HTTP/HTTPS Interception
Capture and inspect all HTTP/HTTPS traffic in real time with automatic on-the-fly TLS certificate generation.
Madhyamas is a high-performance, cross-platform HTTP/HTTPS debugging proxy with a modern web UI. The free, open-source alternative to Charles Proxy and Fiddler.
A complete debugging toolkit that captures, inspects, and manipulates HTTP, HTTPS, WebSocket, and gRPC traffic in real time.
Capture and inspect all HTTP/HTTPS traffic in real time with automatic on-the-fly TLS certificate generation.
A React-based interface with real-time WebSocket streaming — no polling, no refresh, just live traffic.
Filter by URL, method, status, host, content type, duration, headers, and cookies to find anything fast.
Full HTTP/2 support for upstream connections with ALPN negotiation out of the box.
Re-execute captured requests with modifications. Save and replay without retyping a thing.
Save, load, and share debugging sessions. Export to HAR, import previous captures, switch contexts instantly.
Syntax-highlighted JSON, image previews, decompression, and powerful query languages built in.
Prism.js-powered highlighting with collapsible Tree and Code views, plus prettify / minify toggle.
Filter and extract JSON data with expressions like $.store.book[*].title.
Automatic rendering for PNG, JPEG, GIF, WebP, SVG, ICO, BMP, AVIF, and TIFF responses with download.
Toggle gzip / deflate / brotli decompression on demand. Automatic base64 decoding of binary bodies.
Export any request as a ready-to-paste command-line command in your favorite tool.
Pause, mock, rewrite, throttle, and replay traffic to reproduce any scenario.
Pause requests or responses for inspection and modification before forwarding.
Serve custom responses instead of hitting real servers. Collections, recording, import & export.
Automatically modify traffic based on rules — redirect, replace, inject headers.
Simulate slow networks with 3G, 4G, and DSL presets to test under real conditions.
Failed TLS handshakes (e.g. apps with certificate pinning) are recorded as 502 entries with a clear explanation of the cause — so nothing disappears silently.
WebSocket capture, gRPC debugging, scripting, a plugin system to extend Madhyamas your way — plus enterprise-grade features for teams.
Inspect WebSocket messages in real time alongside your HTTP traffic.
Debug gRPC / Protocol Buffer traffic with frame parsing and stream inspection.
Automate traffic manipulation with JavaScript and TypeScript scripts.
Extend functionality with custom Rust plugins. Enable, disable, and reload at runtime.
Authentication, RBAC, audit logging, SSO, and multi-instance deployment for team and production environments.
A no-root Android app uses VpnService to transparently route device traffic to the proxy.
Madhyamas ships with a built-in MCP (Model Context Protocol) server. Let AI agents like Claude inspect traffic, create mocks, replay requests, and export sessions — directly from your conversation.
--json for machine-readable outputOpen source, free, cross-platform, Rust-powered, and built for the modern web.
| Feature | Madhyamas | Charles | mitmproxy | Fiddler | Proxyman |
|---|---|---|---|---|---|
| Open Source | Yes | No | Yes | No | No |
| Free | Yes | $50 | Yes | Yes | Freemium |
| Cross-platform | Yes | Yes | Yes | Windows | macOS |
| Web UI | Yes | No | Limited | No | No |
| Native, memory-safe core | Yes (Rust) | No (Java) | No (Python) | No (.NET) | No (Swift) |
| gRPC | Exp. | No | Yes | No | No |
| WebSocket | Yes | Limited | Yes | Yes | Yes |
| Scripting | JS/TS | No | Python | No | No |
| JSON Query | JSONPath + JMESPath | No | No | No | No |
| MCP / AI Agent | Yes | No | No | No | No |
| Auth & RBAC | Enterprise | No | No | No | No |
| Audit Logging | Enterprise | No | No | No | No |
| Multi-Instance | Enterprise | No | No | No | No |
| PostgreSQL Storage | Enterprise | No | No | No | No |
Comparison based on publicly documented capabilities as of August 2026. “Fiddler” refers to the classic Windows release; Fiddler Everywhere is a separate cross-platform product. “Enterprise” features require the enterprise tier; experimental (“Exp.”) features may have limitations.
A single unified binary includes the proxy, web UI, MCP server, and CLI. No runtime dependencies.
# Clone & build git clone https://github.com/ShristiLabs/madhyamas.git cd madhyamas cargo build --release # Run the proxy + web UI ./target/release/madhyamas
Download the latest release for your platform from the Releases page. Available for:
madhyamas # proxy + web UI madhyamas serve # same as above madhyamas mcp # MCP server (stdio) madhyamas traffic list # CLI command madhyamas --help # all commands
madhyamas — proxy on :8888, web UI on :3001localhost:8888~/.madhyamas/certs/madhyamas-ca.pem for HTTPShttp://localhost:3001 and start debuggingStep-by-step guides for every feature, from basic setup to advanced traffic manipulation.
Installation, first launch, connecting your first client, and basic configuration.
Viewing, filtering, searching, and exporting captured HTTP/HTTPS traffic.
Installing the Madhyamas CA certificate on macOS, Windows, Linux, iOS, and Android.
Pause requests or responses, inspect them, and modify before forwarding.
Create fake API responses, record from real traffic, and organize into collections.
Connect iPhones, iPads, and Android devices over Wi-Fi to debug mobile app traffic.
Connect Claude, Cursor, Windsurf, and Devin to inspect traffic and drive the proxy via MCP.
159 subcommands for traffic, mocks, replay, sessions, scripts, plugins, and more — with JSON output.
Fixes for certificate errors, port conflicts, database locks, mobile connections, and MCP issues.
Free, open source, and built to last. Star the repo and join the community.