NewTeam Workspace: share a capture with one link

Your network,
under the lens.

WireLens is a native HTTP(S) debugging proxy for Mac and iPhone. Capture any app, decrypt HTTPS, then pause, mock, rewrite and replay requests. Everything stays on your device.

Free to use · 14-day Pro trial on Mac · macOS 14+ · Apple silicon · iOS 17+ · iPhone & iPad

Capture and inspect

Everything your apps say, in plain sight.

WireLens sits between your app and the network. Pick the hosts to decrypt, then read every header, body and frame the way the app sees it, with the app that sent it.

Decrypt HTTPS, host by host

Choose exactly which hosts WireLens decrypts, or turn on Decrypt All. Everything else passes through untouched, so pinned apps and system services keep working.

SSL ProxyingDecrypt All

Include

  • api.acme.dev
  • *.acme.dev
  • graphql.acme.dev

Exclude

*.apple.comsystem

Every request, by app

On the Mac each flow carries the app that made it, so Safari, your simulator build and a Node script never blur together.

  • AAcme Store812
  • Safari264
  • nnode131
  • curl19

An inspector that reads payloads

JSON trees, images, hex, forms, cookies and query tables. Bearer tokens decode in place. Protobuf gets named fields from your descriptors.

JWT · decoded
{
"sub": "8842",
"scope": "cart orders",
"exp": 1789132800expires in 4 min
}

WebSockets, frame by frame

Follow a socket as it talks: every message sent and received, with timing, opcodes and payloads that open like any other body.

  • {"type":"subscribe","channel":"cart"}0.00s
  • {"type":"ack","channel":"cart"}0.04s
  • {"type":"cart.updated","count":2}3.12s
  • ping15.0s
  • pong15.0s

Every device on your desk

Point a phone, tablet, emulator or another Mac at your Mac. WireLens serves its certificate to them and captures them like local traffic.

  • iPhone on Wi-Fi192.168.1.20:9090
  • Android emulator10.0.2.2:9090
  • iOS Simulatorroot installed
  • Another Macwaiting

Debugging tools

Don't just watch traffic. Change it.

Pause a request, answer it from your Mac, send it somewhere else or script it. Every tool matches by URL pattern, and every change it makes shows up in Capture.

Pause a request. Change it. Let it go.

Breakpoints hold matching requests or responses before they continue. Edit the URL, headers, status or body, then execute it, abort it, or give yourself another minute.

  • Request and response phases, per rule
  • Your edit is what the app receives, and what Capture records
  • Timeouts you decide, so a forgotten pause never hangs a client
Breakpoint · Request0:48 left
POSTapi.acme.dev/v2/cart/items
HeadersBodyURL
{
  "sku": "LENS-01",
  "quantity": 20edited · was 2}
Abort+1 minExecute

Protocols

Speaks every protocol your app does.

Most proxies stop at a status code. WireLens reads the places modern APIs actually report failure, and tells you when a connection was not what it seemed.

HTTP/1.1 and HTTP/2

Negotiated per connection and shown on every flow, including when an upstream downgrades.

WebSocket

Upgrades captured, then every frame in both directions with timing and opcode.

gRPC

Trailers kept and grpc-status read, so a failed call never hides behind HTTP 200. Streaming calls relay.

GraphQL

Operation names in the list, and an errors array under a 200 is flagged as the failure it is.

Protobuf

Schema-less decoding out of the box, named fields once you import your descriptors.

HTTP/3 and QUIC

Block QUIC and clients fall back to TCP, where WireLens can decrypt them. Nothing silently skips capture.

SOCKS5 and upstream proxies

A local SOCKS5 listener, and chaining through HTTP, HTTPS, SOCKS5 or PAC for networks behind a proxy.

mTLS and your own root

Present client certificates per host, override server certificates, or import your own root from PKCS#12.

Automation

Your terminal and your agent can read the wire too.

WireLens for Mac ships a command line tool and an MCP server inside the app. Query captures, export HAR, add rules and drive capture from scripts, Raycast, or an agent in Claude Code, Cursor, VS Code, Windsurf or Zed.

wirelens — zsh
wirelens ls --host payments.acme.dev --status 5xx
3f9c1e2b POST 500 payments.acme.dev /v1/intents 1.21 s 8a41d0c7 POST 502 payments.acme.dev /v1/intents/retry 30.0 s
wirelens show 3f9c --body response --json-path '$.error'
{ "type": "upstream_timeout", "retryable": true }
wirelens rules map-local --pattern 'https://payments.acme.dev/v1/*' --content '{"status":"ok"}'
✓ Added Map Local rule
wirelens export har --out checkout.har
✓ Wrote 1,323 entries to checkout.har
Your agentwirelens-mcp
Checkout fails in the simulator. What is the server actually saying?
capture_statuslistening on 127.0.0.1:9090 · 3 hosts decrypted
list_flowshost "payments.acme.dev", status 5xx → 2 flows
get_flow_body3f9c1e2b · response · $.error

POST /v1/intents returned 500 after 1.21 s with upstream_timeout, marked retryable. Your request looks right (amount 9998 for cart_8842), so the fault is on the payments side. Want a Map Local rule that returns success while they fix it?

