English | Tiếng Việt | 中文 | 日本語 | 한국어 | Français | Deutsch

The open-source, auditable HTTP debugging proxy for macOS.

Intercept, inspect, and modify HTTP/HTTPS/WebSocket/GraphQL traffic with a native Swift app you can inspect, build, and trust.
A local-first, AGPL-3.0 alternative to Proxyman and Charles Proxy.

v0.19.1 — 2026-05-17

• Restored access to the License settings pane for activating, restoring, and managing Rockxy Pro.

See CHANGELOG.md for the full release history.

• Node.js Developer Setup now mirrors the selected client during validation and has a fuller localhost sample guide.
• Developer Setup Hub now covers runtimes, browsers, clients, devices, frameworks, and environments with target-specific snippets, validation watchers, and honest guide content.
• HTTPS response prompts, sidebar actions, and the request table now stay in sync when SSL proxying is enabled or disabled by domain or app.
• The inspector and main request table were polished with scrolling tabs, top-aligned query content, clearer status/code separation, request/response byte columns, duration fixes, and live SSL state icons.

Traffic Capture — SwiftNIO proxy with CONNECT tunnel, auto-generated per-host TLS certificates, WebSocket frame capture, and automatic GraphQL operation detection.

Inspect Everything — JSON tree viewer, hex inspector, timing waterfall (DNS/TCP/TLS/TTFB/Transfer), headers, cookies, query params, auth — all in a tabbed inspector.

Mock & Modify — Map Local (serve from files), Map Remote (redirect to another server), Breakpoints (pause and edit mid-flight), Block, Throttle, Modify Headers, Allow List, Bypass Proxy.

Log Correlation — Capture macOS logs (OSLog) and correlate them with network requests by timestamp. See which app made each request.

Extend with Plugins — JavaScript scripting in a sandboxed JavaScriptCore runtime. Inspect, modify, and automate traffic with custom hooks.

Built for Scale — NSTableView virtual scrolling handles 100k+ requests. Ring buffer eviction, disk body offloading, batched UI updates. Zero lag.

Developer Setup Hub — Guided setup per runtime, browser, device, framework, and environment with copyable snippets, validation probes, and troubleshooting notes.

Local MCP Bridge — Bundled Model Context Protocol server lets local MCP clients query live traffic, rules, and proxy status. Local-only, token-authenticated, sensitive data redacted by default.

100% native macOS. No Electron. No web views. SwiftUI + AppKit + SwiftNIO.

git clone https://github.com/RockxyApp/Rockxy.git
cd Rockxy
open Rockxy.xcodeproj

Build and run in Xcode. The Welcome window guides you through root CA setup, helper installation, and proxy activation.

Requirements: macOS 14.0+, Xcode 16+, Swift 5.9

If you want to connect Rockxy to a local MCP client after installation, see the MCP Integration guide.

On the roadmap: deeper replay/diff/rules/scripting workflows, improved WebSocket and GraphQL inspection, and exploration of gRPC/Protobuf plus HTTP/2 and HTTP/3 support.

Rockxy intercepts network traffic — security is foundational, not optional.

• XPC helper validates callers via certificate-chain comparison, not just bundle ID
• Plugins run in sandboxed JavaScriptCore with 5-second timeout, no filesystem/network access
• Input validation on all boundaries — body size caps, URI limits, regex DoS protection, path traversal prevention
• Credentials automatically redacted in captured logs
• Sensitive files stored with 0o600 permissions

Report vulnerabilities via SECURITY.md. See the full security architecture for details.

Rockxy's public roadmap is workflow-oriented and date-free. It focuses on reliability, native macOS UX, debugging workflows, protocol support, documentation, and contributor onboarding.

• ROADMAP.md: high-level public engineering direction
• Rockxy Public Roadmap: operational visibility for roadmap-tracked issues

Full documentation available at the Rockxy Docs:

• Quickstart Guide — get up and running in minutes
• Developer Setup Hub — runtime snippets, device guides, validation probes, and support matrix
• MCP Integration — connect Rockxy to local MCP clients
• Architecture — proxy engine, actor model, data flow
• Security Model — trust boundaries, XPC validation, certificate management
• Design Decisions — why SwiftNIO, NSTableView, actors
• Building from Source — build, test, lint, and debug
• Code Style — SwiftLint, SwiftFormat, and conventions
• Changelog — unreleased work and tagged releases

Contributions welcome — code, tests, docs, bug reports, and UX feedback.

See CONTRIBUTING.md for setup instructions, code style, and the full PR checklist.

Good first issues are labeled good first issue. By opening a PR, you agree to the CLA.

Rockxy is built and maintained by independent developers. Sponsorships fund continued development, security audits, and new features.

Partnership inquiries — developer tool companies, security firms, and enterprise teams looking for custom integrations or white-label solutions: rockxyapp@gmail.com

• GitHub Sponsors — support Rockxy's development
• GitHub Issues — bug reports and feature requests
• GitHub Discussions — questions and community chat
• Email — rockxyapp@gmail.com
• Security issues — see SECURITY.md for responsible disclosure

GNU Affero General Public License v3.0 — Copyright 2024–2026 Rockxy Contributors.

_{Made by Stephen. Built with Swift, SwiftNIO, SwiftUI, and AppKit.}