whook

Spec sheet

Purpose

whook is a self-hostable gateway that captures inbound webhooks, acknowledges them quickly, and forwards them to destinations with automatic retries.Read 11 Oct 2026 · github.com

Deployment

The project offers a prebuilt multi-architecture Docker image, Docker Compose setup, prebuilt binaries, and installation from Go source.Read 11 Oct 2026 · github.com

Security

When configured, an admin bearer token protects the management API, dashboard, and metrics; provider signing secrets are encrypted at rest with AES-256-GCM.Read 11 Oct 2026 · github.com

Access limits

The ingest body-size limit defaults to 1,048,576 bytes, and per-source ingest rate limiting is disabled by default.Read 11 Oct 2026 · github.com

Capture and replay

Requests are stored before acknowledgment and can be queried and replayed through the API or dashboard.Read 10 Oct 2026 · github.com

Dashboard

The dashboard shows events, payload details, delivery state, attempt history, replay controls, and a dead-letter view.Read 11 Oct 2026 · github.com

Delivery retries

Failed deliveries use deterministic exponential backoff, honor a 429 Retry-After header, and are dead-lettered when their retry budget is exhausted.Read 11 Oct 2026 · github.com

Durable capture

Inbound requests are stored before acknowledgment and can be listed, inspected, and replayed through the API or dashboard.Read 11 Oct 2026 · github.com

Fan-out

An event can be delivered to multiple matching destinations, each with its own filter and delivery status.Read 11 Oct 2026 · github.com

Install platforms

The maker lists prebuilt binaries for Linux, macOS, and Windows on amd64 and arm64, plus a prebuilt multi-architecture Docker image.Read 10 Oct 2026 · github.com

License and cost

whook is self-hostable and MIT licensed; its site says there are no accounts or per-event pricing.Read 10 Oct 2026 · whook-gateway.netlify.app

License and support

The repository is MIT-licensed and invites issues and pull requests.Read 11 Oct 2026 · github.com

Limits

The default maximum inbound body size is 1,048,576 bytes, and larger requests are rejected with HTTP 413.Read 10 Oct 2026 · github.com

Metrics

The gateway exposes Prometheus metrics for ingest, delivery outcomes, and dead-letter volume at GET /metrics.Read 10 Oct 2026 · github.com

Provider verification

Optional signature verifiers are listed for Stripe, GitHub, Shopify, Slack, and Linear; requests that fail verification are captured but not delivered.Read 10 Oct 2026 · github.com

Retention

Captured events are kept indefinitely by default; setting WHOOK_RETENTION_AGE enables pruning, while failed events can be retained longer.Read 11 Oct 2026 · github.com

Retries

Failed deliveries use deterministic exponential backoff, honor Retry-After for 429 responses, and are dead-lettered when the retry budget is exhausted.Read 10 Oct 2026 · whook-gateway.netlify.app

Signature integrations

Pluggable signature verification is listed for Stripe, GitHub, Shopify, Slack, and Linear.Read 11 Oct 2026 · github.com

Storage

SQLite is the default storage backend, and Postgres is supported for larger or multi-instance deployments.Read 11 Oct 2026 · github.com

Storage and retention

Captured events are retained indefinitely by default; setting WHOOK_RETENTION_AGE enables pruning, while failed and dead-lettered events can be kept longer.Read 10 Oct 2026 · github.com

Support and contribution

The repository invites issues and pull requests and links to contribution instructions.Read 10 Oct 2026 · github.com

Supported binary platforms

Prebuilt binaries are listed for Linux, macOS, and Windows on amd64 and arm64.Read 11 Oct 2026 · github.com

Where Specifiction places it

• Webhook Management Software#28 of 297.1