Webhook plumbing you configure once instead of rebuilding every project.

Every integration project rebuilds the same webhook plumbing: signature verification, retries, fan-out, transformation, inspection. It's undifferentiated work that still manages to be security-critical — the worst combination.

Hooker gives each source one stable inbound URL and handles the rest: verify, transform, route, retry. Routes are deterministic and versioned, destinations get their own retry behavior, and the whole thing is multi-tenant so one deployment serves many workspaces.

• Gives each source one stable inbound URL with HMAC/secret verification, a replay window, and scoped idempotency.
• Deterministic rule-based routes fan out to multiple destinations, versioned as immutable snapshots you can replay.
• Templated Discord embeds and HTTP bodies, per-destination retry/backoff that honors rate limits, and an SSRF host allowlist.
• Multi-tenant workspaces with role-scoped keys, an audit log, plan limits, and optional Stripe billing.

• Node.js
• Express 5
• React 19
• Vite
• SQLite / Postgres
• Stripe