SSL Proxying
2 hosts free
Decrypt your own API and leave banking, push and everything else alone. You choose the hosts, one at a time or by wildcard.
Every debugging tool.
One window.
Pause a request and edit it, answer it from your Mac, send it somewhere else, or make the network worse on purpose. The window below is the real one, so open any tool in its sidebar.
Every tool is in the free plan · macOS 14+ · Apple silicon
Search
Traffic
Rules
Setup
SSL Proxying
Choose which hosts and apps are decrypted.
Decryption
Enable SSL ProxyingDecrypt HTTPS for the hosts and apps listed below.
Decrypting 3 host patterns and 1 app. Everything else is tunnelled.1 unchecked
Match the client's TLS fingerprintServers see each app's own TLS and HTTP/2 fingerprint.
SSL Proxying List
Include List · 5Exclude List · 0
Add a host, *.example.com, or paste URLsAddBrowse Capture…
Acme Store
api.acme.dev
payments.acme.dev
graphql.acme.dev
cdn.acme.dev
Check a host
api.example.com, or paste a URL
Says whether a host would be decrypted right now, and which entry decides it.
System excludes
29 Apple and DoH hostsApplied on top of your exclude list.
Show HostsShowing SSL Proxying. Pick any tool in the window's sidebar, exactly as you would in the app.
Traffic
Capture Allow List
Free
Record only the hosts you are working on. Everything else is forwarded as before and stays out of the capture.
Block List
2 rules free
See what your app does when a dependency disappears. Or hide a noisy host from the capture and let its traffic through.
Network Conditions
1 profile free
Latency, jitter, loss and bandwidth, globally or for one host. The bad network becomes something you can reproduce on demand.
DNS Spoof
1 rule free
Send a hostname to an address you choose without touching /etc/hosts or this Mac's DNS.
Rules
Map Local
1 rule free
Answer any URL from a local file or an inline body. The request stops at WireLens, letting you build against an endpoint that is down or not written yet.
Map Remote
1 rule free
Point a shipping build at staging without a rebuild, or send one endpoint to your laptop while the rest keep going to production.
Rewrite
1 rule free
Add, remove or replace headers, query, method, status and body, narrowed by method, status class or content type.
Breakpoints
1 rule free
Hold a request or a response, edit it by hand, then let it go. What you send is exactly what the app receives.
Scripting
1 rule free
onRequest and onResponse JavaScript with mock(), abort(), $state, $env and $http, for the cases a rule cannot express.
Custom Preview Tabs
Free
Your own tabs in the inspector: force a format, or run a script and read whatever it returns.
Setup
Reverse Proxy
1 listener free
A local port that forwards to one origin, for clients that cannot be pointed at a proxy at all.
SOCKS Proxy
Pro
SOCKS5 clients such as curl, Go and Rust SDKs and database tools show up as ordinary flows.
Upstream Proxy
Pro
Sit behind a corporate HTTP, HTTPS, SOCKS5 or PAC proxy without giving up capture.
Client Setup
Free
Copy-paste proxy and certificate setup with your real paths filled in, and a one-line check that proves it worked.
MCP Server
Pro
Install wirelens-mcp into the agent you use, detected ones first. Switch off Allow changes and it can only read.
iOS Simulators
Free
Install the WireLens certificate into each simulator's own trust store, and see at a glance which ones are ready.
The same rule, everywhere.
Learn one pattern field and one tester, and every tool in the window behaves the same way.
One pattern language
Every rule matches on a URL pattern: wildcards by default, a regular expression when you need one. Narrow it further by method, status class, content type or header.
A tester before it goes live
Paste a URL and the tool tells you whether the rule would fire, and which condition failed if it would not. New rules are created switched off.
Folders and scope
Group rules into folders and switch a whole set on or off. Rules made from a captured flow land in the tool that owns them, already pointed at that request.
You can see what changed
The Tools column names whatever touched a request. One glance separates a mocked or rewritten response from a real one.
Rules can also be added from the command line and by an agent. see Agents.
About the tools.
Do I need Pro to use the tools?
No. Every tool is in the free plan with a small allowance: one breakpoint, one Map Local rule, two SSL Proxying hosts, and so on. Pro removes the limits.
Where do the tools live?
In their own window, beside your traffic. Tools opens with ⇧⌘T, has a searchable sidebar, and every pane has the same controls, the same pattern syntax and the same tester.
Can a rule break the app I am debugging?
A rule only fires where its pattern matches, and new rules are created switched off, with the pattern already filled in from the request you made it from. Turn a rule off and the next request goes straight to the origin.
Do rules work on HTTPS?
On any host you have chosen to decrypt in SSL Proxying. Undecrypted HTTPS is tunnelled: WireLens sees the host, the timing and the size, but not what is inside. Decrypt the host and every tool applies.
Can I script a tool instead of clicking?
Yes. The wirelens command line adds and toggles rules, and the MCP server exposes the same operations to an agent in Claude Code, Codex, Gemini CLI or Cursor.
Are the tools on iPhone too?
The iPhone app captures, decrypts and inspects on the device, and has SSL Proxying, Breakpoints, Map Local, Map Remote, Rewrite, Scripting, DNS Spoof and the Block List. The full set, with folders and the rule tester, is on the Mac.
Try the tools on your own traffic.
Every tool is free to try, with a small allowance on each. Pro lifts every limit.
Buying for a team? See team pricing or write to finance@wirelens.app.