@webhook-co/cli
v0.6.0
Published
Capture, inspect, and replay webhooks from your terminal — the webhook.co CLI (wbhk).
Maintainers
Readme
wbhk — the webhook.co CLI
Capture, inspect, and replay webhooks from your terminal. wbhk gives you a free, permanent, signed
webhook URL, streams deliveries to your machine, and replays them to localhost with one command — so you
can build and debug webhook integrations without redeploying or clicking through a dashboard.
Install
# Homebrew (macOS / Linux)
brew install webhook-co/tap/wbhk
# npm (needs Node >= 22) — installs the `wbhk` command
npm install -g @webhook-co/cli
# or run without installing
npx @webhook-co/cli --help
# standalone binary (macOS / Linux / Windows — no Node required)
curl -fsSL https://get.webhook.co | shPrebuilt binaries for every platform are also attached to each GitHub release.
Quickstart
wbhk login # authenticate (opens your browser)
wbhk listen <endpoint-id> # stream live deliveries to your terminal
wbhk listen <endpoint-id> --forward localhost:3000 # replay each one to your app
wbhk replay <event-id> --forward localhost:3000 # replay a past event to your app
wbhk doctor # check auth, connectivity, and configEverything is scriptable — add --output json to any read command and pipe it into jq. Run
wbhk --help (or wbhk <command> --help) for the full surface.
How it works
wbhk talks to webhook.co's API and opens a signed tunnel to stream deliveries to your machine. Signing
and verification follow the Standard Webhooks spec. Nothing is public
unless you make it so, and credentials are stored in your OS keychain when one is available.
Verifying a download
Every release is built in CI and is independently verifiable:
# npm — published with provenance; verify the installed package's signatures + provenance
npm audit signatures
# binaries — sigstore-signed SLSA build provenance (needs the GitHub CLI)
gh attestation verify wbhk-darwin-arm64 --repo webhook-co/webhook
# or just the checksum (curl | sh does this for you)
shasum -a 256 -c <(grep ' wbhk-darwin-arm64$' checksums.txt)The provenance proves a binary was built from this repository's GitHub Actions — not hand-uploaded.
Links
- Docs: https://webhook.co
- Source: https://github.com/webhook-co/webhook (
packages/cli) - Issues: https://github.com/webhook-co/webhook/issues
Apache-2.0.
