Webhook Debugger & Logger generates temporary, public endpoints that capture every incoming request in full — headers, body, query params, response, timing, and IP. This guide walks you through starting the actor, sending a test request, and inspecting the result.Documentation Index
Fetch the complete documentation index at: https://supahooks.ar27111994.dev/llms.txt
Use this file to discover all available pages before exploring further.
Start the actor
Configure the actor with a minimal input to generate three webhook endpoints, retain them for 24 hours, and enable JSON parsing and sensitive header masking.On Apify console: paste this JSON into the input tab and click Start.Locally: save it as your
INPUT environment variable and run npm start.Get your webhook URLs
After the actor starts, call The response includes an Copy one of the webhook IDs — you’ll use it in the next step.
GET /info on your run’s base URL to see the active webhook endpoints.activeWebhooks array. Each entry has an id you use to receive traffic and an expiresAt timestamp.Send a test request
POST a JSON payload to your webhook URL. Replace The actor responds with
<run-id> with your actual run ID and wh_demo123 with the webhook ID from /info.200 OK and stores the full request envelope.Inspect the captured event
Query
GET /logs to retrieve the captured event. The response includes the method, status code, content type, processing time, and the parsed JSON body.processingTime is the server-side processing cost only. It does not include any configured responseDelayMs latency simulation.Stream events live (optional)
To watch incoming requests in real time, connect to the SSE stream at The server sends comment frames for connection and keepalive traffic, and Heartbeats are sent every 30 seconds. The stream has no server-side webhook filter — filter by
/log-stream. This is useful when you want to observe events as they arrive without polling /logs.data: frames for each captured event.webhookId on the client side if you need to isolate a specific endpoint.Next steps
Secure your endpoints
Add an API key, restrict access by IP, or mask sensitive headers in stored logs.
Verify provider signatures
Automatically validate Stripe, GitHub, Shopify, Slack, and custom HMAC signatures.
Replay captured events
Resend any stored event to a new destination URL after fixing a bug.
Configure API mocking
Return custom status codes, headers, bodies, and artificial latency to simulate downstream behavior.