Freedom251 › Webhook Management Software

whook

Free plan APILinuxMacSelf-hostedWebWindows

What whook is

whook is a self-hostable gateway that captures inbound webhooks before acknowledging them, then forwards events with retries and replay. Requests are stored and can be queried through its API or dashboard. Failed deliveries use deterministic exponential backoff, honor Retry-After on 429 responses, and move to a dead-letter state when the retry budget ends. One event can fan out to multiple destinations, each with its own filter, delivery status, retries, and dead-letter state. Optional signature verifiers are listed for Stripe, GitHub, Shopify, Slack, and Linear; failed verification captures the request without delivering it. The dashboard shows payload details, attempt history, replay controls, delivery state, and dead-letter events. SQLite is built in, while Postgres supports larger or multi-instance deployments. Prometheus metrics are available at GET /metrics. whook runs as a static Go binary, with Linux, macOS, and Windows binaries for amd64 and arm64 plus a multi-architecture Docker image. It is MIT licensed, has no accounts or per-event pricing, and retains captured events indefinitely by default. The default inbound body limit is 1,048,576 bytes.

Who it suits

whook fits teams needing self-hosted webhook durability, replay, routing, signature checks, and delivery monitoring. It supports both single-instance SQLite setups and larger Postgres deployments.

What it does well

Stores events before acknowledging requests
Retries failed deliveries with backoff
Supports fan-out to multiple destinations
Offers signature verification for five providers
MIT licensed with no per-event pricing

What to know first

Default body limit is 1,048,576 bytes
Events are retained indefinitely by default
Per-source rate limiting is disabled by default
Self-hosting requires deployment and administration

Verdict

whook provides durable capture, controlled retries, replay, and observability in a self-hosted gateway. Review retention, body-size, and rate-limit defaults when planning operations.

Facts from whook's own pages

Access limits: The ingest body-size limit defaults to 1,048,576 bytes, and per-source ingest rate limiting is disabled by default. · github.com, 11 Oct 2026
Capture and replay: Requests are stored before acknowledgment and can be queried and replayed through the API or dashboard. · github.com, 10 Oct 2026
Dashboard: The dashboard shows events, payload details, delivery state, attempt history, replay controls, and a dead-letter view. · github.com, 11 Oct 2026
Delivery retries: Failed deliveries use deterministic exponential backoff, honor a 429 Retry-After header, and are dead-lettered when their retry budget is exhausted. · github.com, 11 Oct 2026
Deployment: The project offers a prebuilt multi-architecture Docker image, Docker Compose setup, prebuilt binaries, and installation from Go source. · github.com, 11 Oct 2026
Durable capture: Inbound requests are stored before acknowledgment and can be listed, inspected, and replayed through the API or dashboard. · github.com, 11 Oct 2026
Fan-out: An event can be delivered to multiple matching destinations, each with its own filter and delivery status. · github.com, 11 Oct 2026
Install platforms: The maker lists prebuilt binaries for Linux, macOS, and Windows on amd64 and arm64, plus a prebuilt multi-architecture Docker image. · github.com, 10 Oct 2026
License and cost: whook is self-hostable and MIT licensed; its site says there are no accounts or per-event pricing. · whook-gateway.netlify.app, 10 Oct 2026
License and support: The repository is MIT-licensed and invites issues and pull requests. · github.com, 11 Oct 2026
Limits: The default maximum inbound body size is 1,048,576 bytes, and larger requests are rejected with HTTP 413. · github.com, 10 Oct 2026
Metrics: The gateway exposes Prometheus metrics for ingest, delivery outcomes, and dead-letter volume at GET /metrics. · github.com, 10 Oct 2026
Provider verification: Optional signature verifiers are listed for Stripe, GitHub, Shopify, Slack, and Linear; requests that fail verification are captured but not delivered. · github.com, 10 Oct 2026
Purpose: whook is a self-hostable gateway that captures inbound webhooks, acknowledges them quickly, and forwards them to destinations with automatic retries. · github.com, 11 Oct 2026
Retention: Captured events are kept indefinitely by default; setting WHOOK_RETENTION_AGE enables pruning, while failed events can be retained longer. · github.com, 11 Oct 2026
Retries: Failed deliveries use deterministic exponential backoff, honor Retry-After for 429 responses, and are dead-lettered when the retry budget is exhausted. · whook-gateway.netlify.app, 10 Oct 2026
Security: When configured, an admin bearer token protects the management API, dashboard, and metrics; provider signing secrets are encrypted at rest with AES-256-GCM. · github.com, 11 Oct 2026
Signature integrations: Pluggable signature verification is listed for Stripe, GitHub, Shopify, Slack, and Linear. · github.com, 11 Oct 2026
Storage: SQLite is the default storage backend, and Postgres is supported for larger or multi-instance deployments. · github.com, 11 Oct 2026
Storage and retention: Captured events are retained indefinitely by default; setting WHOOK_RETENTION_AGE enables pruning, while failed and dead-lettered events can be kept longer. · github.com, 10 Oct 2026
Support and contribution: The repository invites issues and pull requests and links to contribution instructions. · github.com, 10 Oct 2026
Supported binary platforms: Prebuilt binaries are listed for Linux, macOS, and Windows on amd64 and arm64. · github.com, 11 Oct 2026

Where whook stands on Freedom251

Webhook Management Software#26 of 29