # shared TypeScript types
prisma/
schema.prisma # User, Endpoint, Request, ReplayLog models
tests/ # vitest test files
MIT