English | Tiếng Việt | 中文 | 日本語 | 한국어 | Français | Deutsch
The open-source, auditable HTTP debugging proxy for macOS.
Intercept, inspect, and modify HTTP/HTTPS/WebSocket/GraphQL traffic with a native Swift app you can inspect, build, and trust.
A local-first, AGPL-3.0 alternative to Proxyman and Charles Proxy.
v0.22.0 — 2026-05-26
- Added Upstream Proxy core support for routing outbound traffic through HTTP/HTTPS proxies, with Community caps for SOCKS5, authentication, and bypass-list size enforced by app policy.
- Added WebSocket Protobuf heuristic decoding infrastructure for inspecting binary frame payloads without requiring schema uploads.
- Added Tools menu windows for External Proxy Settings, SOCKS Proxy Settings, Protobuf mapping rules, and Protobuf schema list management.
- Added an on-demand Protobuf view to the WebSocket frame inspector for heuristic field-tree rendering.
- Improved scripting stability so request and response scripts handle headers, console output, and runtime errors more reliably.
- Strengthened redaction for local MCP exports so sensitive request and rule data stays protected when shared with connected tools.
- Improved HAR imports and content-type detection for better handling of modern JSON-style responses and imported sessions.
See CHANGELOG.md for the full release history.
- Upstream Proxy now includes free/core Automatic Proxy Configuration with PAC URL routing for
DIRECT, HTTP, and HTTPS routes while preserving existing SOCKS5 and authentication policy boundaries. - Export workflows now cover OpenAPI YAML/HTML and selected-traffic Gist publishing with redaction-aware payload building.
- Inspector tools now include JSONPath/key/value filtering and quick previews for selected payload text such as JWTs.
- Node.js Developer Setup now mirrors the selected client during validation and has a fuller localhost sample guide.
- Developer Setup Hub now covers runtimes, browsers, clients, devices, frameworks, and environments with target-specific snippets, validation watchers, and honest guide content.
- WebSocket Protobuf work continues as part of Rockxy's richer protocol inspection direction.
Traffic Capture — SwiftNIO proxy with CONNECT tunnel, auto-generated per-host TLS certificates, WebSocket frame capture, and automatic GraphQL operation detection.
Inspect Everything — JSON tree viewer, hex inspector, timing waterfall (DNS/TCP/TLS/TTFB/Transfer), headers, cookies, query params, auth — all in a tabbed inspector.
Mock & Modify — Map Local (serve from files), Map Remote (redirect to another server), Breakpoints (pause and edit mid-flight), Block, Throttle, Modify Headers, Allow List, Bypass Proxy.
Log Correlation — Capture macOS logs (OSLog) and correlate them with network requests by timestamp. See which app made each request.
Extend with Plugins — JavaScript scripting in a sandboxed JavaScriptCore runtime. Inspect, modify, and automate traffic with custom hooks.
Built for Scale — NSTableView virtual scrolling handles 100k+ requests. Ring buffer eviction, disk body offloading, batched UI updates. Zero lag.
Developer Setup Hub — Guided setup per runtime, browser, device, framework, and environment with copyable snippets, validation probes, and troubleshooting notes.
Upstream Proxy — Chain captured traffic through HTTP/HTTPS upstream proxies or a PAC URL for automatic proxy configuration in team, VPN-adjacent, and lab networks.
Local MCP Bridge — Bundled Model Context Protocol server lets local MCP clients query live traffic, rules, and proxy status. Local-only, token-authenticated, sensitive data redacted by default.
100% native macOS. No Electron. No web views. SwiftUI + AppKit + SwiftNIO.
git clone https://github.com/RockxyApp/Rockxy.git
cd Rockxy
open Rockxy.xcodeprojBuild and run in Xcode. The Welcome window guides you through root CA setup, helper installation, and proxy activation.
