Skip to content

Inspect traffic

Search and command palette

Press Shift-Command-A in Cloak Proxy to find and run any action, debugging tool, setting, window, API client item or captured request from the keyboard.

Search Everything is Cloak Proxy’s command palette. One search box finds any action, debugging tool, settings option, window, API client item, app, domain or captured request, and runs it when you press Return. It’s the fastest way to reach a setting you can’t remember the location of, or a request you saw a minute ago.

Use any of these:

  • Press ⇧ ⌘ A in any Cloak Proxy window.
  • Choose Tools › Search Everything….
  • Click Search in the main window’s toolbar.

The palette opens near the top of the window in front. It closes when you press Esc, press ⇧ ⌘ A again, click outside it, or run a result.

Before you type, the palette shows your recent picks and a few suggestions.

  1. Type to search
  2. Recent items and suggestions
  3. Return opens, arrows move, Esc closes
The Search Everything palette with an empty search field and a Suggestions list: MCP, API Client, Capture macOS Traffic, Breakpoint, Map Local, SSL Proxying Hosts, iPhone & iPad and Overview
  1. Open the palette and start typing, for example ssl, users or breakpoint.
  2. Use ↑ and ↓ to move through the results.
  3. Press Return, or click a result, to run it.

Every word you type must appear in a result’s name, its subtitle or its hidden keywords, in any order. Results that start with your text rank first, and the best one is shown alone as Top Hit. Then come the other results, grouped:

Group Contains Shown
Actions Things you can do now Up to 8
Debugging Tools Each tool, and turning it on or off Up to 8
Settings Every settings page and option Up to 8
Windows & Pages Windows, Insights pages and device setup pages Up to 8
API Client Sections, new requests and everything in your workspace Up to 8
Captured Traffic Apps, domains and requests from this session Up to 12

If nothing matches, the palette says Nothing matches “your text”.

With an empty search, the palette lists Recent (the last six things you ran) and Suggestions: MCP, API Client, Capture macOS Traffic, Breakpoint, Map Local, SSL Proxying Hosts, iPhone & iPad and the Insights Overview. Items you ran recently aren’t repeated in the suggestions.

The palette searches the current session as well as the app.

  • Apps and domains. Every app and domain in the sidebar is listed with its request count, such as App · 26 requests. Running one selects it in the sidebar.
  • Requests. Once you’ve typed two or more characters, the palette searches request URLs, newest first, and lists up to 25 matches. Each shows the method and URL, with the request number, status code and app underneath, such as #11 · 200 · Safari. Running one clears your filters and selects the request in the traffic list.

Searching “users” finds the requests whose URL contains it.

  1. The best match
  2. Request number, status code and app
  3. More captured requests
Search Everything with the query users: a Top Hit for POST https://grpc.example.com/api.v1.Users/Get, request 10, status 200, MyApp, and two GET requests to api.example.com/v1/users under Captured Traffic

Every settings option is indexed with the words you’re likely to use, so mitm, decrypt or intercept all find SSL Proxying Hosts, and port finds Proxy Port. Running a setting opens the Settings window on the right page.

Settings show the page they live on.

  1. A settings page
  2. An option, with its page
Search Everything with the query ssl: Top Hit SSL Proxying under Settings, then SSL Proxying Hosts under Settings › SSL Proxying and Write TLS Keys for Wireshark under Settings › Advanced

One search reaches the MCP hub, the MCP setting and MCP requests in your workspace.

Search Everything with the query mcp: Top Hit MCP in the API Client, AI Assistants (MCP) under Settings › Advanced, and New MCP Request items under API Client
Result Does
Pause Recording / Resume Recording Toggles recording
Clear Session Removes every captured request
Capture macOS Traffic / Stop Capturing macOS Traffic Turns the macOS proxy on or off
Compose Request Opens Compose
Open Session, HAR or Charles File… Opens a saved or exported session
Save Session… Saves the session as a .cloaksession file
Reset Filters Clears every filter
Export as format… Exports as Cloak Proxy Session, HAR, CSV, Postman Collection or OpenAPI (YAML)
Show Only type Filters to one content chip, such as Show Only JSON or Show Only WebSocket
Capture app (Not Using the Proxy) Opens the capture sheet for an app that skips the proxy. Only when one is detected.

These appear only when a request is selected, with its URL underneath:

Result Does
Repeat Selected Request Sends the selected requests again
Edit and Repeat Opens the request in Compose
Save Selected Request to API Client Adds it to the Captured Requests collection
Copy as format Copies the selected requests as code, in any of the 20 formats, such as Copy as Python
New tool Rule from Selection Creates a Breakpoint, Map Local, Map Remote, Scripting, Block List, Allow List, Network Conditions, DNS Spoofing or Alerts rule from the request
Mock Selected Responses Creates a Mock Set from the selected responses
Compare the Two Selected Requests Opens Compare. Only with exactly two selected.

The URL under these actions is for reference; typing part of it won’t find them.

Each debugging tool appears twice: once by name, with On · edit rules or Off · edit rules underneath, which opens its rules in the Tools window, and once as Turn On tool or Turn Off tool.

Page Options you can search for
General Proxy Port, Allow Other Devices to Connect, Capture macOS Traffic When Cloak Proxy Opens, Offer HTTP/2 to Apps, Max Captured Body Size
SSL Proxying SSL Proxying Hosts
Bypass Bypass List
Certificate Root Certificate, Copy Certificate PEM, Remove Certificate from Keychain, Regenerate Certificate, Use My Own CA, Client Certificates (Mutual TLS)
Network External Proxy, SOCKS5 Proxy, Reverse Proxies, Allowed Devices
Advanced Write TLS Keys for Wireshark, Command-Line Tool (cloakctl), AI Assistants (MCP)

The General, SSL Proxying, Certificate, Network and Advanced pages are also results on their own. See Settings for what every option does.

API Client, MCP, Debugging Tools, Breakpoint Window, each Insights page (Overview, Endpoints, Security, Secrets, Performance, Schema, Timeline, Alerts), and each Device & Runtime Setup page (This Mac, iPhone & iPad, iOS Simulator, Android, Terminal, Java, Firefox, Docker).

Each API client section (Collections, Environments, Datasets, History, Specs, Flows, Packages, Mock Servers, Monitors, Webhooks, Vault, Git), New HTTP Request and a New kind Request for every other protocol, and everything in your workspace: each collection (and Run collection for the collection runner), every saved request with its collection and folder, and each environment, spec, flow, dataset, monitor and package. Saved requests are also found by their URL.