Stop debugging webhooks blind. I built a tap that shows you the raw bytes

Описание и применение

Webhook-tap позволяет видеть сырые HTTP‑запросы от вебхуков, включая заголовки и тело, защищая конфиденциальные данные и упрощая отладку.

Задача

Debugging webhook payloads is difficult because logs often lack raw request details, making it hard to verify headers, body shape, and delivery.

Результат

Webhook-tap provides a local, secure, and transparent way to inspect raw webhook requests, eliminating guesswork and enabling accurate debugging without exposing payloads to third parties.

Рабочий процесс

• Clone the repository: git clone https://github.com/hahahahahahahahah6/webhook-tap
• Navigate into the directory: cd webhook-tap
• Run the tap: ./webhook_tap.py (listens on http://127.0.0.1:8901/)
• Configure your webhook provider to point to http://localhost:8901/hook
• Trigger a test event from the provider
• Observe the terminal output showing method, headers, and body
• Optionally use --log-file requests.log to append requests as JSONL for replay

Доказательства

I built webhook-tap: point the callback URL at http://localhost:8901/hook and watch exactly what arrives — method, path, headers, body — in your terminal.

Источник

authorization, cookie, and proxy-authorization headers are always redacted — safe to paste output into Slack or a GitHub issue.

Источник

Binds 127.0.0.1 only. An open request inspector on a public interface would leak your webhook payloads; if an external service needs to reach it, put an SSH tunnel in front instead.

Источник

Every request gets a 200 {"ok": true} ack so providers don't retry while you're inspecting.

Источник

--log-file requests.log appends each request as JSONL for later replay; JSON bodies are pretty-printed; bodies over 64KB are truncated and flagged.

Источник