Documentation

Everything you need to know about receiving, inspecting, and forwarding webhooks with WebhookDrop

Introduction

WebhookDrop is a powerful webhook management platform that helps developers receive, inspect, and forward webhooks with ease. Whether you're debugging integrations, testing webhook payloads, or building complex workflow automations, WebhookDrop provides all the tools you need.

With enterprise-grade security, real-time inspection, and automatic forwarding capabilities, WebhookDrop makes webhook management simple and reliable.

Secure

AES-256 encryption & EU data storage

Fast

Real-time webhook processing

Simple

Easy API & intuitive dashboard

Quick Start

Get started with WebhookDrop in just 3 simple steps:

1

Create Your Account

Sign up for a free 14-day trial with 20,000 webhooks/month. No credit card required.

Sign Up URL
https://webhookdrop.app/signup
2

Create an Endpoint

Once logged in, create your first webhook endpoint. You'll get a unique URL instantly.

Your Webhook URL
https://webhookdrop.app/hook/your-endpoint-id
3

Send Your First Webhook

Test your endpoint by sending a webhook using curl or any HTTP client.

Example: curl
curl -X POST https://webhookdrop.app/hook/your-endpoint-id \
  -H "Content-Type: application/json" \
  -d '{"event": "test", "message": "Hello WebhookDrop!"}'

You're All Set!

Your webhook is now being captured. View it in real-time on your dashboard and inspect every detail.

Key Concepts

Endpoints

An endpoint is a unique URL where you receive webhooks. Each endpoint has its own ID and can be configured independently.

• Unlimited endpoints per account
• Optional forwarding to your server
• Custom retry logic
• Filter and transform data

Webhooks

A webhook is an HTTP POST request sent to your endpoint. WebhookDrop captures every detail including headers, body, and metadata.

• Full request capture (headers + body)
• AES-256 encrypted storage
• Real-time WebSocket updates
• Replay & resend capabilities

Workflows

Workflows allow you to automate actions when webhooks are received. Build complex logic with our visual workflow builder.

• Visual drag-and-drop builder
• Conditional logic & branching
• HTTP requests & transformations
• Delay & retry actions

Receiving Webhooks

WebhookDrop makes it incredibly easy to receive webhooks from any source. Just point your webhook provider to your unique endpoint URL.

Supported Features

All HTTP Methods

POST, PUT, PATCH, GET - all supported

Any Content-Type

JSON, XML, form-data, raw text, binary

Large Payloads

Up to 100 MB (Tier 3)

Custom Headers

All headers captured and encrypted

Example: Stripe Webhook

Configure Stripe to send webhooks to your WebhookDrop endpoint:

Stripe Dashboard → Webhooks → Add Endpoint
Endpoint URL: https://webhookdrop.app/hook/abc123xyz
Events to send:
  ✓ charge.succeeded
  ✓ charge.failed
  ✓ customer.created

Email Verification Required

You must verify your email address before your endpoints can receive webhooks. This helps prevent spam and abuse.

Inspecting Data

View and analyze every detail of your webhooks in real-time with our powerful inspection tools.

What You Can Inspect

Request Body

Full JSON payload with syntax highlighting, collapsible JSON trees, and search functionality

Headers

All HTTP headers including authentication tokens (encrypted), user-agents, and custom headers

Metadata

Timestamp, IP address, content type, payload size, and processing status

Real-Time Updates

With WebSocket technology, your dashboard updates instantly when new webhooks arrive. No need to refresh!

Live Preview

See webhooks appear on your dashboard the moment they're received. Perfect for debugging integrations in real-time.

Forwarding Webhooks

Automatically forward webhooks to your server with intelligent retry logic and delivery tracking.

How Forwarding Works

1

Webhook Received

WebhookDrop receives and stores the webhook securely

2

Background Processing

Celery worker picks up the webhook for forwarding

3

Smart Retry

Automatic retries with exponential backoff if delivery fails

4

Delivery Tracking

Full logs of delivery attempts and responses

Configuration Options

Endpoint Configuration
{
  "target_url": "https://your-server.com/webhooks",
  "retry_attempts": 3,
  "retry_delay_seconds": 60,
  "timeout_seconds": 30,
  "headers": {
    "X-Custom-Header": "value",
    "Authorization": "Bearer YOUR_TOKEN"
  }
}

Important

Your target URL must be publicly accessible and return a 2xx status code for successful delivery. Failed deliveries will be retried automatically.

Workflow Automation

Build powerful automation workflows that trigger when webhooks are received. Transform, filter, and route your webhook data with ease.

Workflow Actions

Transform Data

Extract fields, format data, calculate values

Filter Events

Only process webhooks matching conditions

HTTP Requests

Call external APIs and services

Delays & Retries

Add delays or retry failed actions

Example Workflow

Webhook Received (Stripe charge.succeeded)
  ↓
Filter: amount > $100
  ↓
Transform: Extract customer email
  ↓
HTTP Request: Send to CRM API
  ↓
Delay: 5 seconds
  ↓
HTTP Request: Send thank you email

Security & Privacy

WebhookDrop takes security seriously. All webhook data is encrypted and stored securely in EU data centers.

AES-256 Encryption

All webhook payloads are encrypted using AES-256-GCM before storage. Sensitive headers like API keys are automatically encrypted.

  • • Bank-level encryption standard
  • • Authenticated encryption (tamper-proof)
  • • Automatic key rotation support

EU Data Storage

All webhook data is stored in Cloudflare R2 EU region, ensuring GDPR compliance and data sovereignty.

  • • EU-only data centers
  • • GDPR compliant
  • • Automatic data retention

Rate Limiting

Protect your endpoints from abuse with intelligent rate limiting and DDoS protection.

  • • 100 requests/minute default
  • • Automatic bot detection
  • • reCAPTCHA v3 integration

Data Retention

Automatic cleanup of old webhooks based on your plan tier. You control your data.

  • • 14-365 days retention
  • • Automatic deletion
  • • Export before deletion

Security Best Practices

For maximum security, we recommend:

  • • Verify webhook signatures when available
  • • Use HTTPS for all forwarding URLs
  • • Regularly rotate API tokens
  • • Enable email verification

Common Use Cases

Debugging Integrations

Test webhook integrations without deploying your app. See exactly what data providers send.

Perfect for: Stripe, PayPal, Shopify, GitHub webhooks

Local Development

Develop webhook handlers locally without ngrok. Forward to localhost when ready.

Perfect for: Development teams, CI/CD pipelines

Webhook Proxying

Receive webhooks and forward to multiple destinations with transformation.

Perfect for: Multi-tenant apps, webhook aggregation

Monitoring & Analytics

Track webhook delivery rates, payload sizes, and patterns over time.

Perfect for: SaaS platforms, API monitoring

Disaster Recovery

Never miss webhooks when your server is down. Replay them when back online.

Perfect for: Critical payment/notification systems

Learning & Testing

Learn how webhooks work by inspecting real examples from popular APIs.

Perfect for: Students, webhook beginners

Compliance & Audit Trails

Maintain complete records of all webhook events for compliance, auditing, and regulatory requirements.

Perfect for: Financial services, healthcare, enterprise compliance