HTTP & HTTPS debugging guides

Inspect HTTP and HTTPS traffic on Mac

Install HTTPGlass on macOS 14 or later, trust its locally generated root certificate, start capture and choose the app you want to debug. The app restores your previous proxy settings when capture stops.

• Install and capture your first request →
• Choose the app to decrypt →
• Configure curl, Node.js and other clients →

Capture iPhone and iPad HTTPS traffic without a Mac

Use HTTPGlass directly on a physical iPhone or iPad running iOS or iPadOS 18 or later. Approve the local VPN profile, install the root certificate and enable full trust before capturing HTTPS. No desktop proxy or cable is required.

• Install on iPhone and iPad →
• Install and trust the iOS certificate →
• Read your first iPhone capture →

Debug Android HTTP traffic without root

HTTPGlass uses Android’s local VPN service on Android 10 or later. HTTPS decryption only works for clients that trust the installed root certificate. For your own app, use a debug-only network security configuration; most third-party release apps do not opt in.

• Install on Android →
• Set up the Android certificate →
• Fix certificate trust in your own debug build →

Test API errors, mock responses and slow networks

Capture the request you need to test, then choose the smallest tool for the job. A breakpoint lets you edit one request in flight. Map Local returns a saved response, Rewrite changes matching traffic, and Network Condition simulates slower connections. Check the Free and Pro limits before choosing a workflow.

• Pause and edit with breakpoints →
• Mock an API response with Map Local →
• Rewrite headers and response bodies →
• Simulate latency and bandwidth limits →

HTTPS capture is not a certificate-pinning bypass

A trusted root certificate is necessary for HTTPS inspection, but it does not make every connection readable. Apps can pin certificates, use their own trust store or ignore the system proxy. Non-HTTP protocols are outside an HTTP proxy’s scope.

Start with what HTTPGlass cannot see. If capture previously worked, check the Mac trust checklist, iOS certificate checklist or Android app trust guide.

Choose the right plan and learn how capture works

See Free and Pro pricing for platform-specific purchases. For the engineering behind local mobile capture, read how an on-device HTTPS debugger works. For help with a specific capture, contact HTTPGlass support.