README.md
May 7, 2026 · View on GitHub
Rockxy
English | Tiếng Việt | 中文 | 日本語 | 한국어 | Français | Deutsch
The open-source HTTP debugging proxy for macOS.
Intercept, inspect, and modify HTTP/HTTPS/WebSocket/GraphQL traffic — built natively in Swift.
A free, auditable alternative to Proxyman and Charles Proxy.
Latest Tagged Release
v0.16.0 — 2026-05-07
Added
- Developer Setup Hub now presents Manual Setup and Automatic Setup as setup modes, with manual setup kept available for every target.
- Python Developer Setup now includes stronger
requests,httpx,aiohttp, andurllib3guidance, a localhost demo path, and a validation flow that uses the selected Python client. - Rockxy Pro now unlocks repeatable Dev Hub workflows such as more saved setup profiles, more pinned targets, multi-target validation, reusable launchers, and profile/template reuse while keeping one-shot manual and automatic setup available.
Fixed
- Python setup snippets now use clearer proxy and certificate wiring for local validation.
Changed
- Developer Setup Hub copy now explains validation honestly: local probes confirm traffic was captured through Rockxy without claiming process, device, simulator, emulator, or runtime attribution.
See CHANGELOG.md for the full release history.
Current Branch Highlights
- Developer Setup Hub now covers runtimes, browsers, clients, devices, frameworks, and environments with target-specific snippets, validation watchers, and honest guide content.
- HTTPS response prompts, sidebar actions, and the request table now stay in sync when SSL proxying is enabled or disabled by domain or app.
- The inspector and main request table were polished with scrolling tabs, top-aligned query content, clearer status/code separation, request/response byte columns, duration fixes, and live SSL state icons.
Features
Traffic Capture — SwiftNIO proxy with CONNECT tunnel, auto-generated per-host TLS certificates, WebSocket frame capture, and automatic GraphQL operation detection.
Inspect Everything — JSON tree viewer, hex inspector, timing waterfall (DNS/TCP/TLS/TTFB/Transfer), headers, cookies, query params, auth — all in a tabbed inspector.
Mock & Modify — Map Local (serve from files), Map Remote (redirect to another server), Breakpoints (pause and edit mid-flight), Block, Throttle, Modify Headers, Allow List, Bypass Proxy.
Log Correlation — Capture macOS logs (OSLog) and correlate them with network requests by timestamp. See which app made each request.
Extend with Plugins — JavaScript scripting in a sandboxed JavaScriptCore runtime. Inspect, modify, and automate traffic with custom hooks.
Built for Scale — NSTableView virtual scrolling handles 100k+ requests. Ring buffer eviction, disk body offloading, batched UI updates. Zero lag.
Developer Setup Hub — Guided setup per runtime, browser, device, framework, and environment with copyable snippets, validation probes, and troubleshooting notes.
AI-Ready (MCP Server) — Bundled Model Context Protocol server lets Claude CLI, Claude Desktop, and other MCP clients query live traffic, rules, and proxy status directly from chat. Local-only, token-authenticated, sensitive data redacted by default.
100% native macOS. No Electron. No web views. SwiftUI + AppKit + SwiftNIO.
Quick Start
git clone https://github.com/RockxyApp/Rockxy.git
cd Rockxy
open Rockxy.xcodeproj
Build and run in Xcode. The Welcome window guides you through root CA setup, helper installation, and proxy activation.
Requirements: macOS 14.0+, Xcode 16+, Swift 5.9
If you want to connect Rockxy to Claude after installation, see the MCP Integration guide.
Rockxy vs. Alternatives
| Rockxy | Proxyman | Charles Proxy | |
|---|---|---|---|
| License | AGPL-3.0 (open-source) | Proprietary (freemium) | Proprietary ($50) |
| Source code | Fully auditable | Closed | Closed |
| Technology | Swift + SwiftNIO | Swift + AppKit | Java |
| HTTPS interception | Yes | Yes | Yes |
| WebSocket | Yes | Yes | Yes |
| GraphQL detection | Yes | Yes | No |
| Map Local / Remote | Yes | Yes | Yes |
| Breakpoints | Yes | Yes | Yes |
| JavaScript scripting | Yes | Yes | No |
| OSLog correlation | Yes | No | No |
| Process identification | Yes | Yes | No |
| Request diff | Yes | Yes | No |
| HAR import/export | Yes | Yes | No |
| 100k+ row performance | Yes | Yes | Slow |
| No-password proxy setup | Yes (helper daemon) | Yes | No |
| Community contributions | Open PRs | No | No |
Security
Rockxy intercepts network traffic — security is foundational, not optional.
- XPC helper validates callers via certificate-chain comparison, not just bundle ID
- Plugins run in sandboxed JavaScriptCore with 5-second timeout, no filesystem/network access
- Input validation on all boundaries — body size caps, URI limits, regex DoS protection, path traversal prevention
- Credentials automatically redacted in captured logs
- Sensitive files stored with 0o600 permissions
Report vulnerabilities via SECURITY.md. See the full security architecture for details.
Roadmap
- HTTP/HTTPS/WebSocket/GraphQL interception
- Map Local, Map Remote, Breakpoints, Block, Throttle
- JavaScript plugin system with sandboxed execution
- HAR import/export, native session files, request diff
- OSLog correlation and credential redaction
- Model Context Protocol (MCP) server for AI assistants (Claude CLI, Claude Desktop)
- HTTP/2 and HTTP/3 support
- Remote device proxy (iOS over USB/Wi-Fi)
- Headless mode for CI/CD pipeline integration
- gRPC / Protocol Buffers inspection
- Error grouping and analytics dashboard
Documentation
Full documentation available at the Rockxy Docs:
- Quickstart Guide — get up and running in minutes
- Developer Setup Hub — runtime snippets, device guides, validation probes, and support matrix
- MCP Integration — connect Rockxy to Claude CLI or Claude Desktop
- Architecture — proxy engine, actor model, data flow
- Security Model — trust boundaries, XPC validation, certificate management
- Design Decisions — why SwiftNIO, NSTableView, actors
- Building from Source — build, test, lint, and debug
- Code Style — SwiftLint, SwiftFormat, and conventions
- Changelog — unreleased work and tagged releases
Contributing
Contributions welcome — code, tests, docs, bug reports, and UX feedback.
See CONTRIBUTING.md for setup instructions, code style, and the full PR checklist.
Good first issues are labeled good first issue. By opening a PR, you agree to the CLA.
Sponsors & Partners
Rockxy is built and maintained by independent developers. Sponsorships fund continued development, security audits, and new features.
| Tier | Benefits |
|---|---|
| Gold Sponsor | Logo on README + docs site, priority feature requests, direct support channel |
| Silver Sponsor | Logo on README, named acknowledgment in release notes |
| Bronze Sponsor | Named acknowledgment in README and docs |
| Partner | Co-development, integration support, early access to upcoming features |
Partnership inquiries — developer tool companies, security firms, and enterprise teams looking for custom integrations or white-label solutions: rockxyapp@gmail.com
Support
- GitHub Sponsors — support Rockxy's development
- GitHub Issues — bug reports and feature requests
- GitHub Discussions — questions and community chat
- Email — rockxyapp@gmail.com
- Security issues — see SECURITY.md for responsible disclosure
License
GNU Affero General Public License v3.0 — Copyright 2024–2026 Rockxy Contributors.
Star History
Built with Swift, SwiftNIO, SwiftUI, and AppKit.