- Home
- Forward Proxy Software
- mitmproxy
mitmproxy
What it is
mitmproxy is a free proxy toolkit for interactively intercepting HTTP/1, HTTP/2, WebSocket, and SSL/TLS traffic. It can pause HTTP and HTTPS requests and responses so they can be changed in transit, save conversations for later analysis, and replay client requests or recorded server responses. The project offers three interfaces: mitmproxy, an interactive console; mitmweb, a browser-based GUI; and mitmdump, for non-interactive terminal output. Proxy modes include regular, local capture, WireGuard, reverse, transparent, TUN, upstream, SOCKS5, and DNS. Python addons can alter behavior in response to events and expose user-invoked commands. WireGuard mode can capture traffic from external devices or individual Android apps. Its certificate authority generates interception certificates as needed. Installation is documented for Windows, macOS, and Linux, with PyPI and official Docker images also available. The project says it does not phone home or check for updates. HTTP/3 client replay is currently broken, and dependencies in precompiled binaries and Docker images cannot be updated in place.
For and against
For
- Edits HTTP and HTTPS requests and responses.
- Saves conversations and replays traffic.
- Offers console, browser, and terminal interfaces.
- WireGuard can capture individual Android app traffic.
- Python addons can change proxy behavior.
Against
- HTTP/3 client replay is currently broken.
- Binary and Docker dependencies cannot be updated in place.
- Requires regular updates to precompiled dependencies.
The verdict
mitmproxy combines traffic editing, recording, replay, and several proxy modes in a free toolkit. Note its stated HTTP/3 replay issue and the need to update precompiled binaries and Docker images regularly.
Who it suits
mitmproxy suits people who need to inspect, change, record, or replay proxy traffic, including traffic from Android apps. Its console, browser GUI, terminal output, and Python addons offer different ways to work with proxy sessions.
Plans and prices
Free
Open-source software · no paid tier stated
Read 15 Oct 2026 · mitmproxy.org
mitmproxy
Free and open source interactive HTTPS proxy
Read 30 Sep 2026 · mitmproxy.org
On the record
- Addon options
- Third-party addons can define typed options that work through the shared configuration file and interactive editors.docs.mitmproxy.org · read 15 Oct 2026
- Authentication replay limit
- Sticky authentication supports HTTP Basic replay, while HTTP Digest replay is not supported.docs.mitmproxy.org · read 15 Oct 2026
- Binary maintenance risk
- Bundled binary dependencies are frozen per release and are not updated in place, so users are told to update regularly.docs.mitmproxy.org · read 15 Oct 2026
- Binary security limit
- Dependencies in precompiled binaries and Docker images are frozen at release and cannot be updated in place; the documentation recommends updating regularly.docs.mitmproxy.org · read 30 Sep 2026
- Certificate handling
- Mitmproxy includes a certificate authority implementation that generates interception certificates on the fly.docs.mitmproxy.org · read 30 Sep 2026
- Company founders
- The project identifies Aldo Cortesi as founder and lists Maximilian Hils and Thomas Kriechbaumer among core developers.mitmproxy.org · read 15 Oct 2026
- Customization
- Python addons can respond to events to change proxy behavior, and can expose commands for users to invoke.docs.mitmproxy.org · read 30 Sep 2026
- Documentation
- The documentation includes tutorials, concepts, installation guidance, feature references, options and addon examples.docs.mitmproxy.org · read 15 Oct 2026
- Ecosystem
- The official site highlights community addons, mitmproxy2swagger for OpenAPI conversion and kubetap for Kubernetes service proxying.mitmproxy.org · read 15 Oct 2026
- Independent review availability
- A 2026 HTTP debugging comparison reports no comparable mainstream product-review sample for mitmproxy and therefore adds no review-based satisfaction claim.proxidize-new-landingpage-production.up.railway.app · read 15 Oct 2026
- Independent review score
- Legit.Show reports a public-surface production-readiness score of 68 out of 100 measured on 2026-10-08.legit.show · read 15 Oct 2026
- Installation
- Official installation paths cover macOS Homebrew, Linux binaries, Windows installers, PyPI, WSL and Docker images.docs.mitmproxy.org · read 15 Oct 2026
- Interfaces
- The project provides a terminal interface called mitmproxy, a headless command-line tool called mitmdump and a browser interface called mitmweb.mitmproxy.org · read 15 Oct 2026
- Licence
- The repository code is released under the permissive MIT licence.github.com · read 15 Oct 2026
- Limit: certificate pinning
- Independent reviews report that applications using certificate pinning reject the proxy certificate and require separate bypass work such as instrumentation or repackaging.hysenlabs.com · read 15 Oct 2026
- Limit: large bodies
- Official documentation warns that enabling streaming removes body visibility and prevents body modifications.docs.mitmproxy.org · read 15 Oct 2026
- Limit: mobile trust changes
- An independent review notes that modern Android and iOS apps may ignore user-installed CAs, requiring debugging changes, instrumentation or rooted/jailbroken devices.appsecsanta.com · read 15 Oct 2026
- Limit: setup learning curve
- An independent review says the README omits invocation and certificate setup examples, leaving newcomers to consult the deeper documentation.hysenlabs.com · read 15 Oct 2026
