# Features

Every feature works without an account and without a paywall. Here is what a Snare bin can do.

## Capture

Snare records every request in full: any HTTP method, any path, any query string, every header, and the complete body. Large payloads and binary content are stored intact, up to 10 MB. Nothing is truncated and nothing is hidden behind an upgrade. What the sender sent is exactly what you read.

## Custom responses

Decide exactly what your bin returns to the caller: status code, response headers, body, and even an artificial delay to simulate a slow endpoint. Useful when the sender retries on non-2xx, or when you need to reproduce a timeout to see how a webhook source behaves.

## Forward & proxy

Proxy captured requests onward to your local tunnel or staging endpoint — asynchronously, or synchronously so the upstream sees your real response. Every forward is SSRF-guarded, so a public catcher can never be turned into a relay into private networks.

## Replay

Take any request Snare captured, tweak the headers or body, and replay it to your endpoint. Reproduce a tricky payload on demand instead of waiting for the source to fire again.

## Signature verification

Verify Stripe, GitHub, and generic HMAC signatures against the exact raw body Snare captured — so you can tell a genuinely invalid signature from a body your framework re-encoded. JSON and form payloads are pretty-printed, with the raw bytes one click away.