# Catchook

> Monitoring for inbound webhooks. Catchook receives webhooks on behalf of a
> provider, verifies their signature, fans them out to every destination the
> customer configured, and watches each integration so that a silent failure
> surfaces before a customer reports it.

## Facts

- Receive a webhook: `POST https://events.catchook.com/e/<endpoint_id>`
- Control-plane API: `https://api.catchook.com`, `Authorization: Bearer ck_…`
- OpenAPI document: https://catchook.com/openapi.json
- The organization is never a request parameter; it is resolved from the API key
- JSON fields are snake_case on the wire; responses are `{ data, timestamp }`
- Delivery is at-least-once and unordered — be idempotent on `catchook-event-id`
- Limits: 100 KB body, 12,000 req/min per endpoint, 10 retry attempts, 14-day retention
- Config changes (pause, rotate, add destination) take up to 60 seconds to apply

## Getting started

- [Introduction](https://catchook.com/docs): What Catchook does with a webhook between the moment a provider sends it and the moment your service handles it.
- [Quickstart](https://catchook.com/docs/quickstart): Create an endpoint, point a provider at it, and receive your first verified webhook.

## Concepts

- [How it works](https://catchook.com/docs/how-it-works): The receive path, the delivery path, and what each one guarantees.
- [Endpoints](https://catchook.com/docs/endpoints): One inbound URL, one provider, one verification method — plus pausing and secret rotation.
- [Destinations](https://catchook.com/docs/destinations): Where an endpoint's events get delivered, and the retry and rate-limit policy each one carries.
- [Signature verification](https://catchook.com/docs/signature-verification): The verification methods an endpoint can use, and exactly what each one checks.

## Guides

- [Local development](https://catchook.com/docs/local-development): Receive real provider webhooks on your laptop, with no tunnel and no public URL.
- [Verifying deliveries](https://catchook.com/docs/verifying-deliveries): Confirm a request to your receiver actually came from Catchook.

## Reference

- [CLI](https://catchook.com/docs/cli): catchook listen, replay and events — command and option reference.
- [API conventions](https://catchook.com/docs/api-conventions): Authentication, the response envelope, errors and field naming — the rules every endpoint follows.
- [Limits](https://catchook.com/docs/limits): Every hard limit and timing guarantee in one place.

## API reference

- [Projects](https://catchook.com/docs/api/projects): GET /projects, POST /projects, GET /projects/{id}, PATCH /projects/{id}, DELETE /projects/{id}
- [Endpoints](https://catchook.com/docs/api/endpoints): GET /projects/{projectId}/endpoints, POST /projects/{projectId}/endpoints, GET /endpoints/{id}, PATCH /endpoints/{id}, DELETE /endpoints/{id}, POST /endpoints/{id}/test, POST /endpoints/{id}/pause, POST /endpoints/{id}/resume, POST /endpoints/{id}/rotate-secret
- [API Keys](https://catchook.com/docs/api/api-keys): GET /projects/{projectId}/api-keys, POST /projects/{projectId}/api-keys, GET /api-keys/{id}, DELETE /api-keys/{id}
- [Destinations](https://catchook.com/docs/api/destinations): GET /endpoints/{endpointId}/destinations, POST /endpoints/{endpointId}/destinations, GET /destinations/{id}, PATCH /destinations/{id}, DELETE /destinations/{id}, POST /destinations/{id}/pause, POST /destinations/{id}/resume, POST /destinations/{id}/rotate-secret
- [Events](https://catchook.com/docs/api/events): GET /events, GET /events/facets, GET /events/{eventId}, GET /events/{eventId}/attempts, POST /events/{eventId}/replay, POST /events/{eventId}/destinations/{destinationId}/replay

## Blog

- [Webhooks fail silently, and that is the whole problem](https://catchook.com/blog/webhooks-fail-silently): A broken webhook integration and a quiet one produce exactly the same signal — nothing. That is why they get found by support tickets.

## Optional

- [llms-full.txt](https://catchook.com/llms-full.txt): every documentation page inlined, in one file
- [openapi.json](https://catchook.com/openapi.json): machine-readable description of every endpoint
- [RSS](https://catchook.com/rss.xml): new posts