Documentation & Support

WebhookMon Help

Installation

Download WebhookMon.dmg, open it, and drag WebhookMon into /Applications. Or install with Homebrew:

$brew install --cask suresk/tap/webhookmon

Requires macOS 14 (Sonoma) or later.

First run

Sign in. Enter your email; WebhookMon emails a six-digit code. There's no password and no separate account to create.
Create an endpoint. Give it a name, such as "checkout" or "staging". WebhookMon shows you its relay URL, something like https://hooks.getwebhookmon.com/e/<id>.
Paste that URL into the provider's dashboard — Stripe's webhook settings, GitHub's repo or org webhook settings, Shopify's notification settings, Slack's Event Subscriptions, or Polar's webhook settings.
Set the local target in the endpoint's settings, for example http://localhost:3000/webhooks. Forwarding is on by default once a target is set. Prefer a target that includes a path, such as http://localhost:3000/webhooks rather than http://localhost:3000: anyone who learns an endpoint's URL can send requests to whatever the target covers.
Add the signing secret the provider gave you when you created the webhook. It's stored in the Keychain and used to verify and, where supported, re-sign events. Without it, events still arrive and display, just without a signature verdict.

What WebhookMon sends over the network

Four destinations, nothing else:

The relay (hooks.getwebhookmon.com): your account's WebSocket connection, which is how events reach the app.
Sign-in email: requesting or verifying your six-digit code.
Polar: license validation.
The update feed: about once a day, WebhookMon asks updates.uresk.net whether a newer version exists. The request says which version you have and one word for its license state (in trial, licensed, trial ended, or license needs attention); we add that to a daily count per version and state and keep only that count, with no IP address or anything else that could tell your Mac apart from anyone else's. Updates themselves still download from GitHub. Turn off automatic checks on the License tab of WebhookMon → Settings (Check for updates automatically).

Forwarding events to your local server is not a network call the relay or WebhookMon's own services see; it goes straight from your Mac to the address you configured. See the privacy page for exactly what each call sends and what the relay stores.

Relay limits

The hosted relay is included with your license for development and testing: up to 5,000 events a day per account (all your endpoints together, counted per UTC day) and 300 a minute per endpoint. It is not meant for production traffic. Deliveries over a limit are refused with HTTP 429. When your Mac next connects, WebhookMon tells you at least how many were refused over an endpoint's limit, or that your account reached its daily limit (refusals then continue until midnight UTC). WebhookMon → Settings → General shows how many events the relay has received today for the endpoints your account has now (an endpoint deleted earlier in the day no longer counts). An endpoint that no Mac has connected to for 30 days is paused until one connects again: in the meantime the relay refuses deliveries to it with HTTP 410 and keeps nothing, and your provider may disable the webhook after repeated refusals, so check its dashboard when you come back. We may suspend accounts that abuse the service.

Trial and licensing

The 14-day trial is fully unrestricted: create endpoints, forward, replay, everything. After it ends, viewing captured events, headers and verdicts keeps working. Creating new endpoints, forwarding, replay and sample events need a license.

A license is $29.99 once, covers up to 3 Macs, and includes 12 months of updates; an optional $15/year renewal extends updates after that. Enter your key from WebhookMon → License in the menu bar.

Uninstalling

Quit WebhookMon and delete WebhookMon.app from /Applications, or, if you used Homebrew:

$brew uninstall --cask webhookmon

To remove local data, delete ~/Library/Application Support/WebhookMon (captured events and delivery history), the com.suresk.webhookmon items from Keychain Access (device key, account token, provider secrets, license), and the app's preferences, which hold your account email and window and retention settings (defaults delete com.suresk.webhookmon). Removing the app does not delete your endpoints from the relay; sign in again from any Mac to see or remove them.

Support

Email [email protected] or open an issue on GitHub.