Features
What HTTPGlass does
The pages below describe the Mac app. Inspectors, rules, breakpoints, Map Local, Map Remote, Rewrite, scripting and throttling work the same way in the iPhone and iPad app. Picking an app to debug is Mac-only, and App Lock is iPhone and iPad-only.
Capture HTTPS
HTTPGlass runs a local proxy on your Mac and decrypts HTTPS, so you see the real requests and responses instead of a list of host names.
Per-app capture
Every request is labelled with the app that made it. Pick the app you're debugging and HTTPGlass decrypts everything it sends and shows only that.
Filters & search
Narrow a busy traffic table by status, method, or content type, or search URLs, headers, and bodies directly.
Body viewers
Request and response side by side, with a JSON tree, indented XML and HTML, form fields as a table, image previews, and hex.
cURL & code gen
Copy any captured request as cURL, turn it into Swift, Python, JavaScript, or Kotlin, or send it again from the table.
GraphQL
GraphQL operations are recognised by shape, with the operation name, query, variables, and errors broken out.
WebSocket
Every frame, sent and received, with JSON pretty-printing and a graphql-ws decoder for realtime subscriptions.
Sessions & HAR
Every capture run is kept as a session you can rename, export as HAR, or delete. Export any selection of rows as HAR too.
Rules
Pattern-match a host, a folder, or a single request to block it, limit capture to it, or force fresh responses.
Breakpoints
Pause a request before it reaches the server, or a response before it reaches the app, edit it, then resume or drop it.
Map Local
Answer a matching request with a response you define, without contacting the real server.
Map Remote
Send matching requests to a different server or path. Point a production build at staging without rebuilding it.
Rewrite
Change headers, body, status code, query parameters, or URL on matching traffic. Set it once and it applies to every match.
Scripting
Run your own JavaScript against matching requests and responses, with onRequest and onResponse hooks shaped like Proxyman's.
Throttling
Slow connections down on purpose, with presets from GPRS to 5G, custom bandwidth and latency, for every host or only some.
App Lock
Keep captured traffic behind Face ID, Touch ID, or your passcode — the same gate a banking app uses.