Start the HTTPS MITM proxy. Auto-generates a CA certificate. Returns port, URL, cert fingerprint, and setup instructions for the target device.

Stop the MITM proxy. Traffic history and CA certificate are retained. Interceptor targets (browsers, containers, spawned processes) activated by THIS MCP session are deactivated; targets belonging to other MCP sessions keep running, though the proxy they were pointed at is gone until someone calls proxy_start again. Pass all=true to deactivate every session's targets (the pre-3.5.3, process-wide behaviour). Over stdio there is one session, so every target is deactivated either way.

Get proxy running state, port, upstream config, rule count, and traffic count.

Get the CA certificate PEM and SPKI fingerprint for installing on the target device.

Set a global upstream proxy for all outgoing traffic. Supports socks4://, socks5://, http://, https://, and pac+http:// URLs.

Remove the global upstream proxy. Traffic will go directly to target servers.

Set a per-host upstream proxy override. Traffic to this hostname will use the specified proxy instead of the global one.

Remove a per-host upstream proxy override.

Add an interception rule with a matcher and handler. Rules are evaluated by priority (ascending), first match wins.

Modify an existing interception rule.

Delete an interception rule.

List all interception rules sorted by priority.

Test which interception rules would match a request, with detailed per-field pass/fail diagnostics and effective winner by priority.

Enable a disabled interception rule.

Disable an interception rule without removing it.

List captured HTTP exchanges with optional filters. Returns paginated results.

Get full details of a captured HTTP exchange including headers and body previews.

Full-text search across URLs, headers, and body previews of captured traffic.

Clear all captured traffic from the buffer.

Add or overwrite headers on matching traffic. Creates a passthrough rule with header transforms.

Rewrite request URLs matching a pattern. Creates a passthrough rule with body match-replace on the URL.

Return a mock response for matched requests. Creates a mock rule.

Get JA3/JA4 client fingerprints and JA3S server fingerprint for a specific captured exchange.

List unique client JA3/JA4 fingerprints across captured traffic with occurrence counts.

Legacy: enable fingerprint spoofing (deprecated, use proxy_set_fingerprint_spoof with a preset). The ja3 parameter is accepted but ignored — the default Chrome preset is used.

Enable outgoing TLS + HTTP/2 fingerprint spoofing via impit (native TLS impersonation, no Docker required). Supports browser presets that select an impit target (rustls, matching real Chrome/Firefox).

List available browser fingerprint presets for use with proxy_set_fingerprint_spoof.

Check fingerprint spoofing backend readiness without sending traffic.

Disable fingerprint spoofing.

Get current TLS capture and spoofing configuration.

Toggle server-side JA3S capture. When enabled, outgoing TLS connections are intercepted to extract the server's negotiated TLS parameters.

List all interceptors with their availability and active targets. Shows the Browser, Terminal and Docker interceptors.

Get detailed status of a specific interceptor, including all active targets and their details.

Kill ALL active interceptors across all types. Emergency cleanup — stops all browser instances, kills spawned processes, cleans Docker.

Launch cloakbrowser (stealth Chromium) with proxy flags and SPKI certificate trust. Built-in source-level fingerprint patches + humanize mode. Driven via Playwright — locator-based tools replace CDP.

Navigate the browser target's page via Playwright and optionally wait for matching host traffic to be captured by the proxy.

Close a browser instance launched by interceptor_browser_launch.

Spawn a command with proxy env vars pre-configured (HTTP_PROXY, HTTPS_PROXY, SSL_CERT_FILE, NODE_EXTRA_CA_CERTS, CURL_CA_BUNDLE, and 15+ more). Traffic automatically routes through the MITM proxy.

Kill a spawned process by target ID. Also retrieves final stdout/stderr output.

Inject proxy env vars and CA certificate into a Docker container. Two modes: 'exec' (inject into running container) or 'restart' (stop + restart with proxy config).

Remove proxy configuration from a Docker container and clean up injected files.

Take an ARIA accessibility snapshot of the bound page (YAML-formatted role tree). Great for LLM-driven page understanding without parsing HTML.

Take a screenshot of the bound page. Saves to file_path if provided; otherwise reports byte count without embedding the image.

List console messages buffered since the browser was launched. Types: log, info, warning, error, debug, etc.

List cookies from the browser context with pagination and truncated value previews.

Get one cookie by cookie_id with full value (subject to a hard cap to keep output bounded).

List localStorage/sessionStorage keys for the current origin with pagination and truncated value previews.

Get one localStorage/sessionStorage value by item_id.

List request/response header fields from proxy-captured traffic since the browser was launched, with pagination and truncation.

Get one full header field value from proxy-captured traffic by field_id.

Execute a JS file in the page and return its result. Source is loaded from script_path (absolute path). The file body is wrapped in an arrow function receiving __args (so the file may return value; directly and access the optional args object). Runs in Playwright's isolated utility world (different window, same DOM). Reads are invisible to the page; mutations to shared prototypes/globals are observable by page scripts. For main-world patching use interceptor_browser_inject_init_script. Rate-limit before reCAPTCHA: each call emits CDP traffic that behavioural scorers count.

Inject a JS file as an init script (Playwright page.addInitScript). Runs before any page script on every subsequent navigation/frame. Runs in the isolated utility world — no DOM artifact; patches to shared prototypes/globals reach the page main world via utility-world sharing. Does NOT affect the currently loaded document — navigate again to apply.

Append a element to the current page (Playwright page.addScriptTag). WARNING: injects a real DOM node visible to MutationObserver, document.scripts, and CSP. Avoid for anti-bot stealth — prefer interceptor_browser_inject_init_script (no DOM node) when you need page-scope execution.

Start persistent on-disk capture for the current proxy run.

Stop persistent on-disk capture and finalize the active session.

Get current persistent capture runtime status.

List recorded sessions in storage.

Get manifest/details for a specific recorded session.

Import a HAR file from disk into a new persisted session for querying, findings, and replay.

Query indexed session exchanges by metadata (URL, hostname, method, status) with filters and pagination. Does NOT search body content — use proxy_search_session_bodies for that.

Search inside HTTP request/response bodies stored in a persistent session. Decompresses and searches actual body content — useful for finding specific text, prices, API responses, error messages, etc. in recorded traffic. Returns context snippets around each match (like grep -C).

Summarize TLS handshake/fingerprint availability (JA3/JA4/JA3S) for session exchanges.

Get one exchange from a recorded session by seq or exchange ID.

Replay selected requests from a recorded/imported session. Default mode is dry_run for safety.

Export a recorded session (or filtered subset) to HAR format.

Delete a recorded session from disk.

Rebuild session indexes from records after crash/corruption.

Move mouse to target coordinates via the backend Playwright page.

Click an element. Pass one of: selector (CSS/XPath), role + optional name, text, label, or raw x+y coords as fallback. Locator-based calls auto-wait for visible.

Type text into the focused element via page.keyboard.type.

Dispatch a wheel event. Raw page.mouse.wheel — single event, not multi-step.

Simulate idle behavior with mouse micro-jitter and occasional micro-scrolls. Keeps the page 'alive' to avoid idle detection by bot-detection scripts.