Bookmarks
Choose a title for this bookmark.
Bookmark saved
| Developer: | Wojciech Charysz (2) | ||
| Price: | * Free New | ||
| Score: | 1,510 Gold | ||
| Rankings: | 0 | ||
| Comments: | 0 Add a comment | ||
| Lists: | 0 + 0 | ||
| Points: | 0 + 0 ¡ | ||
| +1 Points | |||
Screenshots
Advertisement
Video 1
Description
Charlotte shows you what actually went over the wire.
It runs as a proxy on your Mac and decrypts HTTPS from anything you point at it — your Mac, an iPhone or iPad, the iOS Simulator, or an Android emulator — then lays out every request and response so you can finally read them: headers, status codes, timings, and formatted JSON, Protobuf, gRPC and WebSocket bodies. Nothing leaves your Mac.
YOUR AI AGENT, PLUGGED INTO REAL TRAFFIC
Charlotte is also an MCP server — the one thing your usual proxy isn't. Connect Claude, Copilot, or any MCP-capable agent and it works from your actual captured traffic instead of your description of it:
• list_flows / get_flow — read any request and its decoded body
• search_flows — a real query language: status:>=400, host:*.stripe.com, body:"token", with globs, ranges, AND/OR/NOT
• stats — totals, hosts and status codes across the session
• audit_session — a security and privacy audit of the whole session
• list_devices / analyze_flows / audit_log — see each phone, emulator or container as its own device, run the built-in analyzers, and read a per-credential audit trail
• replay_flow, create_rewrite, create_map_local, set_breakpoint — your agent changes traffic, not just reads it
Stop pasting curl output into a chat window and hoping you copied the right header. Ask the agent why the request failed, and it reads the request. The server is loopback-only. Issue each agent its own role-scoped token — viewer, editor or admin — or let a client register over standard OAuth 2.1 with a consent screen you approve; passwords, tokens and cookies stay redacted unless you turn that off.
SET UP IN MINUTES
A built-in Setup Guide takes you from zero to decrypted traffic: step-by-step instructions with ready-to-copy commands for the iOS Simulator and Android emulators, and a QR code for real iPhones and Android phones.
READ THE REAL PAYLOAD
• Auto, JSON, Protobuf, gRPC, Text and Hex body viewers
• gzip, deflate, brotli and zstd decoding
• A powerful FlowQuery filter language with saved filters
• Native sessions, HAR 1.2 import/export, and copy any request as cURL
CHARLOTTE PRO — ONE-TIME, YOURS FOREVER
No subscription. A single purchase unlocks the full professional toolset:
• Map Remote, Map Local and Rewrite rules
• Breakpoints — pause and edit live requests and responses
• Throttling & network chaos — add latency, cap bandwidth, drop connections
• Compose & Replay — craft and resend requests
• On-device AI — explain a flow and flag anomalies with Apple's Foundation Models; traffic never leaves your Mac
• The MCP server, its live event stream, and consent-gated actions
PRIVATE BY DESIGN
Everything runs locally. No account, no analytics, no tracking SDKs, and your traffic is never uploaded anywhere.
FREE TO DOWNLOAD, PRO FREE FOR 14 DAYS
Charlotte is a free download. Every Pro feature is unlocked for the first 14 days after you install it, with no sign-up and nothing to cancel. After that, capture, decryption, body viewers, device setup and import/export stay free forever, and Charlotte Pro, a one-time In-App Purchase, keeps the full toolset.
Requires macOS 26 or later.
Other platforms
| Charlotte: HTTPS & MCP ProxyMac App Store1K GoldYou are hereIn-App Purchases $29.99 | Free |
Only in this store right now.
Price History
- Current price: Free
- Minimum: Free
- Maximum: Free
Track prices Add to a list to get discount alerts by email or push
Lists 0
0
- Charlotte: HTTPS & MCP Proxy
Points 0
0
Rankings 0
-
- Your rating
Comments 0 ¡
Be the first to comment
Developer
- Wojciech Charysz
- Followers: 0
- Platforms: macOS Apps (1) Windows Apps (1)
- Deals: 0
- Lists: 0 + 0
- Points: 0 + 0 ¡
- Rankings: 0
- Comments: 0
- Videos: 1
- RSS: Subscribe
What's new
- Version: 2.3
- Last Updated:
- Charlotte 2.3 is the biggest update yet: control what AI agents may do, turn real traffic into regression tests, and keep them in git.
