Documentation

Overview

Payloader is a webhook inspection and testing platform. Point any service's webhook URL at Payloader and instantly see every incoming payload — parsed, summarized, and ready to debug.

Unlike generic webhook catchers, Payloader recognizes 20+ platforms and translates raw JSON into human-readable summaries. A Stripe payment_intent.succeeded event becomes "Payment of $149.00 succeeded for [email protected]".

Quick Start

Get your first webhook captured in under a minute.

1. 1

   Create an account

   Sign up at payloader.dev/accounts/register. Every account starts with a free 14-day trial — no credit card required.

2. 2

   Create an endpoint

   From the dashboard, click Create Endpoint. Give it a name and Payloader generates a unique URL like:

   https://hook.payloader.dev/h/a1b2c3d4e5f6
3. 3

   Point your service at it

   Copy the endpoint URL and paste it into Stripe, GitHub, Shopify, or any service that sends webhooks. You can also test it immediately:

   curl -X POST https://hook.payloader.dev/h/a1b2c3d4e5f6 \
   -H "Content-Type: application/json" \
   -d '{"event": "test", "message": "Hello Payloader!"}'
4. 4

   Watch it arrive

   The webhook appears in your live feed instantly. Click it to see full headers, body, platform detection, and an intelligent summary.

Core Concepts

Creating Endpoints

From the dashboard, click Create Endpoint and give it a descriptive name (e.g., "Stripe Production", "GitHub Staging"). Payloader generates a unique 12-character slug and your webhook URL is ready immediately.

Each endpoint can be independently:

• • Toggled on/off — paused endpoints still capture webhooks but mark them as received while inactive
• • Renamed — change the display name anytime without affecting the URL
• • Deleted — permanently removes the endpoint and all its captured requests

Receiving Webhooks

Payloader accepts webhooks sent with any HTTP method (GET, POST, PUT, PATCH, DELETE). The receiver captures:

• • HTTP method and path
• • All request headers
• • Query parameters
• • Request body (up to 5 MB)
• • Remote IP address
• • Precise timestamp

After capture, the receiver immediately returns your configured response (default: 200 OK with {"received": true}) and queues the webhook for intelligence processing.

Testing with cURL

Custom Responses

Configure what Payloader sends back to the webhook sender. This is useful when a service expects a specific response format or status code.

Navigate to your endpoint's Response tab to configure:

HMAC Verification

HMAC signature verification lets you confirm that incoming webhooks are authentic. When configured, Payloader verifies the signature in the specified header using your shared secret.

Navigate to your endpoint's HMAC tab and configure:

Once configured, every request detail page shows a verification badge: verified, failed, or not checked.

Live Feed

Each endpoint has a real-time live feed powered by Server-Sent Events (SSE). When a webhook arrives, it appears instantly in your dashboard — no page refresh or polling needed.

New webhooks slide in with a brief animation and flash, making it easy to spot incoming events while you work. The feed shows:

• • Platform badge (Stripe, GitHub, etc.)
• • Intelligent summary
• • Relative timestamp
• • HTTP method

Click any entry to view the full request details.

Global feed

The global feed shows webhooks from all endpoints in your workspace in a single stream. Access it from the Feed link in the dashboard sidebar. This is useful for monitoring all your integrations at once without switching between endpoints.

Request Details

The request detail view shows everything captured about a webhook:

Payload Intelligence

Payloader automatically analyzes every incoming webhook and extracts structured information:

AI-Powered Analysis

When Payloader can't match a webhook to a known platform, Team and Business plan users can enable AI-powered analysis per endpoint. When enabled, Claude analyzes the payload structure and generates a best-guess platform, event type, and summary. Results are cached for 7 days per unique payload schema, so similar webhooks are analyzed instantly. Toggle AI analysis on or off from the endpoint header bar.

Search & Filter

Find specific webhooks across your endpoint's history using the search bar and filter dropdowns.

Filters can be combined. The same filters apply when exporting data, so you can export exactly the subset you need.

Bulk delete

Need to clear out old requests? Use the Bulk Delete action on the endpoint page to delete all requests matching a date range. Individual requests can also be deleted from the request detail page.

Replay

Replay lets you re-send a captured webhook to any URL. This is invaluable for debugging your webhook handler — capture the webhook once, then replay it against your local development server as many times as needed.

How to replay

1. 1. Open any captured request detail page
2. 2. Click Replay
3. 3. Enter the target URL (must start with http:// or https://)
4. 4. Click Send

Payloader sends the original request body, headers, and method to your target URL and captures the response. You can see the response status code, headers, and body on the replay result page.

Each request keeps a history of all its replays, so you can track debugging progress.

Diff & Compare

Compare two webhook payloads side-by-side to spot differences. This is useful when a webhook starts failing and you need to see what changed between a working and broken payload.

How to compare

1. 1. Navigate to your endpoint's Diff tab
2. 2. Select Request A and Request B from the dropdowns
3. 3. Click Compare

The comparison view shows both payloads with pretty-printed JSON, platform badges, event types, and timestamps — making it easy to spot structural differences.

Export

Export captured webhook data in four formats. Exports respect any active search filters, so you can export exactly the data you need.

Exports are capped at 500 requests. Use date range filters to narrow your export if you have more data.

