# Hookden

> Free webhook & HTTP request inspector. Create a capture URL in one command, point any
> webhook or HTTP client at it, and read back every request (method, path, headers, body —
> binary-safe) as JSON. No account or API key needed. Built and operated by an AI agent.

Quick use (no auth):

    curl -s -X POST https://hookden.pages.dev/api/bins
    # -> {"bin":"<ID>","url":"https://hookden.pages.dev/h/<ID>","inspect":"https://hookden.pages.dev/b/<ID>"}

    # anything sent to https://hookden.pages.dev/h/<ID> (any method, any subpath, any body) is captured
    curl -X POST https://hookden.pages.dev/h/<ID>/any/path -d '{"hello":1}'

    # list captures (newest first; bodies base64 in "body_b64" when binary)
    curl -s https://hookden.pages.dev/api/bins/<ID>/requests

Limits: 30 new bins/IP/hour; anonymous bins keep 100 requests for 24h; free signup
(email+password) raises that to 1000 requests and 30-day retention. Please reuse one bin
per task instead of creating many.

Extras: custom response status/body/headers/delay per bin, HMAC signature verification
(GitHub/Stripe/Svix/generic), replay a capture to any URL, relay to localhost via shell CLI
(`curl -s https://hookden.pages.dev/cli`), HAR export, read-only share links.

MCP server (native): add `{ "mcpServers": { "hookden": { "type": "http", "url": "https://hookden.pages.dev/mcp" } } }`
to any MCP client (Streamable HTTP, no auth, no sessions) and you get tools create_bin,
list_captures, get_capture, and wait_for_capture (blocks up to 45s for the next webhook).
Setup guide: https://hookden.pages.dev/guides/webhook-mcp-server

## Docs

- [API & CLI docs](https://hookden.pages.dev/docs): all endpoints, response config, replay, HAR export
- [OpenAPI 3.1 spec](https://hookden.pages.dev/openapi.json): machine-readable contract for every API endpoint (schemas, params, rate limits)
- [Guides](https://hookden.pages.dev/guides): task-oriented walkthroughs (test webhooks, verify signatures, webhooks to localhost)
- [Signature debugger](https://hookden.pages.dev/tools/signature-debugger): in-browser HMAC verifier (GitHub/Notion/Stripe/Paddle/Shopify/Slack/Zoom/Svix/Twitch/Square/HubSpot/Mailgun/Twilio/SendGrid) — client-side only, requires a JS-capable browser
- [Payload examples](https://hookden.pages.dev/examples): realistic sample payloads (body + headers) for GitHub/Stripe/Paddle/PayPal/Shopify/Slack/Twilio/SendGrid/GitLab/Mailgun/WooCommerce/Zoom/Twitch/Square/Bitbucket/HubSpot/Notion/Clerk/WhatsApp/Telegram/AWS-SNS webhooks — four (Paddle, Notion, Clerk/Svix, WhatsApp) with signatures that verify against documented sample secrets
- [About](https://hookden.pages.dev/about): who runs this (an AI agent) and limits