{"id":"b106b61f-d57c-4006-ac3a-17699a15edce","slug":"httptrafficmonitr","kind":"mcp","name":"httptrafficmonitr","summary":"Windows desktop HTTP/HTTPS traffic monitor (MITM proxy, WPF) with an MCP server so AI assistants can inspect, filter, replay, and mock traffic","owner":"Makhsum","repoUrl":"https://github.com/Makhsum/httptrafficmonitr","license":"MIT","licenseTier":"permissive","trust":"community","stars":21,"match":null,"fewStars":false,"format":"mcp","createdAt":null,"addedAt":"2026-10-14T05:18:22.437Z","logoUrl":"https://avatars.githubusercontent.com/u/102013000?u=07f78b3fe7b63dbf84a80ba5659242aacf37d8b2&v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["cloud-infra","memory-knowledge"],"tags":["ai","ai-agents","api","api-reverse-engineering","csharp","devtools","http-proxy","network-monitoring"],"runtime":"binary","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-14T06:51:09.073Z","sample":false,"url":"https://conduits.dev/tools/httptrafficmonitr","language":"C#","transports":["stdio"],"install":{},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# HTTP Traffic Monitor\n\n**A free, open-source HTTP/HTTPS debugging proxy for Windows with a built-in MCP server — so Claude and other AI assistants can inspect, filter, replay and mock the traffic you capture.**\n\nFor developers and testers on Windows who need to see what an app, a service or a browser really sends and receives: a Fiddler/Charles-style traffic inspector, MIT-licensed, that your AI assistant can drive too.\n\n[**⬇ Download for Windows**](https://github.com/Makhsum/httptrafficmonitr/releases/latest) · [**▶ Watch the demo**](#see-it-in-action) · [How it compares](#how-it-compares) · [MCP setup](#configuring-the-mcp-server)\n\n**Why pick it**\n- **AI-ready out of the box** — 42 MCP tools let an assistant start a capture, find the failing requests, replay them and set up mocks; no paid tier.\n- **Every app on the machine, not one browser tab** — it captures system-wide as the Windows proxy and shows which process sent each request.\n- **Free and open source** — MIT license, Fluent UI with light and dark themes.\n\n**From download to the first captured request**\n1. Download the app zip from [Releases](https://github.com/Makhsum/httptrafficmonitr/releases/latest) and unzip it (or [build from source](#build--run)).\n2. Run `HttpTrafficMonitor.exe`, accept the administrator prompt and read the security notice.\n3. Click **Start** — the app installs its local root CA (confirm if Windows asks) and becomes the system proxy.\n4. Open any website or call an API: the requests appear in the grid. Click one to see its headers, body, timing and certificate.\n\n## See it in action\n\n![Live HTTPS capture: start capturing, requests arrive, one request is inspected](docs/demo/live-capture.gif)\n\n## How it compares\n\n| | HTTP Traffic Monitor | Fiddler Everywhere | Charles | mitmproxy | Browser DevTools |\n|---|---|---|---|---|---|\n| Price | Free, open source (MIT) | Paid subscription | Paid license | Free, open source | Free, part of the browser |\n| Platforms | Windows 10/11 | Windows, macOS, Linux | Windows, macOS, Linux | Windows, macOS, Linux | Wherever the browser runs |\n| Captures traffic of other apps, not just the browser | Yes, system-wide, with the process name | Yes | Yes | Yes | No — only the page it is attached to |\n| Interface | Desktop app | Desktop app | Desktop app | Terminal and web UI | Panel in the browser |\n| MCP server for AI assistants | Built in, free | Built in, Pro tier and up | Not built in | Not built in | Not built in |\n\nChoose this tool when you are on Windows and want a free graphical inspector that an AI assistant can work with. If you need macOS or Linux, or to script the proxy itself, mitmproxy, Charles or Fiddler Everywhere fit better. *(Details of the other tools as of October 2026 — corrections welcome.)*\n\n## Download\n\nGet the latest build from [**Releases**](https://github.com/Makhsum/httptrafficmonitr/releases/latest) — Windows 10/11 x64, nothing else to install (the .NET runtime is included):\n\n- `HttpTrafficMonitor-<version>-win-x64.zip` — the desktop app. Unzip it and run `HttpTrafficMonitor\\HttpTrafficMonitor.exe` (it asks for administrator rights).