Cloak Proxy — Claude Code MCP server: intercept HTTPS traffic
Gives your coding agent a handle on HTTPS requests caught by the Cloak Proxy debugger on macOS: inspect them, pause them, rewrite the response, replay a set.
Open on GitHubWhat Cloak Proxy does
The server hooks into the Cloak Proxy app and hands captured traffic to the agent. You can pull apart a request, swap the response mid-flight, hold a call at a breakpoint or run a saved mock set again. Secrets get redacted before anything reaches the model, so tokens and cookies stay out of the context window.
Cloak Proxy itself is a free native macOS proxy. It decrypts HTTPS per host or per app, ships breakpoints, Map Local and Map Remote, scripting and a built-in API client, and has beta Linux builds. Nothing shows up until the proxy is running and capture is on, so install the app first: brew install --cask subcloak/tap/cloak-proxy or the Cloak-Proxy.dmg from the download page.
The README claims 148 tools for Claude, Cursor and Codex. Some pieces need macOS 14 Sonoma or later. HTTPS decryption also depends on a root certificate being trusted — skip that step and you only see hostnames, not bodies. CI runs without a GUI go through cloakctl.
What it helps with
- inspect a captured HTTPS request and read its body
- mock a server response without touching the code
- hold a request at a breakpoint and edit it before it continues
- replay a stored mock set to test error handling
- hunt IDOR bugs by replaying traffic as another user
Example prompts for the agent
- Show the last requests captured for
api.example.comand walk me through the payload. - Mock this endpoint to return 500 and check how the app handles the failure.
- Pause the auth request, let me look at the headers, then release it.
How to install Cloak Proxy
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Cloak Proxy
How do I install Cloak Proxy in Claude Code?
Start with the app: grab Cloak-Proxy.dmg or run brew install --cask subcloak/tap/cloak-proxy. The MCP server talks to an already running proxy, and the tools do nothing without it.
What does Cloak Proxy do?
It is a debugging proxy for macOS that decrypts HTTPS, groups traffic by app and offers breakpoints plus request rewriting. Its MCP server exposes that traffic to an AI agent.
Does it need a root certificate?
Yes, you have to trust the root certificate for HTTPS decryption. Without it the proxy reports hostnames only and request bodies stay encrypted.
