> ## Documentation Index > Fetch the complete documentation index at: https://docs.iotools.cloud/llms.txt > Use this file to discover all available pages before exploring further. # Webhook Payload Inspector > Paste a raw webhook request — optional HTTP headers plus a JSON or form-encoded body — and get a structured breakdown: parsed headers, a pretty-printed and validated body, detected content-type and size, the sending provider and event type, extracted timestamps, and flagged signature headers (X-Hub-Signature-256, Stripe-Signature, X-GitHub-Event…). Runs entirely in your browser. [Try Webhook Payload Inspector in your browser →](https://iotools.cloud/tool/webhook-payload-inspector/) ## OpenAPI ````yaml https://api.iotools.cloud/v1/openapi post /v1/tool/webhook-payload-inspector openapi: 3.1.0 info: title: iotools.cloud API version: 1.0.0 description: >- Run any iotools.cloud tool over HTTP. Authenticate with `Authorization: Bearer iot_live_…`. **Only `POST /v1/tool/{slug}` costs credits.** Every GET here — the catalog, a tool's schema, your balance — is free. A tool call is charged its own weight or your plan's per-call minimum, whichever is larger; `x-iotools-credit-cost` on each operation is quoted at the free-tier minimum, and `GET /v1/tools/list` returns the exact figure for your key. `GET /v1/me/credits` reports what you have left, and `GET /v1/me/usage` reports what it went on. Failures are RFC 9457 problem documents — branch on `code`. servers: - url: https://api.iotools.cloud description: Production security: - bearerAuth: [] tags: - name: Catalog description: Find a tool and read its contract. Free. - name: Converters description: >- Convert between formats, encodings, and units — Base64, CSV and JSON, timestamps, and more. Fast, free, and processed right in your browser. - name: Formatters description: >- Format, beautify, minify, and validate code and data — JSON, HTML, CSS, SQL, and regex. Clean up messy input in one click, with nothing to upload. - name: Generators description: >- Generate exactly what you need and on demand — passwords, UUIDs, QR codes, hashes, random numbers, and more. Secure, instant, and free. - name: Calculators description: >- Crunch the numbers fast — from everyday math to specialized conversions and unit work. Free online calculators that run entirely in your browser. - name: Editors description: >- Edit and transform text, code, and images with quick, focused editors that run entirely in your browser — nothing to install, and no sign-up needed. - name: Utilities description: >- Everyday developer and web utilities — DNS and IP lookups, redirect and certificate checkers, and other quick diagnostics. Free and privacy-friendly. - name: Account description: Your key's allowance, limits and usage history. paths: /v1/tool/webhook-payload-inspector: post: tags: - Utilities summary: Webhook Payload Inspector description: >- Paste a raw webhook request — optional HTTP headers plus a JSON or form-encoded body — and get a structured breakdown: parsed headers, a pretty-printed and validated body, detected content-type and size, the sending provider and event type, extracted timestamps, and flagged signature headers (X-Hub-Signature-256, Stripe-Signature, X-GitHub-Event…). Runs entirely in your browser. [Try Webhook Payload Inspector in your browser →](https://iotools.cloud/tool/webhook-payload-inspector/) operationId: run_webhook_payload_inspector requestBody: required: false content: application/json: schema: type: object properties: payload: type: string description: Raw Webhook Request required: [] examples: github_push_headers_json_body: summary: GitHub push (headers + JSON body) value: payload: >- POST /webhook HTTP/1.1 Host: example.com Content-Type: application/json User-Agent: GitHub-Hookshot/abc123 X-GitHub-Event: push X-GitHub-Delivery: 72d3162e-cc78-11e3-81ab-4c9367dc0958 X-Hub-Signature-256: sha256=7d38cdd689735b008b3c702edd92eea23791c5f6 { "ref": "refs/heads/main", "pusher": { "name": "octocat", "email": "octocat@github.com" }, "repository": { "id": 123456789, "name": "my-project", "pushed_at": 1709312520 }, "commits": [ { "id": "789ghi", "message": "feat: add handler", "timestamp": "2025-03-01T14:22:00Z" } ], "head_commit": { "id": "789ghi", "message": "feat: add handler" } } stripe_event_headers_json_body: summary: Stripe event (headers + JSON body) value: payload: >- POST /stripe/webhook HTTP/1.1 Content-Type: application/json Stripe-Signature: t=1709312520,v1=5257a869e7ecebeda32affa62cdca3fa51cad7e77a0e56ff536d0ce8e108d8bd { "id": "evt_1OqY5K", "object": "event", "type": "payment_intent.succeeded", "created": 1709312520, "data": { "object": { "id": "pi_3OqY5J", "amount": 