Start the Mockttp HTTPS interception proxy. Generates/loads a stable CA. Point your emulator's proxy at : and install the CA to capture traffic.

Stop the interception proxy.

Report proxy state, captured count and local IPs.

Return the proxy CA certificate (PEM) and its file path for device installation.

List captured exchanges (newest first) with optional filters.

Full-text search across URLs, headers and bodies of captured exchanges.

Full detail for one exchange: request line, request/response headers, request & response cookies, and both bodies. Bodies render per bodyFormat (auto/text/json/hex/protobuf/base64).

List a WebSocket exchange's messages, rendered in the chosen format.

Return just the request or response body of an exchange in a chosen format.

Schema-less protobuf decode that keeps ALL interpretations per field (message/string/bytes) and transparently decompresses embedded gzip/zlib/zstd and unwraps gRPC frames. Input a captured exchange body, or paste raw hex/base64. Use output=json to get a structured tree for building automations.

Tell what an unknown blob most likely is (entropy + magic bytes + JSON/protobuf/base64/gRPC probes) so you don't try to decode ciphertext. Flags encrypted transports (e.g. WhatsApp Noise/E2E) that passive MITM can't decode. Input an exchange body or raw hex/base64.

Decode two exchanges' bodies as protobuf and diff them by field path - surfaces which fields change between requests (cursors, tokens, ids) vs stay constant. Ideal for reverse-engineering an API for automation.

Drop all captured exchanges.

Export captured traffic (optionally filtered) to a .har file.

Load a .har file (e.g. exported from HTTP Toolkit or a browser) into the store so it can be listed, searched and inspected like live traffic.

Reply to matching requests with a fixed response (passes through everything else).

Break matching requests: reset/close the connection or hang (timeout).

Delay matching requests by N ms, then pass them through normally.

Transparently forward matching requests to a different absolute URL.

Rewrite headers/body on matching requests, then pass through.

List active interception rules.

Remove a rule by id.

Remove all rules.

List connected adb devices/emulators.

Connect to an emulator over TCP. Accepts a host:port or a preset name (nox, memu, bluestacks, ldplayer). See list_emulator_presets.

Known emulators with their default adb connect host:port.

Tunnel the proxy port back to the device over the adb channel (device 127.0.0.1: -> host). Use this for emulators behind their own NAT (e.g. MEmu, where the gateway is the emulator's virtual router, not the host) - then set the device proxy to 127.0.0.1:. Bypasses host firewall/NAT.

Push the proxy CA into the device's SYSTEM trust store via adb (no Magisk needed on Nox/MEmu). Trusted by all apps and invisible to user-store anti-MITM checks. Fails on hard-pinned apps.

Route device traffic through host:port via adb (no WiFi UI needed).

Remove the device global proxy via adb.

Convenience: start proxy (if needed), install the system CA, and set the device proxy in one step. By default uses an adb reverse tunnel (127.0.0.1), which works on NAT'd emulators like MEmu without needing a reachable host IP. Set hostIp to use a LAN IP instead.

Redirect ALL device TCP :80/:443 to the proxy via iptables DNAT - captures every app's traffic on L3, including apps that ignore the system proxy (e.g. VK). No companion app, no VPN dialog. Requires root (Nox/MEmu out of the box). Defaults to a loopback target via adb reverse tunnel (works behind emulator NAT); pass hostPort to DNAT to a reachable LAN host.

Remove the iptables DNAT rules (and reverse tunnel if loopback). Flushes nat OUTPUT.

Show the device's nat OUTPUT chain (active DNAT redirects).

Start proxy (if needed), install the system CA, and enable transparent iptables capture - the closest adb-only equivalent of HTTP Toolkit's VPN mode, with zero on-device dialogs. Catches apps that ignore the system proxy (e.g. VK). Defaults to loopback + reverse tunnel (works behind emulator NAT); pass hostIp for a directly reachable host.