Relay & forwarding
Add relay rules to an endpoint (paid plans) to forward each captured webhook to one or more destination URLs — optionally transforming the payload — with automatic retries and delivery logs. Internal/private destinations are blocked for safety.
Transform modes
- Passthrough — forward the raw inbound body unchanged, plus any custom headers.
- Template — build a new JSON body using
{{dot.path}}tokens resolved against the inbound JSON. For example{"msg":"Hi {{user.name}}"}. - Filter — forward only a whitelist of top-level keys.
Retries & delivery logs
Each attempt is logged with status, HTTP response code, a response snippet, and duration. Failed deliveries retry with exponential backoff up to your rule's retry count. Business plans get priority retries.
How does CanHook prevent SSRF?
Before every outbound request — and on every redirect hop — CanHook resolves the destination hostname and rejects it if any resolved IP falls in a private or reserved range (including 127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, and the cloud metadata endpoint 169.254.169.254). Only http/https on standard ports are allowed, and the connection is pinned to the validated IP to prevent DNS rebinding.