Changelog

What's new.

WireLens is built in the open with its users. Here is everything that shipped, newest first.

RSS
  1. Mac iPhone

    Team Workspace, Pro licenses and the 14-day trial

    Share captures with your team as links, buy and manage licenses at pay.wirelens.app, and try every Pro tool free for two weeks on the Mac.

    New#

    • Team Workspace. Share a flow, a selection, a session or the current view to workspace.wirelens.app from WireLens for Mac. Choose private, workspace, selected people or public; credentials are redacted on your Mac before upload; logs can be end-to-end encrypted with the key kept in the link; and they can delete themselves after 1, 7, 30 or 90 days.
    • A browser viewer for shared logs, with a filterable list, headers, bodies, cookies, timing and Copy as cURL, which decrypts end-to-end encrypted logs in the browser.
    • Open in WireLens downloads a shared log and imports it as its own session.
    • Roles, invitations, seats and an activity log for workspace admins, with Admin, Developer and Viewer roles.
    • Licenses from pay.wirelens.app. Pro for one Mac, Team keys bought per person, and Team Cloud with Team Workspace. Activation links, restore by email, and License Manager for keys and devices.
    • A 14-day Pro trial on the Mac, with no card and no account.

    Improved#

    • The free plan's limits are enforced the same way everywhere: both apps, the command line, the MCP server and the capture engine.
    • When a trial ends, WireLens lists exactly which rules went back to the free limits. They are switched off, not deleted.
    • Pro keeps working offline, and setting the clock back no longer extends a trial.

    Fixed#

    • On iPhone, Decrypt All could be removed at launch before the App Store confirmed a purchase. WireLens now waits for the confirmed answer.
  2. Mac

    A search box with fields, and an inspector that shows more

    Search by any field with operators and negation, and read cookies, credentials, trailers and HTTP/2 messages the way they went over the wire.

    New#

    • Field search. host:, status:>=400, duration:>500ms, respheader:Set-Cookie, json:$.errors, jq: and more, with equals, starts-with, ends-with, wildcards, regular expressions, numeric comparisons and ranges, and ! to negate. The ? beside the search box lists every field and types it for you.
    • Cookies, Auth and Trailers tabs in the inspector, shown only when a side has something in them.
    • HTTP/2 Raw view that shows pseudo-headers in frame order instead of reconstructing an HTTP/1 message that never existed.
    • Offered TLS cipher suites from the client's handshake, on every decrypted connection.
    • Markdown preview, an XML tree, PDF preview, Base64 image preview and image metadata in the body viewer, plus a code minimap for long bodies.

    Improved#

    • A plain search, with no fields in it, works exactly as before and stays just as fast.
    • Negated filters and positive filters now split the capture cleanly, so no row disappears from both.
  3. Mac

    Sharper tools

    Map Remote by component, full HTTP response files for Map Local, GraphQL operations on every rule, and a record of which rules touched a flow.

    New#

    • Map Remote by component. Change only the host, port, path or query and keep the rest, and choose Preserve Host when an origin needs the original Host header.
    • HTTP message files for Map Local. Serve a complete response, status line and headers included, from a file, with its body read from another file if you like.
    • GraphQL operation scope on Map Local, Map Remote and Breakpoints, alongside Rewrite, Scripting and Network Conditions.
    • Which rules fired. A flow's Summary now lists the debugging tools that changed it, recorded when they ran.
    • Five more Network Conditions presets: Offline, Very Bad Network, Slow Network, Medium Network and Wi-Fi 802.11ac.
    • Access control for remote devices, including an allow-list-only mode.
    • Code font settings for body viewers and editors, and a dedicated colour theme for diffs.

    Improved#

    • The breakpoint URL field accepts a pasted curl command.
    • Query and form fields in a paused request can be edited as a table.
  4. Mac iPhone

    Compose, copy and rule testing

    Presets and custom methods in Compose, more ways to copy a request, a tester in every rule editor, and new script functions.

    New#

    • Compose presets, custom methods and paste-a-cURL straight into the URL field, and a request timeout you can switch off.
    • Copy as Markdown or CSV, and generated code that includes the proxy setting when you ask for it.
    • Test your rule in every tool's editor, not only in Custom Preview Tabs.
    • Script functions abort(), comment(), readFile() and writeToFile(), sandboxed to a folder of their own.
    • Command line: rules get, rules enable and rules disable, and settings exports of enabled rules only.
    • MCP: export_curl, generate_code and clearing the capture.
    • Client Setup recipes for Postman, Insomnia and Paw.

    Improved#

    • Query and form tables can be copied, with spreadsheet-formula characters escaped.
    • Search can be case-sensitive.
    • Map Local warns when a mapped file is missing and remembers the folder you last used.
    • When the listen port is taken, WireLens offers the next free port instead of an error.
    • The root certificate can be exported as DER as well as PEM.
  5. Mac iPhone

    Failures that tell the truth

    Truncated responses, refused connections and large bodies are now recorded as exactly what they are.

    Fixed#

    • A response cut off part way through its body is detected and marked as truncated, instead of being recorded as a clean 200.
    • A refused connection fails immediately and is named as refused, instead of waiting out a timeout.
    • Large bodies are compressed for storage as they stream, instead of being loaded whole first.
    • Recorded URLs keep a non-default port, so a request to :8443 shows :8443.
  6. Mac iPhone

    Scripting, proxies and certificates

    JavaScript on every request and response, reverse and SOCKS proxies, upstream proxy chaining, mutual TLS and your own root.

