Skip to content
Mittelware
v0.1.28Mittelware for Windows & macOS

See every request. Change any response.

Mittelware is a desktop network interceptor. Watch the HTTP and HTTPS traffic of any app on your machine, then block, redirect, modify, mock or pause it with simple rules. No code changes, no proxy fiddling.

  • Captures traffic from
  • Browsers
  • Desktop apps
  • Scripts & SDKs
  • Command-line tools
  • Anything using the system proxy

Features

Everything between your app and the internet

Mittelware sits in the middle of the conversation, so you can finally see it, and rewrite it, without touching the app or the server.

  • Every request, live

    A real-time flow list with method, status, timing and size. Search it, filter it, and open any request to read headers, payload and a formatted JSON, XML or HTML response.

    See it in action
  • Knows which app sent it

    Each request is tagged with the application behind it, icon included. Filter the list by app, scope a rule to a single one, or relaunch Chrome, VS Code, Postman and more through the proxy from the Applications page.

    See it in action
  • Phones and other devices

    Send a phone's, a tablet's or another computer's traffic through Mittelware over your Wi-Fi. Scan a code, install the certificate, set the proxy, and watch its requests in Flows.

    See it in action
  • Rules instead of code changes

    Match on URL, method, headers, query parameters, body, status code or response headers, using contains, is, starts with, regex, is one of and more.

    See it in action
  • Start from a template

    Choose From template when you create a rule and pick one of 35 ready-made starting points in four sections: API testing, Streaming, WebSocket and Services. Fill in the orange blanks and save.

    See it in action
  • Collections

    Group rules into collections, switch a whole group off and on with one click, move rules between them, and let the newest collection take priority.

    See it in action
  • Fail on purpose

    Block a request or a response with a 401, 403, 404, 410, 429 or 502, or hold the connection open until the client times out. Add a delay to simulate slow networks.

    See it in action
  • Rewrite and mock

    Change the URL, method, headers, query or body on the way out, and the status, headers or body on the way back. Send form data, URL-encoded, raw or file payloads.

    See it in action
  • Mock servers

    Run a fake API on a port of its own, with HTTP and WebSocket routes, cases and streamed replies, or import an OpenAPI spec. Point your app at it while the real backend is missing, down or slow.

    See it in action
  • Pause, edit, forward

    Hold matching requests before they leave your machine. Tweak anything in the inspector, then forward the request or drop it.

    See it in action
  • Template variables

    Reuse parts of the traffic inside a rule: {{request.path}}, {{request.headers.Authorization}}, {{response.status}} and more, with autocomplete as you type.

    See it in action
  • Variables that remember

    Keep a token or a tenant name once and use it in any rule as {{vars.token}}. A rule can even capture a session ID from a login response for the next request to use.

    See it in action

Rules

Rules that read like sentences

Pick the app, describe the request with When…, say what should happen with Then…. Rules apply to the very next request, with no restart.

Make requests fail on purpose

Stop a request before it reaches the server, or stop the response before it reaches your app. Answer with 401, 403, 404, 410, 429 or 502, or leave the connection hanging until the client gives up.

  • Test your error and retry handling without touching a backend
  • See how the UI behaves when a third-party API is down
  • Silence trackers and noisy endpoints while you debug
Hang the payments APIEnabled
Applies to Chrome

When…

  • URLstarts withhttps://api.acme.dev/v1/payments

Then…

Block Request
Respond with
Timeout (no response)
Delay
3,000 ms

How it works

From download to first rule in minutes

  1. 01

    Install and switch it on

    Download Mittelware and flip the switch next to its name. It shows Monitoring, and can point your system proxy at itself while it runs (an opt-in setting), restoring your previous settings when you stop or quit.

  2. 02

    Trust the certificate (for HTTPS)

    To read encrypted traffic, Mittelware creates its own certificate and asks to trust it on this device only. You can skip this and watch plain HTTP instead.

  3. 03

    Watch, then write a rule

    Requests appear instantly, tagged by app. Spot the one you care about, create a rule, and it applies to the next matching request.

Local-first

You're inspecting sensitive traffic. It stays yours.

Tokens, cookies and customer data pass through a tool like this, so Mittelware is built to keep all of it on your computer.

  • Stays on your machine

    Rules and settings live in a local database. Captured traffic is shown on your screen and never uploaded.

  • No account, opt-in analytics

    There is nothing to sign up for. The app asks once before sending anonymous usage counts, never anything about your traffic, and you can switch it off any time in Settings. Its only other network call is checking for updates.

  • Scoped trust

    The certificate is trusted for your user account on this device, not network-wide, and updates are cryptographically signed.

Read the privacy policy

From the blog

Tricks for taming your traffic

Short, practical guides: simulate a failing API, redirect production to localhost, mock an endpoint that doesn’t exist yet.

FAQ

Questions, answered

Find out what your apps are really sending.

Install Mittelware, flip one switch, and watch the traffic roll in.