Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"mitmproxy-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# mitmproxy MCP Server A Model Context Protocol (MCP) server that transforms mitmproxy into a powerful toolset for AI agents. This allows LLMs (like Claude, GPT-4, or local models) to inspect, modify, and replay HTTP/HTTPS traffic in real-time. ## New in this build (the fun stuff) This project has grown beyond simple capture + replay. You can now: * **Search traffic quickly** with filters by domain/method/body text. * **Extract data from responses** using JSONPath or CSS selectors. * **Use session variables** to grab tokens from one response and reuse them in later replays. * **Run lightweight fuzzing** against query params or JSON body fields for quick DAST checks. * **Reconstruct API patterns** and export an OpenAPI-style spec from captured traffic. * **Detect auth patterns** (Bearer/JWT/API key/session cookie/CSRF/OAuth hints). * **Generate starter scraper code** from real captured flows. ## Why use this? Standard "web search" or "fetch" tools are stateless and easily detected. mitmproxy-mcp provides: * **Deep Debugging**: The agent can inspect full request/response cycles (headers, payloads, cookies) to identify why a frontend is failing or why an API is returning a `4xx/500` error. * **API Reverse Engineering**: Let the LLM observe undocumented internal APIs, map out JSON schemas, and generate client libraries or documentation automatically. * **Automated Security Testing**: Perform DAST (Dynamic Application Security Testing) by allowing the agent to inject payloads into specific parameters and analyze the response. * **Live Interception**: Modify traffic on the fly: inject headers, mock responses for testing, or block tracking pixels to reduce noise. * **Stealth Replay**: Uses `curl-cffi` to mimic Chrome/Safari TLS fingerprints, bypassing basic anti-bot measures that standard Python libraries trigger. ## Key Features - **Lifecycle Control**: Start and stop the mitmproxy instance directly from the LLM. - **Deep Inspection**: Capture full request/respons…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.