Requirements: macOS 14.0+, Xcode 16+, Swift 5.9
If you want to connect Rockxy to a local MCP client after installation, see the MCP Integration guide.
| Rockxy | Proxyman | Charles Proxy | |
|---|---|---|---|
| Project model | AGPL-3.0 open-source project | Proprietary commercial app | Proprietary commercial app |
| Source code | Public, auditable, forkable | Closed source | Closed source |
| Build from source | Free with Xcode from this repo | Not available from public source | Not available from public source |
| Native macOS foundation | Swift + SwiftNIO + SwiftUI/AppKit | Native macOS commercial app | Cross-platform commercial app |
| Local-first capture | Local proxy, certificates, helper, and capture data stay on your Mac | Desktop proxy app | Desktop proxy app |
| Developer setup workflow | Built-in Developer Setup Hub for runtimes, clients, devices, frameworks, and environments | Product-specific setup guidance | Product-specific setup guidance |
| External proxy + PAC routing | HTTP/HTTPS upstream proxy, PAC auto-configuration, and bypass rules | Mature commercial proxy tooling | Mature commercial proxy tooling |
| MCP/local automation bridge | Built in, token-authenticated, redaction by default | Not claimed in public docs reviewed | Not claimed in public docs reviewed |
| Open contribution path | Public issues, discussions, roadmap, and PRs | Vendor-controlled product | Vendor-controlled product |
On the roadmap: deeper replay/diff/rules/scripting workflows, improved WebSocket and GraphQL inspection, and exploration of gRPC/Protobuf plus HTTP/2 and HTTP/3 support.
Rockxy intercepts network traffic — security is foundational, not optional.
- XPC helper validates callers via certificate-chain comparison, not just bundle ID
- Plugins run in sandboxed JavaScriptCore with 5-second timeout, no filesystem/network access
- Input validation on all boundaries — body size caps, URI limits, regex DoS protection, path traversal prevention
- Credentials automatically redacted in captured logs
- Sensitive files stored with 0o600 permissions
Report vulnerabilities via SECURITY.md. See the full security architecture for details.
Rockxy's public roadmap is workflow-oriented and date-free. It focuses on reliability, native macOS UX, debugging workflows, protocol support, documentation, and contributor onboarding.
- ROADMAP.md: high-level public engineering direction
- Rockxy Public Roadmap: operational visibility for roadmap-tracked issues
Full documentation available at the Rockxy Docs:
- Quickstart Guide — get up and running in minutes
- Developer Setup Hub — runtime snippets, device guides, validation probes, and support matrix
- MCP Integration — connect Rockxy to local MCP clients
- Architecture — proxy engine, actor model, data flow
- Security Model — trust boundaries, XPC validation, certificate management
- Design Decisions — why SwiftNIO, NSTableView, actors
- Building from Source — build, test, lint, and debug
- Code Style — SwiftLint, SwiftFormat, and conventions
- Changelog — unreleased work and tagged releases
Contributions welcome — code, tests, docs, bug reports, and UX feedback.
See CONTRIBUTING.md for setup instructions, code style, and the full PR checklist.
Good first issues are labeled good first issue. By opening a PR, you agree to the CLA.
Rockxy is built and maintained by independent developers. Sponsorships fund continued development, security audits, and new features.
| Tier | Benefits |
|---|---|
| Gold Sponsor | Logo on README + docs site, priority feature requests, direct support channel |
| Silver Sponsor | Logo on README, named acknowledgment in release notes |
| Bronze Sponsor | Named acknowledgment in README and docs |
| Partner | Co-development, integration support, early access to upcoming features |
Partnership inquiries — developer tool companies, security firms, and enterprise teams looking for custom integrations or white-label solutions: rockxyapp@gmail.com
- GitHub Sponsors — support Rockxy's development
- GitHub Issues — bug reports and feature requests
- GitHub Discussions — questions and community chat
- Email — rockxyapp@gmail.com
- Security issues — see SECURITY.md for responsible disclosure
GNU Affero General Public License v3.0 — Copyright 2024–2026 Rockxy Contributors.
Made by Stephen. Built with Swift, SwiftNIO, SwiftUI, and AppKit.