\n- `HttpTrafficMonitor.McpServer-<version>-win-x64.zip` — the MCP server as a single `HttpTrafficMonitor.McpServer.exe`; see [Configuring the MCP server](#configuring-the-mcp-server).\n\nThe builds are not code-signed, so Windows SmartScreen may warn on first start: choose **More info**, then **Run anyway**.\n\n## What it does\n\n`HttpTrafficMonitor` sits between your machine and the internet as a local proxy (via [Titanium.Web.Proxy](https://github.com/justcoding121/Titanium-Web-Proxy)), decrypts HTTPS on the fly with a locally-generated root CA, and shows every request/response as it happens — searchable, filterable, and exportable.\n\n![Live capture with charts](docs/screenshots/02-live-capture.png)\n\n*The screenshots show demo traffic only: `curl` calls to public sample APIs (JSONPlaceholder, httpbin, example.com, GitHub). The 404 and 500 responses among them are requested on purpose, to show how failed requests stand out.*\n\n## Features\n\n### Capture & inspect\n- Start/Stop system-wide HTTP/HTTPS capture with one click (installs a root CA for TLS interception, restored automatically on Stop)\n- Live request grid: method, URL, status, size, duration, colored badges, and a red highlight for slow requests\n- Quick search plus dedicated Process / Domain / Method / Status filters\n- Per-request detail tabs: **Request**, **Response**, **Timing** (DNS lookup, TCP connect, TLS handshake, time to first byte and download, measured for each request), **Certificate** (chain, issuer, validity, thumbprint), **Decoded** (gzip/brotli/base64 aware), and **Exclusions**\n\n![Filtered request with Request tab](docs/screenshots/03-request-detail.png)\n![Timing breakdown](docs/screenshots/04-timing-tab.png)\n![Response tab with pretty-printed JSON](docs/screenshots/06-response-tab.png)\n\n### Filtering\nBuild multi-condition filters (field / operator / value, AND-ed or OR-ed) and save them as named presets for reuse.\n\n![Advanced Filter dialog](docs/screenshots/09-advanced-filter.png)\n\n### Replay & compose\nEdit and resend any captured request, or compose a brand-new one from scratch, with side-by-side original vs. new response.\n\n![Replay / Compose window](docs/screenshots/10-replay-compose.png)\n\n### Compare\nPick two requests and get a line-by-line diff (via [DiffPlex](https://github.com/mmanela/diffplex)) across headers and bodies.\n\n### Alerts\nRule-based alerting on status codes, response time thresholds, or custom patterns, with a live event feed. Below, the built-in **Server Errors (5xx)** rule has caught the demo request to `httpbin.org/status/500`.\n\n![Alerts tab with the 5xx rule firing on a demo request](docs/screenshots/07-alerts-tab.png)\n\n### Auto-Responder (mocking)\nIntercept matching requests (by URL/regex + method) and return a canned status code, headers, and body — or serve a file — with an optional artificial delay. Great for mocking flaky or unavailable backends during development.\n\n![Auto-Responder tab with a mock rule for a sample API](docs/screenshots/08-autoresponder-tab.png)\n\n### Graphs\nLive requests-per-second and bandwidth charts, plus top-domains and top-processes breakdowns (via [LiveCharts2](https://livecharts.dev/)).\n\n### Sessions & export\nSave/load full capture sessions, bookmark interesting requests, and export selections as **CSV**, **HAR**, **JSON**, **cURL**, or **Postman collection**.\n\n### Light & dark themes\nFull Fluent Design theming via [WPF-UI](https://github.com/lepoco/wpfui).\n\n![Light theme](docs/screenshots/11-light-theme.png)\n\n## MCP Server\n\n`HttpTrafficMonitor.McpServer` exposes the running app to AI assistants over the [Model Context Protocol](https://modelcontextprotocol.io) (stdio transport). The main app hosts a small local REST API (`http://localhost:18081/api/...`) via `IpcApiService`; the MCP server is a thin process that talks to that API and surfaces it as MCP tools — so an assistant can start/stop capture, inspect and filter requests, manage alerts and auto-responder rules, replay/compose requests, and export data, all without touching the UI.