Does this receive live webhook traffic?

No, it only inspects HTTP requests you paste in manually — it never listens on a network endpoint.

Which signature headers are recognized?

X-Hub-Signature(-256), Stripe-Signature, Svix-Signature, Shopify HMAC, and a few other common variants.

Is my secret sent anywhere?

No, the HMAC is computed locally using the Web Crypto API.

Is my data uploaded to a server?

No. This tool runs entirely in your browser using standard web APIs, so your input never leaves your device and nothing is logged or stored on our servers.

Does it work offline and on mobile?

Yes. Once the page has loaded it keeps working without a network connection, and the layout is responsive so it stays usable on phones and tablets.

Webhook Request Inspector

Inspect a pasted webhook request and verify its HMAC signature.

Support

Works Offline

Privacy First

No Login

No API

Web Crypto API

Paste raw webhook request

Not live — inspects a request you paste, e.g. captured from ngrok, RequestBin, or your server logs.

Parsed request

POST

/webhooks/incoming

HTTP/1.1

Headers

Name	Value
Host	example.com
Content-Type	application/json
X-Hub-Signature-256 signature	sha256=abcdef1234

Body

JSON

{
  "event": "payment.succeeded",
  "amount": 1200
}

HMAC-SHA256 signature verification

Computes HMAC-SHA256 of the raw body with your secret and compares it to a provided signature.

Webhook secret

Provided signature (from header)Optional 'sha256=' prefix is ignored.

Detected signature header: X-Hub-Signature-256

Computed HMAC-SHA256

—

About the Webhook Request Inspector

Paste a raw HTTP request captured from a webhook to see its parsed method, path, headers, and pretty-printed JSON body. Signature headers like X-Hub-Signature and Stripe-Signature are highlighted, with a built-in HMAC-SHA256 verification box. This tool does not receive live traffic — it only inspects requests you paste in.

Examples

Stripe webhook

POST /webhook HTTP/1.1
Stripe-Signature: t=1,v1=abc

{}

Output

Signature header detected: Stripe-Signature

Keyboard shortcuts

Copy the main outputCtrl / ⌘ + Shift + C
Download the resultCtrl / ⌘ + S
Share this toolCtrl / ⌘ + Shift + S
Reset the inputsAlt + R
Open the tool search paletteCtrl / ⌘ + K

Related tools

cURL Command Parser

API & HTTP

Parse a curl command into method, URL, headers, and body.

cURL to Fetch Converter

API & HTTP

Convert a curl command into JavaScript fetch() code.

GraphQL Query Formatter

API & HTTP

Format and indent GraphQL queries and mutations.

GraphQL Schema Viewer

API & HTTP

Browse a GraphQL SDL schema's types, queries, and mutations.

HTTP Request Builder

API & HTTP

Send live API requests and generate curl, fetch, axios snippets.

WebSocket Tester

API & HTTP

Open a live WebSocket connection, send frames and read replies.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-10 · Runs entirely in your browser