# Snare Guides

- [Use Snare with AI agents (MCP + JSON API)](https://snare.tools/guides/use-snare-with-ai-agents): Add Snare's MCP server to Claude Code, Cursor, or any MCP host with one command, then use create_bin / list_requests / get_request to inspect HTTP traffic without leaving your AI session. A JSON API is also available for scripted or CI use.
- [Debug PayPal webhooks (transmission headers & verification)](https://snare.tools/guides/debug-paypal-webhooks): Capture a PayPal webhook event exactly as sent, read the Paypal-Transmission headers PayPal verification depends on, and replay deliveries while you fix your handler.
- [Debug Shopify webhooks (X-Shopify-Hmac-Sha256)](https://snare.tools/guides/debug-shopify-webhooks): Capture a Shopify webhook exactly as sent, verify the base64-encoded HMAC-SHA256 signature against the raw body, and find out why your handler rejects it.
- [Debug Slack webhooks & request signing (X-Slack-Signature)](https://snare.tools/guides/debug-slack-webhooks): Capture Slack event deliveries and slash commands exactly as sent, verify the v0= signature built from timestamp and raw body, and answer the url_verification challenge.
- [Debug Twilio webhooks (X-Twilio-Signature)](https://snare.tools/guides/debug-twilio-webhooks): Capture a Twilio webhook exactly as sent, see why X-Twilio-Signature validation is different from body-HMAC schemes, and replay deliveries while you fix your handler.
- [Inspect HTTP requests online (no install, no account)](https://snare.tools/guides/inspect-http-requests-online): Get a public URL in one click, point any HTTP client or webhook at it, and read the full request - method, headers, query, raw body - right in the browser.
- [Test webhooks with cURL](https://snare.tools/guides/test-webhooks-with-curl): cURL recipes for simulating webhook deliveries - JSON bodies, provider headers, HMAC signatures computed in the shell - plus a way to see what your command actually sent.
- [Webhook retries and timeouts, explained](https://snare.tools/guides/webhook-retries-and-timeouts): What counts as a failed webhook delivery, how long providers wait, how often they retry - and how to test your endpoint against slow responses and duplicate deliveries.
- [Webhook security best practices](https://snare.tools/guides/webhook-security-best-practices): The security checklist for webhook endpoints - verify signatures against raw bytes, bound timestamps, process idempotently, rotate secrets, and keep payloads out of your logs.
- [How to debug a Stripe webhook](https://snare.tools/guides/debug-stripe-webhooks): Capture the real event Stripe sends, read the full body, and confirm the Stripe-Signature header against the raw payload - no public server required.
- [How to test webhooks without a public URL](https://snare.tools/guides/test-webhooks-without-a-public-url): A request bin gives you an instant public HTTPS URL to capture webhooks, inspect the full request, and forward or replay it to localhost - no tunnel or deployed server needed.
- [Verify a GitHub webhook HMAC signature (X-Hub-Signature-256)](https://snare.tools/guides/verify-github-webhook-hmac-signature): Capture a GitHub delivery exactly as sent and confirm the X-Hub-Signature-256 HMAC-SHA256 against the raw body - the reliable way to debug a failing GitHub webhook signature.
- [What is a webhook?](https://snare.tools/guides/what-is-a-webhook): A plain-English definition of webhooks: what they are, how they differ from polling an API, the anatomy of a webhook request, and how to see exactly what one sends.