Skip to content
HTTPGlass Docs

What is HTTPGlass

HTTPGlass is an HTTP and HTTPS debugging proxy made by Nutiverse for Mac, iPhone, iPad and Android. It captures requests and responses locally, decrypts HTTPS when the client trusts its root certificate, and provides tools to inspect, filter, repeat and modify API traffic.

Choose your platform

Section titled “Choose your platform”
Platform Requirements How capture runs Get started
Mac macOS 14 or later, Intel or Apple silicon A local HTTP proxy and system proxy settings Mac setup
iPhone and iPad iOS or iPadOS 18 or later, physical device A local VPN tunnel on the device iOS setup
Android Android 10 or later Android’s local VPN service, without root Android setup

Mobile capture does not require a paired computer or a remote VPN server. HTTPS inspection is limited by certificate trust and pinning. On Android, most third-party apps do not trust user-installed certificates; see Android certificate trust. Mac, iOS and Android Pro subscriptions are separate purchases; see pricing.

How capture works on Mac

Section titled “How capture works on Mac”
  • A local proxy. HTTPGlass runs a proxy inside the app, listening only on 127.0.0.1 (port 9191 unless that port is taken).
  • Your Mac’s proxy settings. While you capture, HTTPGlass points the HTTP and HTTPS proxy of each network service at that port, and puts the previous settings back when you stop or quit. See How capture works.
  • A root certificate made on your Mac. HTTPGlass generates its own root certificate the first time it needs one and, once you’ve trusted it, signs a certificate for each site it reads. The private key never leaves your Mac. See Root certificate.
  • The app behind each request. HTTPGlass works out which process opened each connection and rolls helper processes up to their app, so a request from Chrome’s network helper shows as Chrome and a request from curl shows as curl.

Nothing is sent to a separate machine. Captured traffic, the certificate’s private key, and your rules stay in ~/Library/Application Support/HTTPGlass.

App-first

Section titled “App-first”

Most proxies ask you to decide which hosts to decrypt. HTTPGlass starts from the question you arrived with: which app are you debugging? Pick it, and HTTPGlass decrypts everything that app sends, on every host, and shows only its traffic. See Pick the app you’re debugging.

What you can do with it

Section titled “What you can do with it”
  • Watch every request and response as it happens, by app, by domain, or all together
  • Read JSON, XML, HTML, form, cookie, image, and binary bodies with a viewer that fits each
  • Search across URLs, headers, and bodies
  • Copy a request as cURL, repeat it, or generate Swift, Python, JavaScript, or Kotlin from it
  • Export selected requests as a HAR file
  • Pause a request or response on a breakpoint and edit it before it continues
  • Block or allow matching hosts or paths, or force them uncached (No-Cache is Pro)
  • Serve a canned response instead of hitting the real backend (Pro)
  • Send matching requests to a staging server or a different path (Pro)
  • Rewrite headers, bodies, status codes, and query parameters automatically (Pro)
  • Run your own JavaScript against requests and responses (Pro)
  • Throttle connections to 3G, GPRS, or custom bandwidth and latency (Pro)

Next

Section titled “Next”