MCP service

NetPeek MCP is a local service on the iPhone, off by default. After you enable it, a trusted client on the same Wi-Fi network or a USB link can call capture-analysis tools with Authorization: Bearer <token>. NetPeek does not upload captures anywhere; review the privacy behaviour of whichever client you connect.

Enable

1. Open Settings → NetPeek MCP and enable the service.
2. Copy the MCP URL and token. Share them only with a trusted client.
3. Merge mcpServers.netpeek into Claude Code, Codex, or another compatible client. The auth header is Authorization: Bearer <token>.
4. Run the Bearer-authenticated health check from a terminal, then refresh the tool catalog.

Tools

The service exposes 16 tools. Compact list and search responses stay redacted. After a successful authenticated get_request or get_body, the client may read URL, query, headers, cookies, Authorization, and bodies. digest and redacted are optional caller-selected previews, not extra permission scopes.

• list_requests / search_requests — paginated or filtered recent captures (compact, redacted).
• get_request / get_body — full detail and pageable body bytes.
• get_stats / list_runs / get_run — totals, host distribution, capture runs.
• list_favorites — favorited rows.
• decode_jwt / explain_tls / analyze_timing / audit_security — analysis helpers.
• diff_runs / diff_requests / infer_api_schema — compare and summarize.
• import_rewrite_bundle — import rewrite rules, scripts, replays, or constants when the client requests it.

Prompts

The service also advertises workflow prompts: netpeek_skill, traffic_triage, debug_api_failure, privacy_audit, why_slow, find_cleartext, diff_captures, reverse_api, explain_app_behavior, and install_rewrite_bundle.