AGENTS AND GOVERNANCE
• Governance window (⇧⌘G): choose what agents may do with capability profiles, allow or block hosts, and require your approval before an agent's rule changes live traffic.
• Step debugger: pause the next matching requests or responses, edit them, then send them on.
• Tamper-evident audit trail of flows, agent tool calls and setting changes, exported as a signed bundle anyone can verify.
• Data residency: keep governance data in a folder you choose, or refuse every outbound connection Charlotte itself would make.
• OpenTelemetry export of flows and tool calls to your collector (Grafana, Datadog, Honeycomb…).
• MCP gateway: put other MCP servers behind Charlotte, with a firewall that pins tools, blocks poisoned ones, and allows or denies tools by name.
• Analyzers: your own JSON rules for PII, secrets, missing headers and GraphQL depth, run on captured traffic.
• charlotte.config.json: version a team's policies, rules, analyzers and settings in one file.
TEST WITH REAL TRAFFIC
• Assert (⌥⌘A): mark a captured journey as a golden session, replay it against a new build and see status, header, body, timing and side-effect differences, with a hint for each failure.
• Learn noise from repeated runs, accept a new baseline and read exactly what changed.
• Environments, secrets kept in your Keychain, coverage of your OpenAPI endpoints, and a diff with any earlier golden file.
• Fault injection: make chosen requests slow, fail, return malformed bodies or drop the connection, repeatable with a seed.
• Compare Sessions (⌥⌘C) and Replay Session Against…: A/B two captures, or replay one against another server.
SHARE
• Share Live (Relay): teammates watch your capture as it happens, redacted and end-to-end encrypted.
• Encrypted snapshots with a passphrase, safe to attach to a ticket.
GIT FOR HTTP (command line)
• charlotte --golden-check runs goldens in CI with JUnit output; --golden-record records them from your tests.
• Readable git diffs and three-way merges of goldens, coverage and staleness reports, and breaking-change checks between OpenAPI versions.
• The App Store build asks once per project folder before the command line uses it.
IMPROVEMENTS
• One Start/Stop button, as in Xcode; Breakpoints has its own breakpoint icon.
• Windows sign-in, the proxy and the command line rebuilt on Swift's strict concurrency checks for steadier operation.
Additional Information
- Release Date:
- Category:
macOS Apps›Developer Tools - OS:
macOS,macOS 26.0 and up - Size:
12 Mb - Supported Languages:
English - Content Rating:
4+ - Mac App Store Rating: ¡
0
https://wcharysz.github.io/Charlotte/AppAgg Score
1,510
Estimated AppAgg Score for
Charlotte: HTTPS & MCP Proxy
Developer: Wojciech Charysz
1,510 Gold
Higher scores usually reflect better results across AppAgg’s indicators.
Based on: popularity · ratings · freshness · deals · store data · community signals
Recalculated daily using fresh AppAgg data.
Website badge: 
Copied!
Summary
Charlotte: HTTPS & MCP Proxy Short URL: Copied!- Mac App Store
On AppAgg, you can track the macOS app “Charlotte: HTTPS & MCP Proxy” by Wojciech Charysz, listed under Developer Tools. AppAgg Score: 1,510 (Gold). AppAgg Points for the app — confirmed: 0; indirect: 0. Public lists containing the app: 0. Users who have saved it in private lists: 0. AppAgg users have not rated the app yet. Confirmed Points record visits to a store by signed-in AppAgg users; indirect Points are based on store data. AppAgg counts public lists containing an app or game and users who have saved it in private lists. The app was first released on . The app was last updated on . The app is currently available for free. The app is available in these languages: English. Explore the price history, add the app to a list, or follow its developer. Follow future deals and updates for the app via its RSS feed. AppAgg does not host or distribute the app. All trademarks, logos, and screenshots related to the app belong to their respective owners.