\n\nHere an assistant answers a question about the captured traffic through the MCP server (the tool replies are from a real session, shortened to the lines that matter):\n\n![An AI assistant using the MCP server to find the failed requests in a capture](docs/demo/mcp-assistant.gif)\n\nTool groups (see `HttpTrafficMonitor.McpServer/Tools/`):\n\n| File | Covers |\n|---|---|\n| `ProxyTools` | Start/stop capture, proxy status, pause/resume |\n| `TrafficTools` | List/get requests, domains, traffic stats |\n| `FilterTools` | Filter requests, save/load/delete filter presets |\n| `AlertTools` | Manage alert rules, read alert events, toggle sound |\n| `AutoResponderTools` | Manage mock/auto-responder rules and status |\n| `ReplayTools` | Replay a captured request |\n| `SessionTools` | Save/load capture sessions |\n| `ExportTools` | Export as CSV / HAR / JSON / cURL / Postman |\n| `BookmarkTools` | Toggle/list bookmarks |\n| `ContentTools` | Encode/decode request or response bodies |\n| `StatsTools` | Traffic statistics, TLS info |\n\nAdd it to an MCP-capable client (e.g. Claude Code / Claude Desktop) pointing at the built `HttpTrafficMonitor.McpServer.exe`; the main `HttpTrafficMonitor.exe` must already be running and capturing for most tools to return data.\n\nBy default an assistant can only read: `replay_request` sends GET only, and the tools that change something are not offered: `clear_requests`, `start_proxy`, `stop_proxy`, `pause_capture`, `resume_capture`, `load_session`, `manage_exclusions` (`get_exclusions` reads the exclusions), `add_alert_rule`, `delete_alert_rule` and the tools that change the Auto-Responder; `save_session` only writes a new file and refuses a path that already exists. Turn on the toolbar switch **Agent may make changes** in the app to allow them; no MCP tool can turn it on. The same actions in the app window work either way.\n\nTo keep replay to known hosts, list them in the toolbar box **Agent replay hosts** (comma-separated, `*.example.com` for subdomains); `replay_request` then refuses any other host. Left empty, replay may reach any host. No MCP tool can change the list.\n\n### Configuring the MCP server\n\n**From a release download** — unzip `HttpTrafficMonitor.McpServer-<version>-win-x64.zip` anywhere (e.g. `C:\\Tools`) and point your client at the exe; no build and no .NET install needed:\n\n```\nclaude mcp add httptrafficmonitor -- \"C:\\Tools\\HttpTrafficMonitor.McpServer\\HttpTrafficMonitor.McpServer.exe\"\n```\n\nFor Claude Desktop, add this to `%APPDATA%\\Claude\\claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"httptrafficmonitor\": {\n      \"command\": \"C:\\\\Tools\\\\HttpTrafficMonitor.McpServer\\\\HttpTrafficMonitor.McpServer.exe\",\n      \"args\": []\n    }\n  }\n}\n```\n\n**From source** — build it first:\n\n```\ndotnet build HttpTrafficMonitor.McpServer/HttpTrafficMonitor.McpServer.csproj -c Debug\n```\n\nThis produces `HttpTrafficMonitor.McpServer/bin/Debug/net8.0/HttpTrafficMonitor.McpServer.exe`. Adjust paths below if you build in `Release` or from a different clone location.\n\n**Claude Code** — the repo ships a project-scoped `.mcp.json` in its root that starts the server with `dotnet run --project HttpTrafficMonitor.McpServer`, so opening the clone in Claude Code is enough (approve the `httptrafficmonitor` server when prompted) — no absolute paths to adjust. To register a built exe instead, use the CLI:\n\n```\nclaude mcp add httptrafficmonitor -- \"C:\\Projects\\httptrafficmonitr\\HttpTrafficMonitor.McpServer\\bin\\Debug\\net8.0\\HttpTrafficMonitor.McpServer.exe\"\n```\n\nwhich writes (or edit `.mcp.json` directly):\n\n```json\n{\n  \"mcpServers\": {\n    \"httptrafficmonitor\": {\n      \"command\": \"C:\\\\Projects\\\\httptrafficmonitr\\\\HttpTrafficMonitor.McpServer\\\\bin\\\\Debug\\\\net8.0\\\\HttpTrafficMonitor.McpServer.exe\",\n      \"args\": []\n    }\n  }\n}\n```\n\n**Claude Desktop** — add the same block to `claude_desktop_config.json` (`%APPDATA%\\Claude\\claude_desktop_config.