{
  "added_at": "2026-11-03",
  "additional_evidence_urls": [
    "https://github.com/httptoolkit/httptoolkit/blob/bb579a8ceadfe86b98160843c0447a5b9eec554f/README.md#L28-L40",
    "https://github.com/httptoolkit/httptoolkit/blob/bb579a8ceadfe86b98160843c0447a5b9eec554f/README.md#L64-L79",
    "https://github.com/httptoolkit/httptoolkit/tree/bb579a8ceadfe86b98160843c0447a5b9eec554f",
    "https://github.com/httptoolkit/httptoolkit-server/blob/3973d10b7ae8d67632dd6105ee9c70c867baf0ac/README.md",
    "https://github.com/httptoolkit/httptoolkit-server/blob/3973d10b7ae8d67632dd6105ee9c70c867baf0ac/src/interceptors/index.ts",
    "https://github.com/httptoolkit/httptoolkit-desktop/blob/71c10c78abe09bdb025063b28025f5c65bc6812c/README.md",
    "https://github.com/httptoolkit/httptoolkit-android/blob/53d7e356b1872d9ad20716113fc01b9388bdf4c3/README.md",
    "https://github.com/httptoolkit/httptoolkit-desktop/releases/tag/v1.27.3",
    "https://httptoolkit.com/get-pro/"
  ],
  "category": "web-analysis",
  "description_en": "Open-source HTTP(S) debugging proxy for Windows, Linux and macOS that sets up interception for browsers, terminals, backend runtimes, Electron apps and Android devices, then shows the full headers and body of every request and response with body decoding, inline header documentation and filtering. Its transparent proxy handles plain HTTP, HTTPS, HTTP/2 and WebSockets on one port; breakpoints rewrite live requests or responses, and a built-in client sends custom requests. This repository is the project's umbrella README and issue tracker, while the UI, server, Mockttp proxy library, Android app and desktop shell live in sibling repositories.",
  "description_zh": "面向 Windows、Linux 和 macOS 的开源 HTTP(S) 调试代理，可为浏览器、终端、后端运行时、Electron 应用和 Android 设备配置拦截，并完整展示每个请求与响应的头部和正文，提供正文解码、标准头部内联说明和过滤功能。其透明代理在同一端口处理明文 HTTP、HTTPS、HTTP/2 和 WebSocket；断点可改写实时请求或响应，内置客户端可发送自定义请求。本仓库是项目的总说明与问题追踪仓库，界面、服务端、Mockttp 代理库、Android 应用和桌面外壳位于同一组织的其他仓库。",
  "entry_url": "https://awesomerea.org/resources/http-toolkit/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/http-toolkit/",
  "evidence_url": "https://github.com/httptoolkit/httptoolkit/blob/bb579a8ceadfe86b98160843c0447a5b9eec554f/README.md",
  "group": "tools",
  "id": "http-toolkit",
  "json_url": "https://awesomerea.org/resources/http-toolkit/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/http-toolkit/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/http-toolkit/index.md",
  "name": "HTTP Toolkit",
  "name_zh": "HTTP Toolkit HTTP(S) 调试代理",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "At the reviewed commit this umbrella repository holds only the README, a security policy and a demo animation, and serves as the project's issue tracker. The product is built from sibling repositories: httptoolkit-ui (TypeScript and React), httptoolkit-server (Node.js, whose interceptor list covers Chromium-based browsers, Firefox, terminals, Electron, Android over ADB, Frida on Android and iOS, JVM processes and Docker containers), the Mockttp proxy library, the Android app and the Electron desktop shell.",
    "Latest desktop release at review: v1.27.3, published 2026-10-20, with a Windows installer and zip, macOS x64 and arm64 DMGs and Linux x64 and arm64 AppImage, deb, rpm and zip builds. The desktop shell bundles the server and opens the UI in Electron; the server can also run standalone as a CLI with the hosted web UI opened in a browser, and both update themselves separately from the desktop executable.",
    "HTTPS inspection needs the client to trust HTTP Toolkit's CA certificate: interceptors launch preconfigured browsers, terminals and apps, and the server's certificate check downloads or installs the certificate where it is not yet trusted. The Android app trusts the certificate and forwards device traffic through a local VPN; its README says a rooted device is not required but widens the real app traffic that can be tested. Inspect only traffic from your own clients and devices or ones you are authorized to test.",
    "The pricing page lists interception of all supported clients, raw inspection, filtering, manual rewriting and manual requests in the free Hobbyist tier, while mock rules and automatic transforms, edit-and-resend, rule and traffic import/export (including HAR), API validation and advanced proxy settings such as TLS passthrough and upstream proxies need a paid Pro account. The README describes the HTTP Toolkit-specific components as AGPL-3.0 and the reusable libraries as Apache-2.0 or MIT; this repository has no license file, and the desktop README offers its binaries under AGPL-3.0 or CC BY-ND 4.0."
  ],
  "requirements_zh": [
    "在所审阅的提交中，这个总仓库只有 README、安全策略和一段演示动画，用作项目的问题追踪仓库。产品由同组织的其他仓库构建：httptoolkit-ui（TypeScript 与 React）、httptoolkit-server（Node.js，其拦截器列表涵盖 Chromium 系浏览器、Firefox、终端、Electron、通过 ADB 连接的 Android、Android 和 iOS 上的 Frida、JVM 进程及 Docker 容器）、Mockttp 代理库、Android 应用和 Electron 桌面外壳。",
    "审阅时桌面版最新版本为 v1.27.3，发布于 2026-10-20，提供 Windows 安装程序和 zip 包、macOS x64 与 arm64 DMG，以及 Linux x64 与 arm64 的 AppImage、deb、rpm 和 zip 构建。桌面外壳内置服务端，并在 Electron 窗口中打开界面；服务端也可作为命令行工具单独运行，再在浏览器中打开托管的 Web 界面，两者都独立于桌面可执行文件自行更新。",
    "检查 HTTPS 需要客户端信任 HTTP Toolkit 的 CA 证书：拦截器会启动预先配置好的浏览器、终端和应用，服务端的证书检查会在证书尚未受信任时下载或安装证书。Android 应用负责信任该证书，并通过本地 VPN 转发设备流量；其 README 称无需 root 设备，但 root 后可测试的真实应用流量更多。只应检查自己的客户端和设备，或已获授权测试对象的流量。",
    "定价页面列出，免费的 Hobbyist 版即可拦截所有支持的客户端、检查原始数据、过滤、手动改写和手动发送请求；模拟规则与自动转换、编辑后重发、规则和流量的导入导出（含 HAR）、API 校验，以及 TLS 直通、上游代理等高级代理设置则需要付费 Pro 账户。README 称 HTTP Toolkit 专用组件采用 AGPL-3.0，可复用库采用 Apache-2.0 或 MIT；本仓库没有许可证文件，桌面版 README 允许按 AGPL-3.0 或 CC BY-ND 4.0 使用其二进制文件。"
  ],
  "targets": [
    "app",
    "protocol",
    "website"
  ],
  "url": "https://github.com/httptoolkit/httptoolkit",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}