2000, "currency": "usd", "status": "succeeded" } } } bare_json_body_no_headers: summary: Bare JSON body (no headers) value: payload: >- { "event": "ping", "sent_at": "2026-01-15T09:30:00Z", "attempts": 1 } malformed_json: summary: Malformed JSON value: payload: '{ "event": "ping", "count": 3, }' responses: '200': description: Tool output content: application/json: examples: github_push_headers_json_body: summary: GitHub push (headers + JSON body) value: tool: webhook-payload-inspector tool_version: 1.0.1 outputs: overview: - property: Request Line value: POST /webhook HTTP/1.1 - property: Format value: JSON - property: Content-Type value: application/json - property: Body Size value: 355 B - property: Characters value: '355' - property: Header Count value: '6' - property: Valid JSON value: 'Yes' - property: Depth value: '3' - property: Total Keys value: '15' - property: Provider value: GitHub - property: Event Type value: push - property: Timestamps Found value: '2' headers: - header: Host value: example.com - header: Content-Type value: application/json - header: User-Agent value: GitHub-Hookshot/abc123 - header: X-GitHub-Event value: push - header: X-GitHub-Delivery value: 72d3162e-cc78-11e3-81ab-4c9367dc0958 - header: X-Hub-Signature-256 value: sha256=7d38cdd689735b008b3c702edd92eea23791c5f6 signals: - header: X-GitHub-Event value: push meaning: GitHub event name (e.g. push, pull_request) - header: X-GitHub-Delivery value: 72d3162e-cc78-11e3-81ab-4c9367dc0958 meaning: GitHub unique delivery GUID - header: X-Hub-Signature-256 value: sha256=7d38cdd689735b008b3c702edd92eea23791c5f6 meaning: HMAC-SHA256 signature — GitHub / Meta webhooks timestamps: - field: pushed_at raw-value: '1709312520' utc: Fri, 01 Mar 2024 17:02:00 GMT - field: timestamp raw-value: '2025-03-01T14:22:00Z' utc: Sat, 01 Mar 2025 14:22:00 GMT formatted: |- { "ref": "refs/heads/main", "pusher": { "name": "octocat", "email": "octocat@github.com" }, "repository": { "id": 123456789, "name": "my-project", "pushed_at": 1709312520 }, "commits": [ { "id": "789ghi", "message": "feat: add handler", "timestamp": "2025-03-01T14:22:00Z" } ], "head_commit": { "id": "789ghi", "message": "feat: add handler" } } credits_used: 3 credits_remaining: null stripe_event_headers_json_body: summary: Stripe event (headers + JSON body) value: tool: webhook-payload-inspector tool_version: 1.0.1 outputs: overview: - property: Request Line value: POST /stripe/webhook HTTP/1.1 - property: Format value: JSON - property: Content-Type value: application/json - property: Body Size value: 213 B - property: Characters value: '213' - property: Header Count value: '2' - property: Valid JSON value: 'Yes' - property: Depth value: '3' - property: Total Keys value: '10' - property: Provider value: Stripe - property: Event Type value: payment_intent.succeeded - property: Timestamps Found value: '1' headers: - header: Content-Type value: application/json - header: Stripe-Signature value: >- t=1709312520,v1=5257a869e7ecebeda32affa62cdca3fa51cad7e77a0e56ff536d0ce8e108d8bd signals: - header: Stripe-Signature value: >- t=1709312520,v1=5257a869e7ecebeda32affa62cdca3fa51cad7e77a0e56ff536d0ce8e108d8bd meaning: Stripe webhook signature (timestamp + HMAC-SHA256) timestamps: - field: created raw-value: '1709312520' utc: Fri, 01 Mar 2024 17:02:00 GMT formatted: |- { "id": "evt_1OqY5K", "object": "event", "type": "payment_intent.succeeded", "created": 1709312520, "data": { "object": { "id": "pi_3OqY5J", "amount": 2000, "currency": "usd", "status": "succeeded" } } } credits_used: 3 credits_remaining: null bare_json_body_no_headers: summary: Bare JSON body (no headers) value: tool: webhook-payload-inspector tool_version: 1.0.1 outputs: overview: - property: Format value: JSON - property: Content-Type value: application/json - property: Body Size value: 69 B - property: Characters value: '69' - property: Valid JSON value: 'Yes' - property: Depth value: '1' - property: Total Keys value: '3' - property: Timestamps Found value: '1' headers: [] signals: [] timestamps: - field: sent_at raw-value: '2026-01-15T09:30:00Z' utc: Thu, 15 Jan 2026 09:30:00 GMT formatted: |- { "event": "ping", "sent_at": "2026-01-15T09:30:00Z", "attempts": 1 } credits_used: 3 credits_remaining: null malformed_json: summary: Malformed JSON value: tool: webhook-payload-inspector tool_version: 1.0.1 outputs: overview: - property: Format value: JSON (invalid) - property: Content-Type value: application/json - property: Body Size value: 32 B - property: Characters value: '32' - property: Valid JSON value: 'No' - property: Parse Error value: >- Expected double-quoted property name in JSON at position 