Skill

Webhook inspector

Get a unique URL, point any service at it, and watch requests arrive live.

Response Returns 200 OK

What every caller receives. Stored unencrypted so the server can reply without your key; captured requests stay end-to-end encrypted.

Requests

This webhook is ephemeral - its URL, settings, and every captured request are deleted automatically when it expires.

Need it to stick around? Create a free account for permanent, more feature-rich webhooks.

📡

No requests captured yet.

Send an HTTP request to your webhook URL above and it will show up here.

Privacy

Captured requests are end-to-end encrypted. When you create a webhook, this page generates an elliptic-curve key pair (ECDH P-256) directly in your browser. Only the public key is registered with the server. Every request that hits your webhook URL is sealed on the server against that public key (ECDH → HKDF-SHA256 → AES-256-GCM, libsodium-style sealed box) and stored as ciphertext only. The matching private key never leaves your browser, so the server (and anyone who can read the database) cannot decrypt what was captured.

Your response template is not encrypted. The status code, headers, and body you configure as the reply are stored in plaintext on the server, because the server has to answer callers without your key. Avoid putting secrets in the response template.

Your webhook lives in this browser. The private key, token, label, and description are kept in localStorage and encoded into the page’s URL fragment (#…), which browsers never transmit to the server. Share that full URL, including the fragment, to open the same webhook (and the ability to decrypt it) on another device. Lose the fragment and the captured data is unrecoverable by design.

Ephemeral by default. Captured requests expire automatically after 7 days and a background job reaps them. There is no account and no long-term storage.

Anonymous usage analytics. We use Plausible Analytics, a privacy-first, GDPR-compliant tool, to collect aggregate usage data. No cookies, no personal data, no individual tracking.

See the full Secutils.dev privacy policy for details on the wider service.

Rename webhook

Confirm