What's new.

WireLens is built in the open with its users. Here is everything that shipped, newest first.

RSS
  1. Mac iPhone Android

    What the free plan and Pro include

    Capture, inspection, WebSocket frames, the command line and the MCP server are free. Diff, JSON queries, extra exports, proxy chaining, your own certificates and HTTP/3 decryption need WireLens Pro.

    Changed#

    • Free, with no limit: capture, the traffic list and inspector, WebSocket frames on every platform, sessions, HAR and cURL, Proxyman and Charles import, raw protobuf decoding, the LLM conversation view, TLS fingerprint matching and the Allow List. Each debugging tool keeps its free allowance.
    • Now WireLens Pro on the Mac: Diff, JSONPath and jq (the query bar and json: and jq: search terms), Gist, OpenAPI and CSV export, protobuf schemas, the upstream and SOCKS proxies, your own root, client and server certificates, the Network Extension, LLM cost and the changes since the previous call, and the MCP Inspector.
    • Command line and MCP server: free. Rules added from them count against the same allowances as the app. Commands and tools that reach a Pro feature exit with code 6 or return an error on the free plan. See Command line and MCP server.
    • HTTP/3 decryption needs Pro on every platform.
    • Settings you made while on Pro are kept. They take effect again as soon as Pro is active.

    The full list is on the pricing page.

  2. Mac iPhone

    Servers see your app's own TLS fingerprint

    Decrypted connections now reach the server with your app's TLS and HTTP/2 fingerprint, so sites that block proxies behave the same with WireLens running.

    New#

    • Match the client's TLS fingerprint. On the Mac, each decrypted connection to the server copies your app's ClientHello and HTTP/2 settings. Sites that compare the TLS fingerprint with the User-Agent see the app, not WireLens. On by default, in Tools ▸ SSL Proxying ▸ Decryption. How it works.
    • Fingerprint section. A connection's Summary shows the JA4, JA3 and HTTP/2 fingerprint your app sent next to the ones the server received, and names anything that differs. On iPhone and iPad it shows your app's fingerprint.
    • get_flow over MCP returns the connection's TLS details and fingerprints under connection.

    Fixed#

    • Request headers reach the server in the order the app sent them. They used to be reordered.
    • An HTTP/2 request that split its cookies across several header fields now reaches an HTTP/1.1 server with them joined correctly.
    • The Cipher row is filled in for connections WireLens makes through its own TLS stack on the Mac.
  3. Mac

    Agents can manage every rule

    The MCP server now creates, edits, reorders and deletes every kind of rule, writes and tests scripts, releases requests held at a breakpoint, and sets up simulators.

    New#

    • Every rule field from an agent. Each add_ tool takes what its pane in Tools takes, including a scope by method, status, header, body text or app. Network Conditions host rules and Block List rules for a URL or an app can now be created over MCP.
    • Edit a rule in place. update_rule reaches every field, header and query sets included, and keeps the rule's id and position. move_rule reorders, duplicate_rule makes a copy that starts switched off, and remove_rules deletes several at once.
    • Find rules quickly. list_rules returns one short row per rule with its id, kind and order. get_rule returns one rule in full.
    • Move rules between Macs. export_rules writes a file and import_rules reads it back, with a dry run that shows what would change.
    • Script tools. script_reference returns the scripting API, generate_script builds a script from a list of edits or from a captured response, and test_script runs it against a captured request and reports the result before anything is installed.
    • Release a paused request. list_paused_flows shows what a breakpoint is holding. resume_paused_flow continues it with or without edits, aborts it with a status, or gives it more time.
    • Set up a simulator. list_simulators shows which simulators trust the WireLens certificate, and setup_simulator installs it and confirms it took, booting the simulator first if you ask.
    • Tidy a capture. annotate_flows comments on and colours flows, reveal_flow opens one in the app, delete_flows removes them, and rename_session and delete_session manage capture runs.

    Changed#

    • add_script_rule accepts the statements of a hook on their own and wraps them in the function for you. Its path now defaults to every path.
    • add_breakpoint can pause the request and the response in one rule.
    • add_dns_spoof accepts a hostname as the target.

