pipehero
Docs menu
L

Receive Lemon Squeezy webhooks on localhost

Lemon Squeezy fires webhooks for orders and subscription lifecycle events. Pipehero gives you a public URL to receive them locally, and because Lemon Squeezy uses a straightforward HMAC you get a full signature badge.

1Install Pipehero and start a tunnel

Install the CLI, log in, then expose your local port. You get a stable public URL like myapp.t.pipehero.app.
curl -fsSL pipehero.app/install | sh
pipehero login
pipehero start myapp --port 3000

2Create the webhook

In Lemon Squeezy go to Settings → Webhooks → Add, set the Callback URL to your Pipehero endpoint, choose events, and set a signing secret.
https://myapp.t.pipehero.app/webhooks/lemonsqueezy

3Inspect & replay

Every request shows up live in the dashboard (and the local panel at localhost:4140) with headers and body. Hit Replay to re-send it to your localhost — no need to re-trigger the event at the provider. Requests that arrive while your CLI is offline are captured and can be replayed later.

4Verify the signature

Lemon Squeezy signs the raw body with HMAC-SHA256 (hex) in the `X-Signature` header. In Pipehero add a Custom provider — header `X-Signature`, payload `body`, encoding `hex` — with your signing secret to get a ✓/✗ badge.

FAQ

Which secret do I use?

The signing secret you set when creating the webhook in Lemon Squeezy — paste that same value into the Custom provider in Pipehero.

Related

Start debugging webhooks in a minute

Free plan, no credit card. Expose localhost, inspect and replay every webhook.

Get started free