Skip to main content
Glama

proxy_mobile_setup

Set up mobile capture by launching explicit and transparent proxy listeners, injecting the CA on Android, and generating an iptables script to route AP traffic.

Instructions

One-command mobile capture: start explicit + transparent listeners, optionally inject the CA on an Android device, and emit a sudo-runnable script that wires iptables/sysctl/nmcli on the AP iface. Designed to pair with the proxy-ap-card firmware (ESP32-S3 rogue AP over USB-NCM).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
ap_ifaceNoAP/USB interface name. Auto-detected via cdc_ncm driver if omitted.
ap_subnetNoSubnet the AP serves to clients (default: 192.168.4.0/24, matches proxy-ap-card firmware).192.168.4.0/24
ap_addressNoLaptop-side address on the AP iface (default: 192.168.99.2/24, matches proxy-ap-card firmware).192.168.99.2/24
block_quicNoDrop UDP/443 on the AP iface so apps fall back to TCP/TLS (capturable). Default: true.
inject_certNoInject the CA into the Android device's system store. Ignored if android_serial is omitted.
egress_ifaceNoHost's internet-facing iface. Auto-detected from /proc/net/route if omitted.
explicit_portNoPort for the explicit HTTP proxy (default: 8080).
android_serialNoADB serial of an Android device to inject the CA on. If omitted, no cert injection is attempted.
transparent_portNoPort for the transparent HTTPS listener (default: 8443).
upstream_proxy_urlNoOptional upstream proxy URL (socks5://user:pass@host:port or http://...). Sets the global upstream for BOTH listeners. If it has a username but no password, the password is filled in from PROXY_MCP_UPSTREAM_PASSWORD, but only when PROXY_MCP_UPSTREAM_HOST is also set and matches this URL's hostname. The response reports password_source: env | url | none.
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden for side-effect disclosure. It does disclose that the tool starts listeners, may inject a CA on an Android device, and emits a script that modifies iptables/sysctl/nmcli. However, it leaves ambiguity about whether the script is executed or merely emitted, and does not mention host sudo requirements or potential persistence of network changes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler, front-loading the core value proposition. The first sentence is dense but organized as a clear enumerated list of actions, and the second sentence adds crucial hardware context that justifies the tool's purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a complex 10-parameter orchestration tool with no output schema and no annotations, yet the description remains high-level. It does not explain what the tool returns, whether the sudo script is executed or merely output for the user, or how it relates to proxy_mobile_teardown for cleanup. An agent invoking this tool would be uncertain about the result and subsequent steps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds workflow-level context that loosely maps to parameters (explicit/transparent listeners, AP iface, CA injection), but it does not add syntax, defaults, or behaviors beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action ('start explicit + transparent listeners'), an optional CA injection, and a script emission that wires iptables/sysctl/nmcli. This clearly distinguishes the tool from siblings like proxy_start_transparent (transparent-only) and proxy_mobile_teardown (teardown), even without naming them explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies the intended use case: one-command mobile capture paired with the proxy-ap-card firmware. However, it does not explicitly state when not to use this tool or name alternatives, such as proxy_start_transparent for transparent-proxy-only needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/yfe404/proxy-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server