    Fixed#

    • send_request and replay_flow to a server on this Mac are now captured, and rules apply to them.
    • A replay sent straight after the request it copies is reported as its own flow.
    • A list passed where a rule expects text is refused. It used to be saved as the pattern.
  4. Android

    WireLens for Android

    WireLens now runs on Android phones, with capture on the device and the app behind every request named.

    New#

    • Capture on the phone through a local VPN, on Android 10 or later.
    • Traffic by app. The list opens on the apps that are talking, and you can limit capture to the apps you pick.
    • HTTPS, HTTP/2 and HTTP/3 decrypted for the hosts you choose, with WebSocket frames, gRPC, protobuf and GraphQL in the inspector.
    • The tools: Breakpoints, Map Local, Map Remote, Rewrite, Scripting, DNS Spoof, Block List and Network Conditions.
    • Breakpoints in the notification. Continue, abort or edit a paused request while the app you are testing stays in front.
    • Compose with cURL and Postman import, and Export HAR from any capture.
    • Team Workspace sign-in, shared captures and end-to-end encrypted sharing.
    • A Setup Guide that checks each step as you finish it.
  5. Mac

    Codex CLI and Gemini CLI

    Tools ▸ MCP Server now installs into Codex CLI and Gemini CLI as well, and wirelens.app has a page for AI agents.

    New#

    • Codex CLI and Gemini CLI are supported MCP clients. Tools ▸ MCP Server detects them next to Claude Code, Claude Desktop, Cursor, VS Code, Windsurf and Zed, and installs wirelens-mcp into each one. wirelens mcp install codex and wirelens mcp install gemini do the same from a terminal, and codex mcp add / gemini mcp add are printed for people who prefer their own CLI.
    • Installing into Codex keeps the rest of your config. Only the WireLens entry in ~/.codex/config.toml is added or removed, and everything else in the file, comments included, stays as it was.

    Changed#

    • wirelens mcp snippet --json now reports a format field, because the Codex snippet is TOML and every other client's is JSON.
    • A page for agents. wirelens.app/agents has the install line and config path for every supported client, the full read-only and --allow-mutations tool lists, and a session you can watch an agent work through.
  6. Mac iPhone

    Team Workspace, Pro licenses and the 14-day trial

    Share captures with your team as links, buy and manage licenses at pay.wirelens.app, and try every Pro tool free for two weeks on the Mac.

    New#

    • Team Workspace. Share a flow, a selection, a session or the current view to workspace.wirelens.app from WireLens for Mac. Choose private, workspace, selected people or public; credentials are redacted on your Mac before upload; logs can be end-to-end encrypted with the key kept in the link; and they can delete themselves after 1, 7, 30 or 90 days.
    • A browser viewer for shared logs, with a filterable list, headers, bodies, cookies, timing and Copy as cURL, which decrypts end-to-end encrypted logs in the browser.
    • Open in WireLens downloads a shared log and imports it as its own session.
    • Roles, invitations, seats and an activity log for workspace admins, with Admin, Developer and Viewer roles.
    • Licenses from pay.wirelens.app. Pro for one Mac, Team keys bought per person, and Team Cloud with Team Workspace. Activation links, restore by email, and License Manager for keys and devices.
    • A 14-day Pro trial on the Mac, with no card and no account.

    Improved#

    • The free plan's limits are the same in both apps, the command line and the MCP server.
    • When a trial ends, WireLens lists exactly which rules went back to the free limits. They are switched off, not deleted.
    • Pro keeps working offline.

    Fixed#

    • On iPhone, a * on the Include list no longer switches off at launch for people who have bought Pro.
  7. Mac

    A search box with fields, and an inspector that shows more

    Search by any field with operators and negation, and read cookies, credentials, trailers and HTTP/2 messages the way they went over the wire.

    New#

    • Field search. host:, status:>=400, duration:>500ms, respheader:Set-Cookie, json:$.errors, jq: and more, with equals, starts-with, ends-with, wildcards, regular expressions, numeric comparisons and ranges, and ! to negate. The ? beside the search box lists every field and types it for you.
    • Cookies, Auth and Trailers tabs in the inspector, shown only when a side has something in them.
    • HTTP/2 Raw view that shows pseudo-headers in frame order instead of reconstructing an HTTP/1 message that was not sent.
    • Offered TLS cipher suites from the client's handshake, on every decrypted connection.
    • Markdown preview, an XML tree, PDF preview, Base64 image preview and image metadata in the body viewer, plus a code minimap for long bodies.

