features
Endpoint Sharing
Share read-only access to a webhook endpoint with teammates or auditors via a signed link.
Sometimes you want a teammate, a customer success rep, or an external auditor to see what your webhook endpoint is capturing — without giving them a HookSense account or pulling them into your team. Endpoint sharing creates a read-only link that anyone with the URL can open.
Creating a Share Link
- Open the endpoint and click Share in the toolbar
- Pick what the recipient can see:
- Live + history — full inspector experience including new captures in real time
- History only — frozen snapshot of requests already captured; no live streaming
- Single request — link to one specific captured webhook
- Optionally set an expiration (1 hour, 24 hours, 7 days, or no expiration)
- Click Copy link
What the Recipient Sees
- Full request data: headers, body, query params, source IP, timestamp, signature status
- Search and filter (read-only)
- Provider detection badges
- The "Copy as cURL" button (for sharing payload reproduction with the recipient)
What they cannot do: replay requests, modify settings, see the HMAC secret, view other endpoints in your account, or trigger any state change.
Security
- Links contain a 32-character random token — unguessable in practice
- Tokens are stored hashed; revoking removes the hash, not just the link
- Revoke any time from the Share menu — the link returns 404 immediately
- Expired or revoked links don't leak metadata; the response is identical to a never-existed token
Use Cases
- Bug reports to support — paste the link in a ticket; the engineer sees the exact failing payload
- Customer integration debugging — share with a customer's developer so they see what their system sent vs what arrived
- Async review — drop a link in Slack and walk away; the reviewer opens it on their schedule
- Audit trail — give a compliance auditor read-only access for a fixed window
Endpoint sharing is available on Hook plans and above. For team-wide collaboration, see Teams.