Analytics

The analytics dashboard gives you a high-level view of webhook traffic for any endpoint.

Forwarding

Automatically forward captured webhooks to a target URL. This lets you use Payloader as a proxy — inspect webhooks in the dashboard while also delivering them to your application in real time.

Configuration

Navigate to your endpoint's Forwarding tab to configure:

Forwarding filters

Only forward webhooks that match specific criteria:

• Platform filter — forward only from specific platforms (e.g., Stripe, GitHub)
• Event type filter — forward only specific events with wildcard support (e.g., charge.*)
• HTTP method filter — forward only specific methods (e.g., POST only)
• HMAC filter — forward only requests with valid HMAC signatures

Forwarding results

Each forwarded request logs the target's response status, headers, body, and duration. View forwarding results from the request detail page.

If a forward fails or you need to resend, click Re-forward on the request detail page to manually forward the request again to the configured target URL.

Notification Rules

Get alerted when specific webhooks arrive. Each endpoint can have multiple notification rules, each with its own channel, destination, and optional filters.

Navigate to your endpoint's Notifications tab to create and manage rules. Each rule can be independently toggled on/off.

A notification log tracks the history of all sent alerts, including delivery status and any errors.

Notification Channels

Notification Filters

Avoid noise by filtering which webhooks trigger a notification:

• • Platform filter — only notify for a specific platform (e.g., only Stripe webhooks)
• • Event type filter — only notify for event types matching a substring (e.g., payment matches payment_intent.succeeded)

Filters can be combined. Leave both blank to get notified on every webhook.

Workspaces

A workspace is the top-level organizational unit in Payloader. All endpoints, requests, API keys, and notification rules belong to a workspace.

When you sign up, Payloader creates a "Personal" workspace automatically. You can rename it from Dashboard → Settings.

On Team and Business plans, you can invite team members to share access to all endpoints and requests in the workspace.

Multiple workspaces

You can create additional workspaces to separate projects or teams. Switch between workspaces using the workspace switcher in the dashboard sidebar.

Endpoints can be moved between workspaces you own. From the endpoint's settings, select Move to workspace and choose the destination. All request history moves with the endpoint.

Team Members

Manage team access from Dashboard → Members. Invite existing Payloader users by email address.

Roles

Plans & Billing

Every account starts with a free 14-day trial with full access. After the trial, your dashboard becomes read-only until you subscribe.

Subscription states

Payments are processed securely through Stripe. Manage payment methods, view invoices, and cancel from Dashboard → Billing.

See the pricing page for a full feature comparison.

API Authentication

The Payloader REST API uses API keys for authentication. Create and manage keys from Dashboard → API Keys.

Creating an API key

1. 1. Go to Dashboard → API Keys
2. 2. Enter a name (e.g., "CI/CD", "Monitoring Script")
3. 3. Click Create — the raw key is shown once
4. 4. Copy and store the key securely

Using the API key

Include your key in the X-API-Key header:

Keys are stored as SHA-256 hashes. Only the first 10 characters (prefix) are visible after creation. You can revoke a key at any time — it takes effect immediately.

Endpoints API

Manage webhook endpoints programmatically.

Requests API

Retrieve and manage captured webhook requests.

CLI Installation

The Payloader CLI lets you manage endpoints and inspect webhooks from the terminal. It's a single Go binary with no dependencies.

Download

Download the latest binary for your platform:

After downloading, make it executable and move it to your PATH:

CLI Authentication

Authenticate the CLI with your API key (generate one in Dashboard → Settings → API Keys):

Credentials are saved to ~/.payloader.json. Other auth commands:

• payloader auth status — check current authentication
• payloader auth logout — remove stored credentials

CLI Commands

Most commands have shorter aliases: endpoints → ep, requests → req. Subcommands also have aliases: list → ls, delete → rm, update → set.

Endpoints

Endpoint Update Flags

The endpoints update command accepts the following flags:

Requests

Account & Utilities

Listen & Forward to Localhost

The listen command connects to an endpoint's live stream and forwards each incoming webhook to a local URL. No tunnel (ngrok, cloudflared, etc.) required. Use --forward-to (or -f) to specify the target.

How it works

1. 1. The CLI connects to the endpoint's server-sent events (SSE) stream via your API key
2. 2. When a webhook arrives, the full request data (method, headers, body) is streamed to the CLI
3. 3. The CLI forwards the request to your local URL, preserving the original method, headers, and body
4. 4. The response status and latency are printed to the terminal

Typical workflow

The connection auto-reconnects after 3 seconds if interrupted. Original headers are forwarded (except hop-by-hop headers like Host, Connection, etc.). Press Ctrl+C to stop.

Supported Platforms

Payloader detects and extracts intelligence from 18 webhook providers. Detection is based on headers, body structure, and known API patterns.

Webhooks from unrecognized platforms are still captured and displayed. On the Team and Business plans, you can enable AI analysis per endpoint to detect the platform and generate a summary.

Rate Limits

The webhook receiver enforces rate limiting to protect the service:

The REST API does not have rate limits. The receiver also enforces a 5 MB body size limit and a maximum of 100 headers and 100 query parameters per request.

Need higher rate limits or larger payload sizes? Contact [email protected] to discuss your requirements.

Plan Limits