No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by snapspecter · MCP Server · ★ 105
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is mitmproxy-mcp safe to install? View the security audit →
mitmproxy MCP Server A Model Context Protocol (MCP) server that transforms mitmproxy into a powerful toolset for AI agents. This allows LLMs (like Claude, GPT-4, or local models) to inspect, modify, and replay HTTP/HTTPS traffic in real-time. New in this build (the fun stuff) This project has grown beyond simple capture + replay. You can now: Search traffic quickly with filters by domain/method/body text. Extract data from responses using JSONPath or CSS selectors. Use session variables to grab tokens from one response and reuse them in later replays. Run lightweight fuzzing against query params or JSON body fields for quick DAST checks. Reconstruct API patterns and export an OpenAPI-style spec from captured traffic. Detect auth patterns (Bearer/JWT/API key/session cookie/CSRF/OAuth hints). Generate starter scraper code from real captured flows. Why use this? Standard "web search" or "fetch" tools are stateless and easily detected. mitmproxy-mcp provides: Deep Debugging: The agent can inspect full request/response cycles (headers, payloads, cookies) to identify why a frontend is failing or why an API is returning a error.
| Stars | 105 |
| Forks | 20 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 72.6277011628717/100 |
| Open Issues | 3 |
| Last Updated | 2026-06-05 |
| Created | 2026-02-14 |
| Platforms | claude-code, cli, mcp, python |
| Est. Tokens | ~19k |
These tools work well together with mitmproxy-mcp for enhanced workflows:
Looking for a mitmproxy-mcp alternative? If you're comparing mitmproxy-mcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
iOS development ClaudeCode plugin for mindful token and context usage. Contains modular MCPs that group variou
Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.
Automatic context preservation for Claude Code. Never lose work to compaction again. 7 hooks, 187 semantic pat
An MCP extension for Ghidra
Vibe Check is a tool that provides mentor-like feedback to AI Agents, preventing tunnel-vision, over-engineeri
Browser Operator - The AI browser with built in Multi-Agent platform! Open source alternative to ChatGPT Atlas
Explore other popular mcp server tools:
mitmproxy-mcp is MCP Server that wraps mitmproxy and exposes it as a tool to any MCP client, allows your AI agents to inspect traffic, filter traffic, intercept & modify traffic, request reply, set global headers, and. It is categorized as a MCP Server with 105 GitHub stars.
mitmproxy-mcp is primarily written in Python. It covers topics such as agentic-workflow, antigravity, api-reverse-engineering.
You can find installation instructions and usage details in the mitmproxy-mcp GitHub repository at github.com/snapspecter/mitmproxy-mcp. The project has 105 stars and 20 forks, indicating an active community.
mitmproxy-mcp is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to mitmproxy-mcp on Agent Skills Hub include xclaude-plugin, sub-agents-mcp, c0ntextKeeper. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: