Quickstart

Hooks receives webhooks on a stable HTTPS ingress URL, verifies the signature, stores the raw request, and forwards the event to one or more destinations. Most integrations are live in under five minutes.

1. Create an endpoint. Pick a provider (GitHub, Stripe, Slack, Linear, or generic HMAC) and copy its ingestion URL.
2. Verify the signature. Confirm the request really came from the source before trusting the payload.
3. Add a destination. Forward verified events to an HTTPS endpoint or an agent target.

Send a test event

POST JSON to the endpoint’s ingestion URL:

curl -X POST "https://api.hooks.events/in/whk_9f3k1a" \
  -H "Content-Type: application/json" \
  -H "X-Hooks-Signature: t=1739980800,v1=8f2c..." \
  -d '{"type":"order.created","data":{"id":"ord_1042"}}'

Hooks stores the event immediately and returns 202 Accepted; fan-out to destinations happens asynchronously in a queue.

What happens next

• Every delivery attempt is recorded with its request, response status, and response body.
• Failed deliveries retry automatically with exponential backoff.
• You can replay an event or retry a delivery from the console or the REST API.

The ingestion URL is a secret. Anyone with it can create events, so keep it out of client-side code and public repositories.

Next steps

• Receive events — headers, accepted content types, response behavior.
• Verify signatures — HMAC scheme and provider-specific verification.
• Destinations — where verified events go.