api-mitmproxy

Name: api-mitmproxy
Availability: InStock
Author: AgentSecOps

Intercept, inspect, modify, and replay API traffic with mitmproxy.

183|35|Updated Nov 19, 2025

Search Tags:#automation #api-security #proxy #mitmproxy #traffic-inspection #tls-interception #har-export

Ready to run

npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill api-mitmproxy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: api-mitmproxy
Source: https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/appsec/api-mitmproxy
Command: npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill api-mitmproxy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Intercept, inspect, modify, and replay API traffic to test security controls and API behavior.

Core Features & Use Cases

Interactive TLS-capable proxy for API traffic with real-time inspection
Request/response modification, traffic replay, and HAR export for reporting
Interfaces include console, web (mitmweb), and CLI for flexible workflows
Python scripting support for automation and custom testing

Quick Start

Install mitmproxy, configure your client to use the proxy, and start intercepting API traffic.

Frequently Asked Questions about api-mitmproxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I intercept and inspect API traffic for security testing?▼

You can intercept and inspect API traffic using a TLS-capable proxy to capture real-time requests and responses, apply modifications, and replay traffic to evaluate API behavior and security controls.

Can I automate API traffic modification and replay using Python scripting?▼

Yes, you can automate API traffic modification and replay using Python scripting capabilities to build custom automated tests, modify requests and responses, and validate security controls without manual intervention.

Does mitmproxy support GraphQL and microservice traffic interception?▼

Yes, mitmproxy supports GraphQL and microservice traffic interception, allowing you to apply TLS interception, inspect complex API interactions, and test security controls across diverse service environments.

What is the best way to export captured API traffic for reporting?▼

The best way to export captured API traffic for reporting is using HAR exports, which provide a standardized format to document intercepted requests, responses, and modifications made during security testing.

Do I need to configure TLS interception to test REST API security controls?▼

Yes, you need to configure TLS interception to test REST API security controls, because it allows the proxy to decrypt, inspect, and modify encrypted traffic between your client and the API endpoints.

When should I use mitmweb versus the console interface for API testing?▼

Use mitmweb for a browser-based visual interface suited for flexible workflows and remote inspection, whereas the console interface provides a lightweight, terminal-based environment for quick traffic inspection.