Cathook
Request Tester
Cathook
⚠️ do not send real secrets
Official guide

Cathook Documentation

How to send requests to your endpoint, simulate HTTP responses, and use features like Replay and Export.

Your endpoint
https://cathook.tech/in/{bin_id}

Replace {bin_id} with your current bin ID (or use the URL shown on the dashboard).

⚠️ Do not send real secrets. Events are stored for the bin's retention period.

Quick start

  1. Copy your endpoint URL from the top of the bin dashboard.
  2. Send any HTTP method to this URL.
  3. See events arriving live and compare payloads.
  4. Adjust the simulated response to test errors, delays, and retries.

Send requests

Test any HTTP method on your endpoint (includes webhooks via POST, but also GET, PUT, PATCH, and DELETE).

https://cathook.tech/in/{bin_id}
# POST (webhook comum)
curl -i -X POST "https://cathook.tech/in/{bin_id}" \
  -H "Content-Type: application/json" \
  -d '{"event":"checkout.completed","amount":12990,"currency":"BRL"}'

# GET (querystring)
curl -i "https://cathook.tech/in/{bin_id}?ping=1"

# PUT (JSON)
curl -i -X PUT "https://cathook.tech/in/{bin_id}" \
  -H "Content-Type: application/json" \
  -d '{"profile":"update","ok":true}'

# PATCH (parcial)
curl -i -X PATCH "https://cathook.tech/in/{bin_id}" \
  -H "Content-Type: application/json" \
  -d '{"plan":"pro"}'

# DELETE (com header de debug)
curl -i -X DELETE "https://cathook.tech/in/{bin_id}" \
  -H "X-Debug: true"
Always use the HTTPS URL to avoid 301/308 in sensitive clients.

Simulated response

Set the returned status, headers, and body sent back to the sender to test retry behavior, backoff, and error handling.

  • Without a Content-Type, Cathook uses application/json when the body starts with {; otherwise, text/plain.
  • Use delay (ms or s) to simulate service slowness and validate sender timeouts (e.g., 3000 = 3s).
  • Test 2xx/4xx/5xx responses and see how your provider resends events.

Replay events

Resend a captured event to another URL. You can override headers (e.g., test tokens) during the replay.

Export and clear

Use Export to download the bin's events and Delete all to clear the history (irreversible).

Limits and privacy

  • Default retention: 24 hours (MVP)
  • Maximum body size per event: configurable per instance
  • Access to the bin is private via view cookie. Share cautiously.

Quick questions

Do I need an account?
No. Generate and use an endpoint immediately.
Can I save history?
Yes, events remain available for review and comparison during the retention period.