Webhooks

Webhook testing: * Bins — create a bin, point a webhook sender at /api/webhooks/{binId}, then inspect what arrived. Capped at 100 bins (oldest evicted), 50 requests per bin (newest kept) and 256KB per captured body. * Samples — hardcoded Stripe / GitHub / Shopify event payloads with valid signature headers, for testing signature verification. This controller never makes outbound HTTP calls.Webhook testing: * Bins — create a bin, point a webhook sender at …, then inspect what arrived. Capped at 100 bins (oldest evicted), 50 requests per bin (newest kept) and 256KB per captured body. * Samples — hardcoded Stripe / GitHub / Shopify event payloads with valid signature headers, for testing signature verification. This controller never makes outbound HTTP calls.

• GETPOSTPUTPATCHDELETEHEADOPTIONShttps://api.testingapis.com/api/webhooks/{binId}Capture any request sent to a binCapture any request sent to a bin.
• GETPOSTPUTPATCHDELETEHEADOPTIONShttps://api.testingapis.com/api/webhooks/{binId}/{rest}Capture any request sent to a binCapture any request sent to a bin.
• POSThttps://api.testingapis.com/api/webhooks/binsCreate a webhook bin that captures incoming requestsCreate a webhook bin that captures incoming requests.
• GEThttps://api.testingapis.com/api/webhooks/bins/{id}Inspect a bin and the requests it capturedInspect a bin and the requests it captured.
• DELETEhttps://api.testingapis.com/api/webhooks/bins/{id}Delete a binDelete a bin.
• DELETEhttps://api.testingapis.com/api/webhooks/bins/{id}/requestsClear a bin's captured requestsClear a bin's captured requests.
• GEThttps://api.testingapis.com/api/webhooks/samplesList the sample signed webhook eventsList the sample signed webhook events.
• GEThttps://api.testingapis.com/api/webhooks/samples/{provider}Get a signed sample event for testing signature verificationGet a signed sample event for testing signature verification.

curl -X GET "https://api.testingapis.com/api/webhooks/samples" \
  -H "X-TestingApis-Key: YOUR_API_KEY"

{
  "signingSecret": "whsec_apibee_test_secret",
  "note": "Each sample returns the exact signed payload as the body, with the provider's signature headers. ?format=envelope returns everything as JSO…
  "samples": [
    {
      "provider": "stripe",
      "eventType": "payment_intent.succeeded",
      "signatureHeader": "Stripe-Signature",
      "url": "/api/webhooks/samples/stripe"
    },
    {
      "provider": "github",
      "eventType": "push",
      "signatureHeader": "X-Hub-Signature-256,
… (10 more lines)