# mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Repository: https://github.com/mitmproxy/mitmproxy
Canonical: https://ross.abutalabs.com/products/mitmproxy
Homepage: https://mitmproxy.org
Language: Python
License: MIT
License Family: permissive
Topics: python, security, man-in-the-middle, tls, ssl, http, http2, websocket, proxy, debugging, mitmproxy
Last push: 2026-08-25T23:39:26+00:00

## Health v2 (maintenance only)
Score: 89/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 71, longevity 100
- inputs: {"age_days": 6042, "days_push": 8, "days_rel": 113, "gap_med": 33.5, "n_releases_24m": 15}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 44820, forks 4696 (observed 2026-08-28T04:12:09.495197+00:00)

## What it is
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitmproxy), a web UI (mitmweb), and a command-line dumper (mitmdump). It supports on-the-fly traffic inspection and modification, replay, transparent/reverse/local capture modes, and scripting via a Python addon API.

## Use cases
- intercept and inspect https traffic from any app or device
- debug http requests and responses like chrome devtools for native apps
- modify web traffic on the fly with python scripts
- replay recorded http conversations for testing
- man-in-the-middle proxy for penetration testing
- capture local application traffic without proxy settings
- convert captured traffic to openapi specs

## When to choose
- you need to inspect, modify, or replay TLS-protected HTTP/WebSocket traffic
- you want scriptable traffic manipulation via a Python API
- you need cross-platform interception including transparent, reverse, and local capture modes
- you want a free open-source alternative to Charles Proxy or Fiddler

## When to avoid
- you only need simple non-TLS packet capture (tcpdump or Wireshark may suffice)
- you need a pure load-testing tool rather than interactive interception
- you require interception of non-HTTP protocols without TLS or custom binary protocols out of the box

## Facets
- artifact type: application
- maturity: stable
- function: proxy, security, http-client, developer-tools, penetration-testing, websocket, cli, gui
- domain: security, developer-tools, networking, penetration-testing, web-development, privacy
- platform: windows, python, cli, cross-platform
- tags: mitm, traffic-interception, http-debugging, tls-interception, traffic-replay, http3, python-addons, linux, macos, docker

## Member repositories
- mitmproxy/mitmproxy (main) score 89

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:12:09.495197+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T16:21:57.445993+00:00, confidence not recorded.
  - readme: https://github.com/mitmproxy/mitmproxy (fetched 2026-08-28T04:12:09.495197+00:00, sha e657903d488d)
  - homepage: https://mitmproxy.org (fetched 2026-08-29T07:45:26.016166+00:00, sha f7760dbaea62)
  - site_page: https://docs.mitmproxy.org/stable (fetched 2026-08-29T07:45:26.025388+00:00, sha 3ceb518f529b)
  - registry_pypi: https://pypi.org/pypi/mitmproxy/json (fetched 2026-08-29T07:45:26.030695+00:00, sha 211cfb151615)
  - site_page: https://www.mitmproxy.org/downloads (fetched 2026-08-29T07:45:26.027441+00:00, sha 4f0278fb849f)
  - site_page: https://www.mitmproxy.org/tags/releases (fetched 2026-08-29T07:45:26.029035+00:00, sha c1ad7816a714)
- Data as of 2026-08-30T08:39:29.467469+00:00.