# masterhttprelayvpn-proxy

A skill that walks your agent through running a local HTTP/SOCKS5 proxy, with traffic tunnelled through Google Apps Script and dressed up as Google requests.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 365 installs · ★ 88
- Author: reason-machines
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/trending-skills/tree/HEAD/skills/masterhttprelayvpn-proxy/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/masterhttprelayvpn-proxy

## What it does

MasterHttpRelayVPN listens on your machine and forwards traffic along a chain: browser, local proxy at `127.0.0.1:8085`, a Google IP, the Apps Script relay, then the destination site. A free Google account is all you need; there is no VPS to rent. Because the proxy intercepts TLS locally and re-encrypts it, HTTPS pages stay broken until you install the CA certificate.

The skill covers the whole setup. You deploy the relay in Apps Script with an `AUTH_KEY`, copy the Deployment ID into `config.json` next to `auth_key`, start things with `python3 main.py`, and add the certificate via `python main.py --install-cert`. An interactive wizard, `python setup.py`, generates the key and writes the config for you. Ports, an ad-blocking `block_hosts` list and a `bypass_hosts` list for local addresses that skip the relay are all set in that same file.

Watch the key: `auth_key` in `config.json` has to match `AUTH_KEY` in `Code.gs`, or the relay rejects every request. To spread load you can list several Deployment IDs under `script_ids`, though each script needs the same secret. Keep the `ca/` folder to yourself — its private key sits in the middle of all your HTTPS traffic.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/trending-skills --skill masterhttprelayvpn-proxy -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/masterhttprelayvpn-proxy/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/masterhttprelayvpn-proxy/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/trending-skills --skill masterhttprelayvpn-proxy -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/masterhttprelayvpn-proxy/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/trending-skills --skill masterhttprelayvpn-proxy -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/masterhttprelayvpn-proxy/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/trending-skills masterhttprelayvpn-proxy
```

2. **Manually: put the files in place**
- File: `.github/skills/masterhttprelayvpn-proxy/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/trending-skills --skill masterhttprelayvpn-proxy -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/trending-skills --path skills/masterhttprelayvpn-proxy
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/masterhttprelayvpn-proxy/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/trending-skills --skill masterhttprelayvpn-proxy -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/trending-skills/tree/HEAD/skills/masterhttprelayvpn-proxy/SKILL.md

## When to use it
- run a proxy without renting a VPS
- get past DPI by making traffic look like Google
- point a browser and curl at a local HTTP proxy
- share the proxy with other machines on the LAN
- drop ad domains through `block_hosts`

## Example prompts
- Set up MasterHttpRelayVPN: write `config.json` with my Deployment ID and start the proxy on port 8085
- Configure the Google Apps Script tunnel and install the CA certificate for HTTPS
- Turn on SOCKS5 at port 1080 and add `.doubleclick.net` to `block_hosts`

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [reason-machines/trending-skills](https://affpapa.org/en/nevibecode/by/reason-machines/trending-skills.md) — 139 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md