One iframe tag, working webhook demo. Generates a real URL, captures real requests in real time. Free for technical writers, tutorial authors, and documentation sites — no signup, no API key, no rate-limit-by-domain.
The block below is rendered from /embed/inspector — the same iframe you can paste in your post.
Pick a provider to pre-load its sample payloads alongside the inspector, or leave it on Generic for the inspector alone.
<iframe src="https://webhookwhisper.com/embed/inspector" width="100%" height="560" loading="lazy" title="Live webhook inspector" style="border:0; border-radius:12px; max-width:900px;" ></iframe>
<iframe src="https://webhookwhisper.com/embed/inspector" width="100%" height="560" loading="lazy" title="Live webhook inspector" style="border:0;border-radius:12px;max-width:900px;"></iframe>
?provider=stripeSide-by-side: live URL on the left, Stripe Test Sender on the right. Reader copies the URL, fires a sample event, and sees it land — all without leaving your post.
Linking to an external tool loses ~40% of readers — the third-party tab steals attention. Embedded demos keep the entire experience under your URL.
You don't host anything. We handle uptime, SSL, the WebSocket layer, all 80 sample payloads, signature verification recipes — everything inside the iframe is our problem.
Tutorials with screenshots age badly. An embedded live tool stays current automatically — when we add a provider or fix a bug, every embed picks it up immediately.
| Param | Type | Effect |
|---|---|---|
provider | slug | Pre-loads the Test Sender for that provider next to the inspector. One of stripe, github, shopify, twilio, slack, sendgrid, paypal, razorpay, and 28 more — see all providers. |
hideAttribution | flag (=1) | Hides the "Powered by WebhookWhisper" footer. Allowed but please leave on by default — the attribution is what funds the free embed. |
<iframe src="https://webhookwhisper.com/embed/inspector?provider=stripe" width="100%" height="640" loading="lazy" <!-- don't block LCP --> title="Live webhook inspector" style="border:0; border-radius:12px; max-width:900px;" ></iframe>
loading="lazy" — required for good Core Web Vitals on the host page.title — required for accessibility (screen readers).height: 560px for inspector-only, 640px with a provider, 720px+ if you expect mobile readers (the layout stacks vertically below 1024px).Manage endpoints, query events, and configure forwarding rules programmatically.
How to verify the X-WebhookWhisper-Signature header in 6 languages.
In-browser HMAC compute & verify for Stripe, GitHub, Shopify, Slack.
Test payloads from 36 providers — Stripe, GitHub, Shopify, Twilio…
30 atomic terms — replay attack, idempotency key, signature header, etc.