Inspect traffic
Sidebar
Use the Cloak Proxy sidebar to show one app or domain, pin favorites, turn on SSL Proxying from a right-click, and spot apps that skip the proxy.
The sidebar on the left groups captured traffic by the app that sent it and the domain it went to. Click an app or a domain and the traffic list shows only its requests. It’s also the quickest place to turn on decryption for an app and to find apps that bypass the proxy.
Apps, apps that skip the proxy, and domains, each with a request count.
- Every captured request
- Click a section header to collapse or expand it
- An app connecting around the proxy. Click to capture it.
- Request count
- Filter the Apps and Domains lists
Sections
Section titled “Sections”| Section | Shows | Order |
|---|---|---|
| All Traffic | Every request in the session, with the total count | Always first |
| Pinned | Apps and domains you pinned | The order you pinned them. Only when something is pinned. |
| Apps | Each app that sent requests, with its icon and count | Alphabetical |
| Not Using the Proxy | Apps that connect around the proxy, and apps you capture through DNS | Only when there’s something to show |
| Domains | Each host that received requests, with its count | Alphabetical |
Click a section header to collapse or expand it. Cloak Proxy remembers which sections are open.
What the icons mean
Section titled “What the icons mean”| Where | Icon | Meaning |
|---|---|---|
| Apps | The app’s own icon | A Mac app |
| Apps | Terminal | A command-line tool, such as curl or node |
| Apps | iPhone | A device on your network. Its name is its IP address, for example 192.168.1.20. |
| Apps | Green open lock after the name | SSL Proxying is on for every domain this app uses |
| Domains | Globe | Requests to this host are not decrypted by a host rule |
| Domains | Green open lock | SSL Proxying is on for this exact host |
Helper processes are counted under the app they belong to, so requests from a browser’s helper processes appear under the browser. Requests whose app couldn’t be identified appear under All Traffic and Domains but not under Apps.
Show one app or domain
Section titled “Show one app or domain”-
Click an app or a domain in the sidebar.
The traffic list shows only its requests, and the status bar shows N of M requests.
-
Combine it with the filter bar to narrow further, for example to the JSON requests one app sends.
-
Click All Traffic to see everything again, or click Reset in the filter bar.
The domain filter matches the exact host: selecting api.example.com does not include cdn.example.com.
Decrypt everything an app sends
Section titled “Decrypt everything an app sends”When you select an app, a bar appears above the traffic list with the app’s icon and name.
- If its HTTPS isn’t being decrypted, the bar says HTTPS from this app passes through encrypted. and offers Enable SSL Proxying for All Requests from app.
- Once it is, the bar turns green, says Decrypting HTTPS from every domain this app connects to. and offers Disable SSL Proxying.
The button is unavailable until you trust the Cloak Proxy certificate (see Certificate). When you turn SSL Proxying on, Cloak Proxy closes the app’s open encrypted connections so it reconnects, and the new connections are decrypted.
Right-click an app
Section titled “Right-click an app”| Item | What it does |
|---|---|
| Enable SSL Proxying for All Domains from app | Decrypts everything the app sends. Replaced by Disable SSL Proxying for app once it’s on. |
| Capture Requests That Skip the Proxy… | Opens the capture sheet for an app that ignores the macOS proxy. Shows Edit Capture… when the app is already captured. See Apps that ignore the proxy. |
| Pin to Top / Unpin | Adds the app to the Pinned section, or removes it |
| Copy Name | Copies the app’s name |
Right-click a domain
Section titled “Right-click a domain”| Item | What it does |
|---|---|
| Enable SSL Proxying for host | Adds the host to the SSL Proxying list. Replaced by Disable SSL Proxying for host once it’s on. |
| Mock host Offline | Turns every captured response from this host into a new Mock Set named “host (offline)”, turns Mock Sets on and opens it. Your app then gets those responses without the network. |
| Pin to Top / Unpin | Adds the domain to the Pinned section, or removes it |
| Copy Host | Copies the host name |
Pin apps and domains
Section titled “Pin apps and domains”Pinned items stay at the top of the sidebar, even after you clear the session, and Cloak Proxy remembers them between launches.
- Right-click an app or domain and choose Pin to Top.
- To remove it, right-click it (in Pinned or in its own section) and choose Unpin.
A pinned app with no traffic in the current session shows in gray with a placeholder icon, and a pinned domain shows no count until new requests arrive.
Filter the sidebar
Section titled “Filter the sidebar”Type in Filter apps & domains at the bottom of the sidebar to shorten the Apps and Domains lists to names that contain your text. It doesn’t change the traffic list. When nothing matches, the sections show No matches. Click the clear button in the field to show everything again.
Not Using the Proxy
Section titled “Not Using the Proxy”Some apps ignore the macOS proxy setting and connect straight to the internet, so their requests never show up. While macOS capture is on, Cloak Proxy checks every 8 seconds for Mac apps with direct connections and lists them here.
| Row | Meaning | Click it to |
|---|---|---|
| Orange arrow, N direct connections | The app connects around the proxy | Open the capture sheet and capture it |
| Green check, Captured · domains | Lookups for these domains go to Cloak Proxy | Change the captured domains |
| Gray pause, Capture paused | A capture exists but is off | Change or turn it back on |
An app is listed only after it shows up in two checks in a row, so a single stray connection doesn’t flicker in. Only apps with an app bundle are listed, so command-line tools and background services aren’t. When macOS capture is off, detection stops and the orange rows go away; apps you already capture stay listed.
The whole process, including what the capture sheet changes on your Mac and how to undo it, is in Apps that ignore the proxy.