Team Workspace

Share the request itself, not a screenshot of it.

Send a capture to your team with one link. WireLens strips credentials before anything leaves your Mac, can encrypt the log end to end, and deletes it on the schedule you pick.

  • Private, whole-team, selected-people or public links
  • Admin, Developer and Viewer roles
  • A browser viewer for teammates without WireLens
  • Logs that delete themselves after 1, 7, 30 or 90 days

Share to Team Workspace

42 flows from “Checkout on staging”

NameCheckout 500 on staging
Who can open it
PrivateWorkspaceSelectedPublic
Redact credentialsAuthorization, Cookie, Set-Cookie
End-to-end encryptionThe key travels in the link, never to our server
Delete after7 days
workspace.wirelens.app/l/k3v9q2#key=… Copy

Local-first

Your traffic is nobody’s business but yours.

A debugging proxy sees tokens, passwords and personal data. WireLens is built so that none of it has to leave the device you are debugging on.

Captured on your device

Flows are written to a local store on your Mac or iPhone. There is no WireLens account, and no WireLens server in the path of your traffic.

A certificate only you hold

The root certificate that signs decrypted traffic is generated on your device, and its private key stays there.

No trackers in the apps

No analytics or crash-reporting SDKs. Crash logs are written to disk on your Mac and nothing is uploaded.

Shared on your terms

Team Workspace redacts credentials before upload and can encrypt a log end to end, with the key kept in the link.

The apps contact our servers only to check a license, look for an update, or when you use Team Workspace. Read the privacy policy

Pricing

Free to capture. Pro when you need more.

Capture, inspection, sessions and HAR are free forever. Pro removes every limit on the tools, and you pay for it once.

Free

$0forever

Capture, inspect and export with no time limit, and one or two of every tool to try it.

Get WireLens

Pro

$69.99once, for one Mac

Every tool without limits, Decrypt All and WebSocket frames. Try it free for 14 days first.

See Pro

Team Cloud

$9.99per person / month, billed yearly

Pro for everyone on the team, plus Team Workspace for shared, redacted logs.

See team plans

On iPhone and iPad, Pro is an in-app purchase through the App Store: monthly, yearly or once.

Questions

Asked often.

Is WireLens free?
Yes. Capturing, the flow list, the inspector, sessions and HAR import and export are free with no time limit. Each debugging tool comes with a small free allowance, such as one breakpoint and two SSL Proxying hosts, and Pro removes every limit. On the Mac you can try Pro free for 14 days.
Do I need a Mac to debug my iPhone?
No. WireLens for iPhone captures on the device itself, through a local VPN configuration whose traffic never leaves the phone. If you have a Mac, you can also point the iPhone's Wi-Fi proxy at WireLens for Mac and inspect it on the big screen.
Why do some apps stop loading when I decrypt them?
Those apps use certificate pinning: they trust only their own certificate, so they refuse every debugging proxy. WireLens leaves well-known pinned services out of decryption by default and decrypts only the hosts you choose, so your own app can be inspected while the rest of the device keeps working.
Does my traffic pass through your servers?
No. WireLens decrypts and stores traffic on your own device. Nothing is uploaded unless you share a capture to Team Workspace, and even then credentials are redacted first and the log can be encrypted end to end.
What about HTTP/3?
WireLens can block QUIC, so apps and browsers fall back to HTTP/2 or HTTP/1.1 over TLS, which it captures and decrypts. Every request stays visible instead of HTTP/3 traffic slipping past the proxy.
Can I bring my existing sessions and settings?
Yes. WireLens for Mac imports HAR files, Charles sessions and Charles settings, and exports HAR, CSV, cURL, OpenAPI and its own .wirelens session packages.
Which Macs and iPhones are supported?
WireLens for Mac runs on Macs with Apple silicon and macOS 14 Sonoma or later. WireLens for iPhone and iPad needs iOS 17 or later.
Can an AI agent use WireLens?
Yes. The Mac app includes an MCP server that agents in Claude Code, Cursor, VS Code, Windsurf or Zed can use to search captures and read bodies. Start it with --allow-mutations and it can also add rules and control capture.

Look closer.

Start free. Capture, decrypt and inspect with no time limit, and try every Pro tool for fourteen days on your Mac.

Buying for a team? See team pricing or write to finance@wirelens.app.