    New#

    • Scripting on Mac and iPhone: onRequest and onResponse hooks with mock(), $state, $env and asynchronous $http, in an editor with snippets on both platforms.
    • Reverse Proxy. A local port that forwards to one origin, for clients that cannot use a proxy, captured as ordinary flows with every rule applied.
    • SOCKS5 listener for SOCKS clients such as curl --socks5-hostname.
    • Upstream proxy chaining through an HTTP or HTTPS proxy with Basic or Digest authentication, a SOCKS5 proxy, or a PAC file.
    • Client certificates for mutual TLS, and server certificate overrides for apps that expect one specific certificate.
    • Your own root, imported from PKCS#12 with its key kept in the Keychain.
    • Custom Preview Tabs: add your own inspector tabs, with a forced format or an onPreview script.

    Improved#

    • Certificate pinning is measured instead of guessed: a host that refuses the WireLens certificate twice is passed through for the rest of the session and keeps working.
  7. Mac iPhone

    Protocols, previews and a better workflow

    gRPC end to end over HTTP/2, a Server-Sent Events viewer, Protobuf with your schemas, JSONPath and jq, diff, session packages and much more.

    New#

    • gRPC end to end over HTTP/2, and honest reporting when an upstream server downgrades a connection to HTTP/1.1.
    • GraphQL operation names in the traffic list, and rules that match by operation.
    • Server-Sent Events viewer, including streamed AI responses, event by event.
    • Protobuf with your descriptors, for named fields in gRPC and Protobuf bodies.
    • JSONPath and jq queries over JSON bodies.
    • Saved filters, custom header columns, flow annotations, Quick Preview and bulk edit.
    • Diff two flows, side by side or unified.
    • .wirelens session packages that carry a whole capture, plus Charles session and settings import, OpenAPI export and code generation for more than a dozen languages.
    • Historical sessions on iPhone.
    • iOS Simulator setup that installs and verifies the root in each simulator.
    • Client Setup recipes for PHP, .NET and Rust.
    • Opt-in TLS key logging, so tools such as Wireshark can read the connections WireLens decrypts.

    Improved#

    • Secrets inside rule bodies are redacted from settings exports, not just secrets in headers.
    • WebSocket capture handles more real-world servers and frame sequences.
  8. Mac iPhone

    Regular expressions for every rule

    One pattern engine behind every tool, with wildcards and full regular expressions, and a tester to check a pattern before it goes live.

    New#

    • Regular-expression URL patterns in every tool that matches traffic, next to the existing wildcards.
    • A pattern tester that checks a rule against a URL before you save it.
    • A dedicated pattern field on the Mac that flags an invalid expression while you type it.
  9. Mac

    A command line tool and an MCP server

    wirelens and wirelens-mcp ship inside the Mac app, so your terminal and your AI agent can read captures and write rules.

    New#

    • wirelens, a command line tool with a live interactive session, slash commands and body search, plus one-shot commands to list, show, search and export flows, manage rules and read settings.
    • wirelens-mcp, a Model Context Protocol server for AI agents. It is read-only by default; tools that change rules or capture appear only when started with --allow-mutations.
    • Both read the capture through a guarded path that never rewrites or migrates it while the app is recording.
  10. Mac

    Tools and Sessions get their own windows

    Every tool in one searchable window, every capture run kept as a session, and SSL Proxying one right-click away.

    New#

    • Tools window. Every tool, from SSL Proxying to Scripting, in one window with a searchable list.
    • Sessions window. Every start and stop of capture is kept as a session you can search, rename, reopen and delete.
    • Enable SSL Proxying for This Host and Block This Host from the traffic list and the sidebar.

    Fixed#

    • Map Remote now sends the new origin's Host header, so virtual-hosted servers and CDNs answer instead of refusing the request.
    • Blocked requests caught before any HTTP was exchanged are recorded as blocked, not as a 403 the app never received.
  11. Mac

    WireLens for Mac

    A native Mac app, built on the same capture engine as the iPhone app, with no VPN and no system extension.

    New#

    • WireLens for Mac. A proxy that runs inside the app and captures the whole Mac through the system proxy, with no network extension and no VPN.
    • Certificate trust in the keychain, installed for you, with its status measured rather than assumed.
    • A three-part window: a sidebar of apps and domains, a real table of flows with sortable, resizable columns, and an inspector beside or below it.
    • Capture other devices by pointing a phone, tablet or another Mac at your Mac's address.
    • Full-size bodies, since the Mac has none of the memory limits of an iOS network extension.
  12. Mac iPhone

    gRPC and GraphQL, read properly

    Both protocols answer 200 and report failure somewhere else. WireLens now reads where they actually put it.

    New#

    • gRPC trailers are captured and forwarded, and grpc-status is shown on the flow.
    • Streaming gRPC calls, client and bidirectional, are relayed as they arrive instead of hanging.
    • GraphQL operations are recognised, including batches, persisted queries and subscriptions, and an errors array under a 200 is flagged.
    • Schema-less Protobuf decoding for gRPC bodies.
  13. iPhone

    A new WireLens for iPhone

    Rebuilt from the ground up, with a setup that knows when the certificate is trusted and an inspector that reads real payloads.

    New#

    • Four tabs: Traffic, Tools, Rules and Settings, on a true-black design.
    • Setup that checks itself. WireLens detects when you have trusted its certificate and restarts capture so decryption starts, instead of asking you whether you did.
    • A body viewer with a collapsible JSON tree, raw text, hex, image previews and form tables.
    • Tokens and cookies decoded in the headers view, and query parameters as a table.
    • Filter chips for errors, decrypted flows, methods and status classes.
    • Edit & Resend and Import cURL in Compose.
    • Traffic overview with a status mix, top hosts and the slowest requests.
    • WebSocket messages, frame by frame.

Looking for how something works? The documentation covers every feature listed here.