request bin

Get a public URL that captures every request sent to it — headers, body, the lot — so you can inspect webhooks or catch blind callbacks (SSRF, blind-XSS, OOB). Nothing is kept long; the bin and its captures expire.

Or from the terminal

curl -s exl.ink/api/bin/new
# → { "captureUrl": "...", "inspectUrl": "...", "apiUrl": "..." }
# point any webhook at captureUrl, then read apiUrl