    Improved#

    • A plain search, with no fields in it, works exactly as before and stays just as fast.
    • Negated filters and positive filters now split the capture cleanly, leaving every row in one side or the other.
  8. Mac

    Sharper tools

    Map Remote by component, full HTTP response files for Map Local, GraphQL operations on every rule, and a record of which rules touched a flow.

    New#

    • Map Remote by component. Change only the host, port, path or query and keep the rest, and choose Preserve Host when an origin needs the original Host header.
    • HTTP message files for Map Local. Serve a complete response, status line and headers included, from a file, with its body read from another file if you like.
    • GraphQL operation scope on Map Local, Map Remote and Breakpoints, alongside Rewrite, Scripting and Network Conditions.
    • Which rules fired. A flow's Summary now lists the debugging tools that changed it, recorded when they ran.
    • Five more Network Conditions presets: Offline, Very Bad Network, Slow Network, Medium Network and Wi-Fi 802.11ac.
    • Access control for remote devices, including an allow-list-only mode.
    • Code font settings for body viewers and editors, and a dedicated colour theme for diffs.

    Improved#

    • The breakpoint URL field accepts a pasted curl command.
    • Query and form fields in a paused request can be edited as a table.
  9. Mac iPhone

    Compose, copy and rule testing

    Presets and custom methods in Compose, more ways to copy a request, a tester in every rule editor, and new script functions.

    New#

    • Compose presets, custom methods and paste-a-cURL straight into the URL field, and a request timeout you can switch off.
    • Copy as Markdown or CSV, and generated code that includes the proxy setting when you ask for it.
    • Test your rule in every tool's editor, not only in Custom Preview Tabs.
    • Script functions abort(), comment(), readFile() and writeToFile(), sandboxed to a folder of their own.
    • Command line: rules get, rules enable and rules disable, and settings exports of enabled rules only.
    • MCP: export_curl, generate_code and clearing the capture.
    • Client Setup recipes for Postman, Insomnia and Paw.

    Improved#

    • Query and form tables can be copied, with spreadsheet-formula characters escaped.
    • Search can be case-sensitive.
    • Map Local warns when a mapped file is missing and remembers the folder you last used.
    • When the listen port is taken, WireLens offers the next free port instead of an error.
    • The root certificate can be exported as DER as well as PEM.
  10. Mac iPhone

    Failures that tell the truth

    Truncated responses and refused connections are now recorded as exactly what they are.

    Fixed#

    • A response cut off part way through its body is detected and marked as truncated, instead of being recorded as a clean 200.
    • A refused connection fails immediately and is named as refused, instead of waiting out a timeout.
    • Recorded URLs keep a non-default port: a request to :8443 shows :8443.
  11. Mac iPhone

    Scripting, proxies and certificates

    JavaScript on every request and response, reverse and SOCKS proxies, upstream proxy chaining, mutual TLS and your own root.

    New#

    • Scripting on Mac and iPhone: onRequest and onResponse hooks with mock(), $state, $env and asynchronous $http, in an editor with snippets on both platforms.
    • Reverse Proxy. A local port that forwards to one origin, for clients that cannot use a proxy, captured as ordinary flows with every rule applied.
    • SOCKS5 listener for SOCKS clients such as curl --socks5-hostname.
    • Upstream proxy chaining through an HTTP or HTTPS proxy with Basic or Digest authentication, a SOCKS5 proxy, or a PAC file.
    • Client certificates for mutual TLS, and server certificate overrides for apps that expect one specific certificate.
    • Your own root, imported from PKCS#12 with its key kept in the Keychain.
    • Custom Preview Tabs: add your own inspector tabs, with a forced format or an onPreview script.

    Improved#

    • Apps that pin their certificates keep working: a host that refuses the WireLens certificate twice is passed through for the rest of the session.
  12. Mac iPhone

    Protocols, previews and a better workflow

    gRPC end to end over HTTP/2, a Server-Sent Events viewer, Protobuf with your schemas, JSONPath and jq, diff, session packages and much more.

