Skip to content

Inspect traffic

Sidebar

Use the Cloak Proxy sidebar to show one app or domain, pin favorites, turn on SSL Proxying from a right-click, and spot apps that skip the proxy.

The sidebar on the left groups captured traffic by the app that sent it and the domain it went to. Click an app or a domain and the traffic list shows only its requests. It’s also the quickest place to turn on decryption for an app and to find apps that bypass the proxy.

Apps, apps that skip the proxy, and domains, each with a request count.

  1. Every captured request
  2. Click a section header to collapse or expand it
  3. An app connecting around the proxy. Click to capture it.
  4. Request count
  5. Filter the Apps and Domains lists
The Cloak Proxy sidebar: All Traffic with 38 requests, an Apps section listing curl, Google Chrome, MyApp, Safari and Slack, a Not Using the Proxy section with CountryDelight, and a Domains section
Section Shows Order
All Traffic Every request in the session, with the total count Always first
Pinned Apps and domains you pinned The order you pinned them. Only when something is pinned.
Apps Each app that sent requests, with its icon and count Alphabetical
Not Using the Proxy Apps that connect around the proxy, and apps you capture through DNS Only when there’s something to show
Domains Each host that received requests, with its count Alphabetical

Click a section header to collapse or expand it. Cloak Proxy remembers which sections are open.

Where Icon Meaning
Apps The app’s own icon A Mac app
Apps Terminal A command-line tool, such as curl or node
Apps iPhone A device on your network. Its name is its IP address, for example 192.168.1.20.
Apps Green open lock after the name SSL Proxying is on for every domain this app uses
Domains Globe Requests to this host are not decrypted by a host rule
Domains Green open lock SSL Proxying is on for this exact host

Helper processes are counted under the app they belong to, so requests from a browser’s helper processes appear under the browser. Requests whose app couldn’t be identified appear under All Traffic and Domains but not under Apps.

  1. Click an app or a domain in the sidebar.

    The traffic list shows only its requests, and the status bar shows N of M requests.

  2. Combine it with the filter bar to narrow further, for example to the JSON requests one app sends.

  3. Click All Traffic to see everything again, or click Reset in the filter bar.

The domain filter matches the exact host: selecting api.example.com does not include cdn.example.com.

When you select an app, a bar appears above the traffic list with the app’s icon and name.

  • If its HTTPS isn’t being decrypted, the bar says HTTPS from this app passes through encrypted. and offers Enable SSL Proxying for All Requests from app.
  • Once it is, the bar turns green, says Decrypting HTTPS from every domain this app connects to. and offers Disable SSL Proxying.

The button is unavailable until you trust the Cloak Proxy certificate (see Certificate). When you turn SSL Proxying on, Cloak Proxy closes the app’s open encrypted connections so it reconnects, and the new connections are decrypted.

Item What it does
Enable SSL Proxying for All Domains from app Decrypts everything the app sends. Replaced by Disable SSL Proxying for app once it’s on.
Capture Requests That Skip the Proxy… Opens the capture sheet for an app that ignores the macOS proxy. Shows Edit Capture… when the app is already captured. See Apps that ignore the proxy.
Pin to Top / Unpin Adds the app to the Pinned section, or removes it
Copy Name Copies the app’s name
Item What it does
Enable SSL Proxying for host Adds the host to the SSL Proxying list. Replaced by Disable SSL Proxying for host once it’s on.
Mock host Offline Turns every captured response from this host into a new Mock Set named “host (offline)”, turns Mock Sets on and opens it. Your app then gets those responses without the network.
Pin to Top / Unpin Adds the domain to the Pinned section, or removes it
Copy Host Copies the host name

Pinned items stay at the top of the sidebar, even after you clear the session, and Cloak Proxy remembers them between launches.

  1. Right-click an app or domain and choose Pin to Top.
  2. To remove it, right-click it (in Pinned or in its own section) and choose Unpin.

A pinned app with no traffic in the current session shows in gray with a placeholder icon, and a pinned domain shows no count until new requests arrive.

Type in Filter apps & domains at the bottom of the sidebar to shorten the Apps and Domains lists to names that contain your text. It doesn’t change the traffic list. When nothing matches, the sections show No matches. Click the clear button in the field to show everything again.

Some apps ignore the macOS proxy setting and connect straight to the internet, so their requests never show up. While macOS capture is on, Cloak Proxy checks every 8 seconds for Mac apps with direct connections and lists them here.

Row Meaning Click it to
Orange arrow, N direct connections The app connects around the proxy Open the capture sheet and capture it
Green check, Captured · domains Lookups for these domains go to Cloak Proxy Change the captured domains
Gray pause, Capture paused A capture exists but is off Change or turn it back on

An app is listed only after it shows up in two checks in a row, so a single stray connection doesn’t flicker in. Only apps with an app bundle are listed, so command-line tools and background services aren’t. When macOS capture is off, detection stops and the orange rows go away; apps you already capture stay listed.

The whole process, including what the capture sheet changes on your Mac and how to undo it, is in Apps that ignore the proxy.