31 (line 1 column 32) headers: [] signals: [] timestamps: [] formatted: '{ "event": "ping", "count": 3, }' credits_used: 3 credits_remaining: null schema: type: object required: - tool - tool_version - outputs - credits_used - credits_remaining properties: outputs: type: object properties: overview: type: array items: type: object properties: property: type: string description: Property value: type: string description: Value x-iotools-columns: - property - value headers: type: array items: type: object properties: header: type: string description: Header value: type: string description: Value x-iotools-columns: - header - value signals: type: array items: type: object properties: header: type: string description: Header value: type: string description: Value meaning: type: string description: Meaning x-iotools-columns: - header - value - meaning timestamps: type: array items: type: object properties: field: type: string description: Field raw-value: type: string description: Raw Value utc: type: string description: UTC x-iotools-columns: - field - raw-value - utc formatted: type: string description: Body tool: type: string description: The tool's slug, echoing the {slug} in the request path. tool_version: type: string description: Output-contract version for this tool. credits_used: type: integer description: >- Credits this call consumed, after any settlement refund. 0 when metering is disabled. credits_remaining: type: - integer - 'null' description: >- Credits left in the current monthly allowance, or null when metering is disabled. request_id: type: string description: Correlation id, also sent as x-request-id. '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '402': $ref: '#/components/responses/InsufficientCredits' '403': $ref: '#/components/responses/ToolNotAllowed' '404': $ref: '#/components/responses/ToolNotFound' '413': $ref: '#/components/responses/PayloadTooLarge' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/ToolFailed' '503': $ref: '#/components/responses/ToolDisabled' security: - bearerAuth: [] components: responses: ValidationError: description: Invalid request. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/validation_error title: type: string description: Short human-readable summary of the failure. examples: - Invalid request status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - validation_error detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. fields: type: - object - string additionalProperties: type: string description: >- What failed: a map of field name → message. Absent when the body itself is malformed; a single string when the failure isn't tied to one field. example: type: https://iotools.cloud/docs/errors/validation_error title: Invalid request status: 400 code: validation_error detail: One or more inputs are invalid — see `fields`. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 fields: inputString: Required Unauthorized: description: Missing or invalid API key. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/invalid_api_key title: type: string description: Short human-readable summary of the failure. examples: - Invalid API key status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - invalid_api_key detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/invalid_api_key title: Invalid API key status: 401 code: invalid_api_key detail: 'Provide ''Authorization: Bearer ''.' request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 InsufficientCredits: description: Monthly credit allowance exhausted. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/insufficient_credits title: type: string description: Short human-readable summary of the failure. examples: - Insufficient credits status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - insufficient_credits detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. credits_used: type: integer description: Always 0 — a refused call charges nothing. credits_remaining: type: integer description: Credits left in the allowance — fewer than this call costs. example: type: https://iotools.cloud/docs/errors/insufficient_credits title: Insufficient credits status: 402 code: insufficient_credits detail: This call costs 1 credit and 0 remain in this month's allowance. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 credits_used: 0 credits_remaining: 0 ToolNotAllowed: description: Tool exists but has no API surface. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_not_allowed title: type: string description: Short human-readable summary of the failure. examples: - Tool not available over the API status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_not_allowed detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_not_allowed title: Tool not available over the API status: 403 code: tool_not_allowed detail: >- "Background Remover" is available on iotools.cloud but has no API endpoint. