{"slug": "http-toolkit", "name": "HTTP Toolkit", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 4, "commenters": 4, "warners": 0, "score": 3.474, "rising": 0.02, "first": "2025-12-19", "latest": "2026-10-07", "why": "I like that it launches a independent Firefox window on its own for the intercepting", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 2, 0, 1, 0, 0, 0, 0, 0, 0, 0, 1], "listed": true, "loved": [], "caveat": "", "short_quote": "I like that it launches a independent Firefox window on its own for the intercepting", "kind": "", "icon": true, "domain": "httptoolkit.com", "github_repo": null, "official_url": "https://httptoolkit.com", "pricing": "", "aliases": ["HTTP Toolkit"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 799839536, "item_id": 49989971, "url": "https://news.ycombinator.com/item?id=49989971", "by": "pimterry", "date": "2026-10-07", "stance": "recommend", "quote": "it's a one-liner to host it yourself with Docker", "excerpt": "Currently no rate limiting, I might if I have issues in future, but right now it's vastly overpowered for the traffic and extremely cheap to run. If you want to hit it hard, or you just want to avoid any risk of limits in future, it's a one-liner to host it yourself with Docker: `docker run --rm -it -p 3000:3000 httptoolkit/testserver`, then open http://example.localhost:3000/. Advanced config options for CAs etc are", "context": "", "use_case": "local test server", "switched_from": "", "story": "Example.com just launched the biggest redesign in decades"}, {"id": 753021136, "item_id": 47063821, "url": "https://news.ycombinator.com/item?id=47063821", "by": "madeforhnyo", "date": "2026-02-18", "stance": "recommend", "quote": "That how HTTPToolkit [0] works, it only requires adb", "excerpt": "I can add certificates on my unrooted android. That how HTTPToolkit [0] works, it only requires adb, which (thankfully) doesn't trip banking apps. Banking apps can (and do iirc) pin certificates, so a rooted phone adds no risk whatsoever. Also in my experience a rooted phone experience is by far more secure than the OEM androids. Security is supposed to assess risk objectively, yet \"running on a Xiaomi phone with 3rd", "context": "", "use_case": "HTTPS traffic interception", "switched_from": "", "story": "GrapheneOS \u2013 Break Free from Google and Apple"}, {"id": 741387360, "item_id": 46336710, "url": "https://news.ycombinator.com/item?id=46336710", "by": "akaitea", "date": "2025-12-20", "stance": "recommend", "quote": "I like that it launches a independent Firefox window on its own for the intercepting", "excerpt": "For my rather simple needs I've been using https://httptoolkit.com free edition, I like that it launches a independent Firefox window on its own for the intercepting so I don't have to touch my working browser or deal with configuring a proxy anywhere", "context": "", "use_case": "HTTP traffic interception", "switched_from": "", "story": "Charles Proxy"}, {"id": 741347408, "item_id": 46334213, "url": "https://news.ycombinator.com/item?id=46334213", "by": "self_awareness", "date": "2025-12-19", "stance": "recommend", "quote": "This one is truly a gem", "excerpt": "This one is truly a gem: https://httptoolkit.com It even bypasses SSL pinning on Android using 1 click.", "context": "", "use_case": "HTTP traffic inspection on Android", "switched_from": "", "story": "Charles Proxy"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["local test server", "https traffic interception", "http traffic interception", "http traffic inspection on android"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=46333983", "title": "Charles Proxy", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49971921", "title": "Example.com just launched the biggest redesign in decades", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47045612", "title": "GrapheneOS \u2013 Break Free from Google and Apple", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 2}, "2026-01": {}, "2026-02": {"recommend": 1}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {"recommend": 1}}, "quotes": [{"id": 799839536, "item_id": 49989971, "url": "https://news.ycombinator.com/item?id=49989971", "by": "pimterry", "date": "2026-10-07", "stance": "recommend", "quote": "it's a one-liner to host it yourself with Docker", "excerpt": "Currently no rate limiting, I might if I have issues in future, but right now it's vastly overpowered for the traffic and extremely cheap to run. If you want to hit it hard, or you just want to avoid any risk of limits in future, it's a one-liner to host it yourself with Docker: `docker run --rm -it -p 3000:3000 httptoolkit/testserver`, then open http://example.localhost:3000/. Advanced config options for CAs etc are", "context": "", "use_case": "local test server", "switched_from": "", "story": "Example.com just launched the biggest redesign in decades"}, {"id": 753021136, "item_id": 47063821, "url": "https://news.ycombinator.com/item?id=47063821", "by": "madeforhnyo", "date": "2026-02-18", "stance": "recommend", "quote": "That how HTTPToolkit [0] works, it only requires adb", "excerpt": "I can add certificates on my unrooted android. That how HTTPToolkit [0] works, it only requires adb, which (thankfully) doesn't trip banking apps. Banking apps can (and do iirc) pin certificates, so a rooted phone adds no risk whatsoever. Also in my experience a rooted phone experience is by far more secure than the OEM androids. Security is supposed to assess risk objectively, yet \"running on a Xiaomi phone with 3rd", "context": "", "use_case": "HTTPS traffic interception", "switched_from": "", "story": "GrapheneOS \u2013 Break Free from Google and Apple"}, {"id": 741387360, "item_id": 46336710, "url": "https://news.ycombinator.com/item?id=46336710", "by": "akaitea", "date": "2025-12-20", "stance": "recommend", "quote": "I like that it launches a independent Firefox window on its own for the intercepting", "excerpt": "For my rather simple needs I've been using https://httptoolkit.com free edition, I like that it launches a independent Firefox window on its own for the intercepting so I don't have to touch my working browser or deal with configuring a proxy anywhere", "context": "", "use_case": "HTTP traffic interception", "switched_from": "", "story": "Charles Proxy"}, {"id": 741347408, "item_id": 46334213, "url": "https://news.ycombinator.com/item?id=46334213", "by": "self_awareness", "date": "2025-12-19", "stance": "recommend", "quote": "This one is truly a gem", "excerpt": "This one is truly a gem: https://httptoolkit.com It even bypasses SSL pinning on Android using 1 click.", "context": "", "use_case": "HTTP traffic inspection on Android", "switched_from": "", "story": "Charles Proxy"}]}