API & Webhook Workspace
DevPipe is a specialized toolkit for engineers building integrated systems. Inspect payloads, debug CORS issues, and validate API performance—all in one place.
Validation
Webhook Tester
Free webhook tester: send payload to URL, get health score (status, latency, response). Test Stripe, GitHub, Shopify. No signup.
API Response Analyzer
Free API health check: GET request, check status, latency, Content-Type, JSON. Get API health score and recommendations.
Webhook Payload Viewer
Inspect, format, and validate incoming webhook payloads. JSON pretty-print, syntax check. Free webhook debugger.
Webhook Capture
Get a unique URL to receive webhooks. See POST/GET requests in real time. Free webhook testing endpoint. No signup.
Auth Header Validator
Validate JWT, Bearer, and Basic Auth header structure. Check format before sending. Free auth header checker.
JWT Decoder
JWT decoder: paste token, inspect header and payload claims. Free JWT viewer for debugging auth. Base64 decode.
OpenAPI Validator
Validate OpenAPI 2.0 / 3.x JSON structure and paths. Check spec before deploy. Free OpenAPI/Swagger validator.
Response Schema Validator
Validate JSON against JSON Schema (draft-07). API response validator. Paste schema and payload. Free online.
GraphQL Query Validator
Validate GraphQL query, mutation, or subscription syntax. Check before sending. Free GraphQL validator.
Idempotency Key Checker
Validate Idempotency-Key header format (UUID). Check before POST. Free idempotency key validator.
Request Body Validator
Check if request body is valid JSON before POST/PUT. Validate before sending. Free JSON body checker.
API Error Code Analyzer
HTTP error code lookup: status code meaning, suggested action. 4xx, 5xx explained. Free API error guide.
Base64 Encoder / Decoder
Base64 encode/decode: text to Base64, Base64 to text. URL-safe supported. Free encoder decoder. No signup.
UUID Generator
Generate UUID v4 for idempotency keys, request IDs, trace IDs. Copy and use. Free UUID generator.
JSON Diff
Compare two JSON objects: see added, removed, changed keys. Free JSON diff tool for API responses. No signup.
Security
Security Headers Analyzer
Free security headers audit: check HTTPS, HSTS, CSP, CORS for any URL. Get security score and fix recommendations.
CORS Checker
Test CORS policies for an endpoint. See Access-Control-Allow-Origin and headers. Debug cross-origin requests. Free online.
Signature Validator
Verify HMAC signatures for Stripe, GitHub, Shopify webhooks. Test webhook signing. Free signature checker.
Timestamp Validator
Check if webhook timestamp is within tolerance (replay protection). Test Stripe/GitHub style timestamps. Free.
Auth Token Expiry Checker
Check JWT exp, iat, nbf: see if token is valid or expired. Free JWT expiry checker for auth debugging.
HMAC Checker
Compute HMAC-SHA256(secret, message) or verify webhook signature. Stripe, GitHub, Shopify. Free HMAC checker.
Request & Headers
API Header Inspector
Analyze request and response headers for any URL. See all headers, status, latency. Free API header viewer.
REST Endpoint Tester
REST API tester: send GET, POST, PUT, PATCH, DELETE with custom headers and body. Free API testing tool. No signup.
Query String Parser
Parse URL or raw query string into key-value parameters. Decode percent-encoding. Free query parser.
Status Code Tester
Send request, see HTTP status code, response time, and explanation. Free status code checker. No signup.
Header Diff Checker
Compare two sets of HTTP headers: see added, removed, changed. Debug header differences. Free online tool.
Content-Type Parser
Parse Content-Type header: type, subtype, charset, boundary, params. Free header parser for API debugging.
Bearer Token Extractor
Extract scheme and credentials from Authorization header. Decode Basic auth. Free header parser.
Network & Performance
Retry Simulator
Test exponential backoff and retry logic. Simulate 5xx and timeout responses. Free retry testing tool.
Rate Limit Tester
Analyze how endpoints handle heavy traffic and rate limiting. Test 429 responses. Free rate limit checker.
Latency Checker
Measure response time for an endpoint with multiple requests. Free latency tester. See min/max/avg. No signup.
429 Detector
Send requests and detect when endpoint returns 429 Too Many Requests. Test rate limit behavior. Free tool.
Burst Simulation
Fire many requests at once to simulate traffic spike. Stress test endpoint. Free burst load tester.
Retry Logic Helper
Suggested wait times for exponential backoff. Get retry intervals for 429, 5xx. Free retry calculator.
CORS blocking your requests?
Turn on Use CORS proxy in the sidebar footer. API Header Inspector, CORS Checker, Retry Simulator, and Rate Limit Tester will send requests via a proxy to bypass browser CORS.