Use this first when the user wants to sign up, receive a verification /
    magic-link / password-reset email, catch a webhook callback, or get a
    one-off URL. Returns token, url, email ({token}@email.webhook.site),
    and dns. Next: give the email or URL to the site, then wait_for_email,
    then follow_email_link or use the OTP.
    

    Use when the user wants the endpoint to pretend to be an API (404, delay,
    JSON body) instead of a default 200. For a normal sign-up inbox, use
    create_webhook.
    

    Use to inspect what already arrived. Bodies are truncated and HTML is
    omitted; use export_webhook_data for the full dump. For the newest item
    use get_latest_request. To wait for something new use wait_for_request
    or wait_for_email. Filter emails with request_type='email'.
    

    Use when the user asks to find POSTs, a keyword, or only emails/DNS.
    Examples: query='method:POST', query='content:verify', request_type='email'.
    

    Use for a quick peek. Prefer wait_for_email after a sign-up, or
    get_webhook_requests to see history.
    

    Use after create_webhook when the user wants a different canned reply.
    

    Use when the user already has a token and needs the HTTP callback URL.
    For a new inbox, create_webhook already returns url.
    

    Address is {token}@email.webhook.site. Use when the user already has a
    token. If they do not, call create_webhook first — it also returns
    email. After the site sends mail, call wait_for_email.
    

    Use for out-of-band DNS callbacks, not for sign-up email. create_webhook
    already returns dns.
    

    Use after giving a site the webhook URL. Bodies are truncated and HTML
    is omitted; use export_webhook_data for the full dump. For verification
    / magic-link / password-reset mail, use wait_for_email instead. Set
    return_existing=true if the request may already be there.
    

    Call this after the user (or you) submitted {token}@email.webhook.site
    on a website. Returns subject, a truncated text preview, extracted
    confirm / reset / login URLs, and verification_codes (OTP). Next:
    follow_email_link, or type the code. HTML is omitted; use
    export_webhook_data for the full message. Set return_existing=true if
    the email already arrived. If there is no token yet, create_webhook first.
    

    Use after wait_for_email. Only follows http(s) links already in that
    inbox. Returns status, final URL, and a short page preview. For OTP
    codes, read verification_codes from wait_for_email instead.
    

    Use only on systems you are allowed to test — not for sign-up email.
    Confirm hits with check_for_callbacks. local_bypass_examples cannot
    be confirmed here.
    

    Use after generate_ssrf_payload / generate_xss_callback / generate_canary_token.
    For a website verification email, use wait_for_email.
    

    Use only on systems you are allowed to test. Confirm with check_for_callbacks.
    

    Use to mark your own files or systems. token_type='email' is a tripwire,
    not a sign-up inbox — use create_webhook + wait_for_email for that.
    

    Use after wait_for_email or get_webhook_requests when the user needs
    the verification / login / password-reset link or OTP. Defaults to the
    latest event. wait_for_email already extracts links and codes.