Field manual
Everything you can do right now
Bins are your campsites in the wilderness of HTTP. Here is the gear that ships with this app today.
Bins & capture
- Unique ingest URL per bin (ULID) at
/w/{id} - Optional label; guest bins without sign-up
- Stores method, full URL, query, headers, body, content type, client IP
- Live dashboard updates via Server-Sent Events
- Filter captures by HTTP method and text search (URL, body, IP)
Ingress & relay
- Configurable HTTP status, response body, and Content-Type returned to senders
- Optional forward URL: relay each request to your backend (fire-and-forget)
- Per-bin ingress rate limit (requests per minute)
- Optional retention window (days) for captures
Inspect & export
- Per-bin display transforms: mask header/query/JSON body fields and rename headers for safe screenshots and shares (syntax and behavior: Request transformations in README)
- Export all captures as JSON download
- Diff two captures side by side
- Replay a saved capture to any URL you choose
- Clear capture history for a bin
Accounts & API
- Register, profile, and list bins tied to your user
- Save a guest bin to your account (same URL)
- Sanctum API tokens and
/api/v1for bins and captures - Guest JSON API for stream and capture reads (browser session)
- Teams (workspaces) with owner, admin, editor, and viewer roles; shared bins per team; personal bins stay private to you
- Per-bin invites by email (viewer or editor) on personal bins or single team bins—without adding people to the whole team
Traffic alerts
- Optional email, Slack incoming webhook, or custom HTTPS JSON webhook when a bin receives ingress traffic
- Per-bin cooldown to limit alert frequency; configure mail in .env for email delivery
OpenAPI & API docs
- Public machine-readable spec at
/openapi/v1.yaml - Interactive reference at /docs/api (Swagger UI: Try it out, Bearer auth, cURL request snippets)
- Documents Sanctum
/api/v1, browser session JSON routes, SSE stream, and webhook ingress/w/{id}
Usage analytics & audit log
- Per-bin page: last 30 days of capture volume plus an append-only audit trail for that bin (exports, settings, replay, diff, etc.)
- Account page (signed in): traffic across all bins, Sanctum API request counts, and a merged audit log including token create/revoke
- API usage metrics only include Bearer-authenticated calls to
/api/v1
No account required to start.