One API for requests and events
A clean, resource-oriented REST API paired with signed, retryable webhooks. Every payload is HMAC-signed, automatically retried with exponential backoff, and delivered at-least-once so nothing slips through the cracks.
- HMAC-SHA256 signatures on every payload
- Automatic retries with exponential backoff
- Idempotency keys to prevent duplicate processing
Type-safe clients for every stack
Generated from a single OpenAPI spec, our SDKs stay perfectly in sync with the API. Full type definitions, built-in signature verification, and ergonomic helpers mean you write less boilerplate and ship faster.
- Node, Python, Go, Ruby, and PHP libraries
- Built-in webhook signature verification
- Auto-pagination and retry helpers included
Stream events as they happen
Open a single connection and receive events over WebSockets or server-sent events with at-least-once delivery. Filter by type, replay from a cursor, and never miss a message during reconnects.
- WebSocket and SSE transports
- Cursor-based replay after disconnects
- Server-side filtering by event type
See every request and replay any failure
Searchable, structured logs for every API call and webhook delivery attempt — status codes, latency, payloads, and headers. Diagnose issues in seconds and replay failed events with a single command.
- Full request and delivery history, searchable
- One-click and CLI event replay
- Latency and error-rate metrics out of the box
Protect your backend automatically
Define per-key and per-route limits with burst allowances. Clients receive clear rate-limit headers, and you stay in control of your traffic — no surprise spikes, no noisy neighbors.
- Per-key, per-route, and global limits
- Standard
X-RateLimit-*response headers - Burst control with token-bucket fairness
Give every teammate the right access
Issue scoped API keys, assign roles, and keep a complete audit trail of who did what. Rotate keys without downtime and keep production and test environments cleanly separated.
- Granular scopes and role-based permissions
- Immutable audit log of every key action
- Separate live and test environments
Connect the tools you already use
Forward events to your stack with zero code, or trigger Hooklane from the services your team relies on.
See the platform in action
Read the quickstart and send your first event in under five minutes, or talk to our team about your use case.