ReplayHooks API reference

Ingestion

POST|GET|PUT|PATCH|DELETE|HEAD|OPTIONS  /x/:token[/:path*]

• Auth: none (token is the secret)
• Body limit: 1 MB
• Response: configured per endpoint (default 200)
• Errors to caller: ingestion never throws 5xx for app bugs — failures are logged and still return success when possible so providers do not infinite-retry

curl -X POST https://hook.replayhooks.com/x/<token>/hooks/stripe \
  -H 'Content-Type: application/json' \
  -d '{"ok":true}'

Captured fields: method, path, query, headers, content-type, body, source IP, received_at.

App APIs (authenticated)

All /api/* routes (except webhooks and public demo reads) require a Clerk session and workspace membership.

• GET/POST /api/endpoints — list / create (member / admin)
• PATCH/DELETE /api/endpoints/:id — update / delete (admin)
• GET /api/endpoints/:id/events — list events (member)
• POST /api/events/:id/replay — replay (member)
• POST /api/demo/claim — claim anonymous demo URL (admin)

Public share

GET /share/:shared_token

Read-only single-event page. No auth.