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"httptrafficmonitor\": {\n      \"command\": \"C:\\\\Projects\\\\httptrafficmonitr\\\\HttpTrafficMonitor.McpServer\\\\bin\\\\Debug\\\\net8.0\\\\HttpTrafficMonitor.McpServer.exe\",\n      \"args\": []\n    }\n  }\n}\n```\n\n**Running via `dotnet` instead of the exe** (e.g. cross-platform host, or you'd rather not hardcode a self-contained exe path) — point `command` at `dotnet` and pass the DLL as the first arg:\n\n```json\n{\n  \"mcpServers\": {\n    \"httptrafficmonitor\": {\n      \"command\": \"dotnet\",\n      \"args\": [\n        \"C:\\\\Projects\\\\httptrafficmonitr\\\\HttpTrafficMonitor.McpServer\\\\bin\\\\Debug\\\\net8.0\\\\HttpTrafficMonitor.McpServer.dll\"\n      ]\n    }\n  }\n}\n```\n\nOptional environment variable (only needed if the main app's IPC API isn't on its default port):\n\n```json\n{\n  \"mcpServers\": {\n    \"httptrafficmonitor\": {\n      \"command\": \"C:\\\\Projects\\\\httptrafficmonitr\\\\HttpTrafficMonitor.McpServer\\\\bin\\\\Debug\\\\net8.0\\\\HttpTrafficMonitor.McpServer.exe\",\n      \"args\": [],\n      \"env\": {\n        \"HTM_API_URL\": \"http://localhost:18081\"\n      }\n    }\n  }\n}\n```\n\nAfter editing the config, restart Claude Code / Claude Desktop, launch `HttpTrafficMonitor.exe` (as Administrator) and click **Start**, then the `httptrafficmonitor` tools become available to the assistant.\n\n## Requirements\n\n- Windows 10/11\n- [.NET 8 SDK](https://dotnet.microsoft.com/download) (`net8.0-windows`, WPF) — only to build from source; the [release downloads](#download) bring their own runtime\n- **Administrator privileges** — the app requests elevation via its manifest (`app.manifest`, `requireAdministrator`), needed to register itself as the system proxy and install the local root CA\n\n> ⚠️ HTTPS interception installs a root CA into your system trust store and lets the app read HTTPS traffic in plaintext. Use it only for development/debugging on machines you control — the app shows a warning dialog on first launch and restores your original proxy settings when you stop monitoring or close it.\n\n## Build & run\n\n```\ndotnet build HttpTrafficMonitor.csproj -c Debug\n```\n\nRun `bin/Debug/net8.0-windows/HttpTrafficMonitor.exe` (elevation prompt expected), or open `HttpTrafficMonitor.sln` in Visual Studio and hit F5.\n\nTo build the MCP server:\n\n```\ndotnet build HttpTrafficMonitor.McpServer/HttpTrafficMonitor.McpServer.csproj\n```\n\n## Tech stack\n\n- WPF on .NET 8, [WPF-UI](https://github.com/lepoco/wpfui) for Fluent Design\n- [Titanium.Web.Proxy](https://github.com/justcoding121/Titanium-Web-Proxy) for MITM proxying\n- [LiveChartsCore (SkiaSharp)](https://livecharts.dev/) for charts\n- [DiffPlex](https://github.com/mmanela/diffplex) for the Compare view\n- `ModelContextProtocol` .NET SDK for the MCP server\n\n## Project structure\n\n```\nModels/          Request/session/alert/auto-responder/TLS data models\nServices/        Proxy, alerts, export, replay, session, content decoding, IPC API, theming\nViewModels/      MVVM view models per view/panel\nViews/           MainWindow + dialogs (Advanced Filter, Replay/Compose, Comparison)\nHttpTrafficMonitor.McpServer/   Standalone MCP server (stdio) bridging to the running app's IPC API\n```\n\n## UI automation\n\nInteractive controls across the main window and dialogs carry `AutomationProperties.AutomationId` (e.g. `Toolbar.StartButton`, `FilterBar.SearchTextBox`, `MainWindow.RequestsGrid`, `AdvancedFilter.ApplyFilterButton`, `AutoResponder.AddRuleButton`) so the app can be driven and tested via UI Automation / test tooling without relying on fragile name- or coordinate-based lookups.\n\n## Contributing\n\nBug reports, feature ideas and pull requests are welcome. [Open an issue](https://github.com/Makhsum/httptrafficmonitr/issues/new/choose) with the bug-report or feature-request form, and read [CONTRIBUTING.md](CONTRIBUTING.md) for how to build and run the app and the MCP server from a fresh clone. Please report security problems privately as described in [SECURITY.md](SECURITY.md), and follow the [Code of Conduct](CODE_OF_CONDUCT.md). Changes are listed in [CHANGELOG.md](CHANGELOG.md).\n"}