Run the engine's analysis pipeline on a single captured request (linting, schema drift, privacy, performance). Returns the structured explanation plus any new findings. Re-runs even if cached unless refresh is false.

Activate an environment so subsequent captures and replays resolve variables against it. Use list_environments to discover ids.

Delete every captured traffic entry from the engine buffer. Irreversible. Most MCP clients prompt for confirmation before invoking destructive tools — this is one of them.

Diff a session against a baseline session and return a structured comparison (added/removed/changed requests, latency deltas, finding drift). Both sessions must be stopped.

Create a chaos rule. Chaos injects latency, errors, throttling, and corruption patterns that mirror real-world degraded services.

Convenience: fetch a captured request by id and scaffold a mock rule from its recorded response. Optional overrides let the caller tweak fields before persisting.

Create a mock rule. The rule fires for matching requests through both the capture proxy and the standalone mock server, and is persisted in the engine database. Returns the created rule with its assigned id.

Create a rewrite rule. Rewrites mutate live requests/responses (headers, body, status) without short-circuiting the upstream call.

Permanently delete a chaos rule by id.

Permanently delete a mock rule by id. The action is recorded in the local audit log.

Permanently delete a rewrite rule by id.

Remove a rule pack from the engine. Does not uninstall rules the pack already added — use the individual delete_* tools in the mutate tier for that.

Permanently delete a session and its association with the captured requests (the requests themselves stay in the buffer).

Mark a finding as dismissed so it stops appearing in default views. Reversible with restore_finding.

Export the current rule configuration as a portable pack manifest. The agent can then save it, share it, or hand it to import_rule_pack on another machine.

Return whether a local CA root certificate is available for HTTPS interception. Only the public PEM is exposed; the private key never leaves the engine.

Return counts of current findings grouped by severity and category. Cheap; use this before list_findings to triage.

Return the full headers and redacted body of a single captured request by id.

Return the manifest of a single session by id, including its included entries and any attached baseline.

Import a rule pack bundle (mocks + rewrites + redaction rules) into the engine. The pack is registered but not installed until install_rule_pack is called.

Install a previously-imported rule pack. This persists every rule inside the pack into the engine — potentially many rules at once, so use with care.

List chaos rules. Chaos injects latency, errors, and partial failures matching real-world degraded-service patterns.

List configured environments and which one is active. Variables are returned with their keys but secret-shaped values are redacted.

List engine findings (privacy, schema, performance, lint). Use severity or scope to narrow.

List configured mock rules. Each rule fires when a matching request flows through either the capture proxy or the standalone mock server.

List requests currently paused at a breakpoint, awaiting agent or human review before being released to the upstream.

List configured rewrite rules. Rewrites mutate live requests/responses (headers, body, status) without short-circuiting the upstream call.

List installed rule packs. A rule pack is a versioned bundle of mocks/rewrites/redaction rules — useful for sharing a known-good configuration across machines or teams.

List installed JS hook scripts. Scripts run server-side in the engine's goja VM and can mutate any request/response programmatically.

List named sessions. A session is a bookmarked range of traffic captured for replay, sharing, or baseline diffing.

List captured HTTP/HTTPS requests. Filters narrow by method, URL substring, response status, and page through the result set. Response bodies are redacted server-side before return.

Scan recent captured traffic for PII / secret patterns not covered by existing redaction rules and return only the redaction-kind suggestions. Scanning records each suggestion in the engine. Installing one is not exposed over MCP — accept it in the ProxyKit app's suggestions view, or add the rule directly with proxykit redaction add --path <key>.

Return whether the MITM proxy is running, which port it is bound to, whether TLS interception is configured, and how many captured entries are in the buffer.

Release a paused request so it continues to the upstream (or returns to the client, depending on which side was paused). Optionally pass edits to mutate the request before release.

Re-issue a captured request — optionally with method/url/body/headers overrides — and return the upstream response. Use this to verify a fix against the real backend or A/B between two URLs.

Re-fire every captured request in a session against the real upstream. Returns one row per attempted request with status, duration, and error if any. One failure does not abort the loop.

Re-scan every captured request through the findings detectors. Useful after adding a redaction rule or changing detector config. Returns analyzed and findings counts.

Restore a previously dismissed finding so it appears in default views again.

Run one of ProxyKit's built-in local workflows over engine data. These workflows are deterministic — they do not call an external LLM. Returns markdown the agent can chain into its own reasoning ("explain_failure → generate_issue → suggest_tests").

Substring search across captured URLs and a window of recent entries. For very large captures, narrow the window with method+status first.

Start the capture proxy. Optionally choose a port and toggle TLS interception. If the proxy is already running, this returns the current status.

Start a named session. All traffic captured while the session is active is tagged with the session id, so the agent can later replay or compare it. Returns the new session record.

Stop the capture proxy. Captured entries already in the buffer are preserved.

Stop an active session. After stopping, the engine automatically rescans the captured entries for findings.

Enable or disable a chaos rule by id. Omit enabled to flip.

Enable or disable a mock rule by id without changing any other fields. Omit enabled to flip the current value.

Enable or disable a rewrite rule by id. Omit enabled to flip.

Update a chaos rule by id. Partial.

Update an existing mock rule by id. Pass only the fields you want to change; missing fields keep their current value. Returns the updated rule.

Update a rewrite rule by id. Partial — only changed fields need be passed.