GitLab Webhook Tester
Test GitLab webhooks in real-time — no signup, no tunnels.
Get a free webhook URL in one click, paste it into your GitLab dashboard, and watch events stream in live. Verify X-Gitlab-Token signatures automatically, replay any request to your local server, and debug payloads with search and filters.
Why test GitLab webhooks with HookSense
Real-time WebSocket stream
Events appear the instant GitLab sends them. No polling, no refresh button.
Plaintext secret token (newer signing token adds HMAC-SHA256) verification
Paste your signing secret once — HookSense verifies every GitLab request automatically.
One-click replay
Send any captured webhook back to your local server or production — rerun your handler without triggering new events.
CLI forwarding, no ngrok
Forward directly to localhost:3000 with npx hooksense listen.
Quick start — 3 steps
- 1Get your free webhook URL
Create a free endpoint at hooksense.com. You get a unique URL instantly — no credit card, no config.
- 2Paste it into GitLab
In the GitLab dashboard, add the URL as your webhook endpoint and pick the events you want (Push Hook, Tag Push Hook, etc.).
- 3Trigger an event and watch it arrive
Fire a test event from GitLab — it lands in HookSense within milliseconds. Inspect headers, body, and signature. Replay when ready.
Forward to localhost
npx hooksense listen -p 3000 --path /api/integrations/gitlabCommon GitLab webhook events
Push HookTag Push HookMerge Request HookIssue HookNote HookPipeline HookJob HookDeployment HookTesting tips specific to GitLab
- The X-Gitlab-Token is a plaintext shared secret — compare it directly (constant-time), don't HMAC it
- Prefer GitLab's newer signing token where available: it adds a real HMAC-SHA256 signature over the payload
- The X-Gitlab-Event header (e.g. 'Merge Request Hook') tells you the type; the body's object_kind echoes it
- Use GitLab's built-in Test button to replay each event type without real repo activity
Test webhooks from other providers
Start testing GitLab webhooks now
Free plan includes 100 requests/day, 7-day retention, real-time streaming. No credit card.
Create a free endpoint