PlatPhorm Webhook Lab

Test webhooks before production breaks.

Create contracts, generate signed payloads, send test events, inspect attempts, replay safely, validate schemas, and export trace-linked evidence across the PlatPhormNews tool network.

Open Lab Create Contract Send Test Event Verify Signature Inspect Deliveries Run with platphormctl Open API Docs

Lifecycle Evidence

Define event type

eventId

public-safe

Define event contract

contractId

public-safe

endpointId

protected

Generate payload

payloadHash

public-safe

Sign payload

signatureStatus

public-safe

Send event

deliveryId

protected

Receive delivery

attemptCount

protected

What WebhookLab Does

WebhookLab is the canonical event delivery, contract validation, signature, replay, async job, and evidence surface for the PlatPhormNews network.

Webhook Simulator

Generate event envelopes, local payloads, curl, MCP JSON-RPC, and platphormctl commands without sending fake external requests.

Signature Verification

Build timestamped HMAC-SHA256 or HMAC-SHA512 signatures with transient secrets and redacted canonical-string evidence.

Replay System

Inspect original delivery evidence, enforce idempotency, require confirmation, and gate external replay behind PLATPHORM_API_KEY.

Contract Testing

Validate pasted payloads against JSON Schema, generate samples, produce negative cases, and hand evidence to Spec or Evals.

Real-time Tracking

Show real delivery, attempt, retry, latency, and trace state when storage exists; otherwise show explicit degraded state.

MCP Integration

Expose WebhookLab tools, resources, prompts, access policy, and backward-compatible aliases through JSON-RPC 2.0.

Public vs Protected

No user-login wall is required for public-safe usage. Mutating and sensitive delivery operations require the shared platform key only.

Public-safe

homepage, docs, FAQ, OpenAPI, llms, RSS, sitemap, robots, and well-known policy files
Lab shell, local-only payload generation, public templates, JSON/schema validation, and transient signature utilities
redacted event, endpoint, delivery, contract, integration, health, and route-compliance summaries when storage is available
read-only MCP introspection and public-safe MCP tools

Protected with PLATPHORM_API_KEY

persistent endpoint registration, update, and deletion
persistent event creation that sends to registered endpoints
third-party delivery attempts, replay, cancel, retry, and async delivery job mutation
contract create, update, delete, persistent test runs, and protected handoffs to Spec, Evals, Sandbox, AgentUI, Monitor, Docs, Sheets, and Decks
raw delivery details, raw request headers, private payloads, private traces, private audits, registry mutation, and report publishing