Share links
Share a single event with a teammate or customer via a public, no-login URL.
A share link is a public URL that opens a single event in read-only inspector mode. It is meant for the case where someone outside your account needs to see a specific webhook — a teammate debugging alongside you, a support engineer at a provider, or a customer reporting a problem.
What a share link exposes
- The event metadata (provider, path, status, latency, attempts).
- The full request headers and body.
- The full response headers and body.
- The replay button (so the recipient can trigger a replay against your live tunnel).
- The event timeline and timing breakdown.
A share link does not expose:
- Any other event on your account.
- The list of aliases on your account.
- Your account email, plan, or any other identifying information.
- Anything that requires authentication.
The link is scoped to a single event token. The token is unguessable (32 random bytes) and does not include the event ID in plaintext. The recipient can view and replay, but cannot navigate to other events.
Creating a share link
From the event inspector, click Share → Create link. The dashboard generates the URL and copies it to your clipboard. You can revoke the link at any time from the same screen.
The link looks like:
https://fixedhook.com/r/<token>The recipient pastes it in any browser, no login required. They see the same inspector view you see, minus the account chrome.
Replaying from a share link
The recipient can click Replay in the shared inspector. The replay goes to your active tunnel — the recipient is triggering a replay against your code, not their own.
Anyone with the link can see the event and trigger a replay. Treat share links like API keys: share them only with people who need access, and revoke them when you're done.
Revoking a share link
Open the event in your dashboard, click Share → Revoke. The token is invalidated immediately. The share URL returns a 404 from that point on, even if the recipient has it open in a browser.
Revocation is one-way. Once revoked, the token cannot be re-enabled. To share the event again, create a new link.
Auditing
Every time a share link is opened or used to trigger a replay, the dashboard logs the access in the event's audit trail. You can see the access log from the event inspector by clicking Share → Access log.
The log shows:
- The IP address of the viewer.
- The approximate geographic location (country-level).
- The timestamp of the access.
- Whether the access was a view or a replay trigger.
This is useful when you need to know if a specific teammate or customer actually opened the link.
Share links and your plan
Share links are unlimited on every plan, including the free tier. They are a debugging primitive, not a paid feature.
Programmatic creation
You can create a share link from the API as well:
POST /api/v1/events/{id}/share
Authorization: Bearer <token>The response is the share URL. See the events API for the full request and response shape.