    New#

    • gRPC end to end over HTTP/2, and honest reporting when an upstream server downgrades a connection to HTTP/1.1.
    • GraphQL operation names in the traffic list, and rules that match by operation.
    • Server-Sent Events viewer, including streamed AI responses, event by event.
    • Protobuf with your descriptors, for named fields in gRPC and Protobuf bodies.
    • JSONPath and jq queries over JSON bodies.
    • Saved filters, custom header columns, flow annotations, Quick Preview and bulk edit.
    • Diff two flows, side by side or unified.
    • .wirelens session packages that carry a whole capture, plus Charles session and settings import, OpenAPI export and code generation for more than a dozen languages.
    • Historical sessions on iPhone.
    • iOS Simulator setup that installs and verifies the root in each simulator.
    • Client Setup recipes for PHP, .NET and Rust.
    • Opt-in TLS key logging, letting tools such as Wireshark read the connections WireLens decrypts.

    Improved#

    • Secrets inside rule bodies are redacted from settings exports, not just secrets in headers.
    • WebSocket capture handles more real-world servers and frame sequences.
  13. Mac iPhone

    Regular expressions for every rule

    Regular expressions next to wildcards in every tool, and a tester to check a pattern before it goes live.

    New#

    • Regular-expression URL patterns in every tool that matches traffic, next to the existing wildcards.
    • A pattern tester that checks a rule against a URL before you save it.
    • A dedicated pattern field on the Mac that flags an invalid expression while you type it.
  14. Mac

    A command line tool and an MCP server

    wirelens and wirelens-mcp ship inside the Mac app, giving your terminal and your AI agent a way to read captures and write rules.

    New#

    • wirelens, a command line tool with a live interactive session, slash commands and body search, plus one-shot commands to list, show, search and export flows, manage rules and read settings.
    • wirelens-mcp, a Model Context Protocol server for AI agents. It is read-only by default; tools that change rules or capture appear only when started with --allow-mutations.
  15. Mac

    Tools and Sessions get their own windows

    Every tool in one searchable window, every capture run kept as a session, and SSL Proxying one right-click away.

    New#

    • Tools window. Every tool, from SSL Proxying to Scripting, in one window with a searchable list.
    • Sessions window. Every start and stop of capture is kept as a session you can search, rename, reopen and delete.
    • Enable SSL Proxying for This Host and Block This Host from the traffic list and the sidebar.

    Fixed#

    • Map Remote now sends the new origin's Host header, and virtual-hosted servers and CDNs answer instead of refusing the request.
    • Blocked requests caught before any HTTP was exchanged are recorded as blocked, not as a 403 the app did not receive.
  16. Mac

    WireLens for Mac

    Capture every app on your Mac with one switch, and read it all in one window.

    New#

    • WireLens for Mac. Capture every app on your Mac that uses the system proxy, with one switch.
    • Certificate setup done for you. WireLens installs and trusts its certificate, and shows whether decryption is ready.
    • A three-part window: a sidebar of apps and domains, a real table of flows with sortable, resizable columns, and an inspector beside or below it.
    • Capture other devices by pointing a phone, tablet or another Mac at your Mac's address.
    • Full-size bodies, however large the response.
  17. Mac iPhone

    gRPC and GraphQL, read properly

    Both protocols answer 200 and report failure somewhere else. WireLens now reads where they actually put it.

    New#

    • gRPC trailers are captured and forwarded, and grpc-status is shown on the flow.
    • Streaming gRPC calls, client and bidirectional, are relayed as they arrive instead of hanging.
    • GraphQL operations are recognised, including batches, persisted queries and subscriptions, and an errors array under a 200 is flagged.
    • Schema-less Protobuf decoding for gRPC bodies.
  18. iPhone

    A new WireLens for iPhone

    Rebuilt from the ground up, with a setup that knows when the certificate is trusted and an inspector that reads real payloads.

    New#

    • Four tabs: Traffic, Tools, Rules and Settings, on a true-black design.
    • Setup that checks itself. WireLens detects when you have trusted its certificate and restarts capture so decryption starts, instead of asking you whether you did.
    • A body viewer with a collapsible JSON tree, raw text, hex, image previews and form tables.
    • Tokens and cookies decoded in the headers view, and query parameters as a table.
    • Filter chips for errors, decrypted flows, methods and status classes.
    • Edit & Resend and Import cURL in Compose.
    • Traffic overview with a status mix, top hosts and the slowest requests.
    • WebSocket messages, frame by frame.

Looking for how something works? The documentation covers every feature listed here.