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 ToolNotFound: description: No such tool. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_not_found title: type: string description: Short human-readable summary of the failure. examples: - Tool not found status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_not_found detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_not_found title: Tool not found status: 404 code: tool_not_found detail: No tool with that slug. See GET /v1/tools/list. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 PayloadTooLarge: description: Body too large. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/payload_too_large title: type: string description: Short human-readable summary of the failure. examples: - Payload too large status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - payload_too_large detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/payload_too_large title: Payload too large status: 413 code: payload_too_large detail: Request body exceeds this tool's size limit. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 RateLimited: description: Per-minute rate limit exceeded. headers: Retry-After: description: Seconds to wait before retrying (RFC 9110 delta-seconds). schema: type: integer content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/rate_limited title: type: string description: Short human-readable summary of the failure. examples: - Rate limit exceeded status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - rate_limited detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. retry_after: type: integer description: >- Seconds until the window resets — the same value as the `Retry-After` header. example: type: https://iotools.cloud/docs/errors/rate_limited title: Rate limit exceeded status: 429 code: rate_limited detail: Too many requests. Retry in 30s. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 retry_after: 30 ToolFailed: description: Tool failed to run. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/processing_error - https://iotools.cloud/docs/errors/internal_error title: type: string description: Short human-readable summary of the failure. examples: - Tool failed to run - Internal error status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - processing_error - internal_error detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. credits_used: type: integer description: >- Always 0 on `processing_error` — a failed run is refunded, floor included. credits_remaining: type: integer description: >- Credits left after the refund. Absent when metering is disabled. example: type: https://iotools.cloud/docs/errors/processing_error title: Tool failed to run status: 500 code: processing_error detail: The tool failed to run. Please try again. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 credits_used: 0 ToolDisabled: description: Tool temporarily disabled. content: application/problem+json: schema: type: object description: >- RFC 9457 problem document, served as application/problem+json. Branch on `code`; `title` is human prose and may be reworded without notice. Some failures add extension members — `fields` on validation errors, `retry_after` on 429s, `credits_used`/`credits_remaining` on billing-adjacent failures — documented on the responses that carry them. required: - type - title - status - code properties: type: type: string format: uri description: Stable documentation URI for this failure. examples: - https://iotools.cloud/docs/errors/tool_disabled - https://iotools.cloud/docs/errors/api_unconfigured title: type: string description: Short human-readable summary of the failure. examples: - Tool temporarily disabled - API not configured status: type: integer description: HTTP status code, matching the response's own status. code: type: string description: >- Stable machine-readable error code — branch on this, not `title`. enum: - tool_disabled - api_unconfigured detail: type: string description: Human explanation of this occurrence. request_id: type: string description: Correlation id, also sent as x-request-id. example: type: https://iotools.cloud/docs/errors/tool_disabled title: Tool temporarily disabled status: 503 code: tool_disabled detail: This tool is temporarily unavailable. Try again shortly. request_id: e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11 securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: iot_live_… ````