HTTP/HTTPS proxy for intercepting and visualizing Claude Code API traffic in real-time.

# Run the proxy
npx cc-wiretap

# In another terminal, configure it for proxying
eval "$(curl -s http://localhost:8082/setup)"

# Now run Claude Code - all API traffic will be captured
claude

Open http://localhost:3000 to view the dashboard.

CC Wiretap acts as a man-in-the-middle proxy that intercepts all traffic between Claude Code CLI and the Anthropic API. It captures requests and responses in real-time and displays them in a web dashboard.

Use cases:

• Debug Claude Code conversations and tool calls
• Analyze token usage and API costs
• Inspect system prompts and tool definitions
• Monitor streaming responses as they happen
• Understand how Claude Code works under the hood

npx cc-wiretap

npm install -g cc-wiretap
cc-wiretap

git clone https://github.com/wierdbytes/cc-wiretap.git
cd cc-wiretap
pnpm install
pnpm dev

cc-wiretap

Options:

• -p, --port <port> - Proxy server port (default: 8080)
• -w, --ws-port <port> - WebSocket server port (default: 8081)
• -u, --ui-port <port> - UI dashboard port (default: 3000)
• -q, --quiet - Suppress banner output

Recommended: One-liner setup

eval "$(curl -s http://localhost:8082/setup)"

This configures all necessary environment variables for the current shell session.

To disable:

unset-wiretap

Fish shell:

eval (curl -s http://localhost:8082/setup?shell=fish)

Manual setup:

NODE_EXTRA_CA_CERTS="$HOME/.cc-wiretap/ca.pem" \
HTTPS_PROXY=http://localhost:8080 \
claude

Navigate to http://localhost:3000 in your browser.

Displays connection status, current request info, token usage with cache breakdown, and rate limit indicators.

Lists all intercepted API requests in chronological order. Shows total input tokens sent. Toggle with S key.

When a request is selected, displays a collapsible report with:

On first run, a CA certificate is generated at ~/.cc-wiretap/:

• ca.pem - Certificate
• ca-key.pem - Private key

The setup script automatically configures NODE_EXTRA_CA_CERTS and other environment variables to trust this certificate.

Optional: Trust system-wide

macOS:

sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain ~/.cc-wiretap/ca.pem

Linux (Debian/Ubuntu):

sudo cp ~/.cc-wiretap/ca.pem /usr/local/share/ca-certificates/cc-wiretap.crt
sudo update-ca-certificates

The setup script configures these variables:

1. Proxy intercepts HTTPS traffic to api.anthropic.com and api.claude.ai
2. Interceptor parses Claude API request/response format
3. SSE Parser handles streaming responses in real-time
4. WebSocket broadcasts events to connected dashboard clients
5. Dashboard renders the intercepted data with filtering and formatting

The proxy captures traffic without modifying it - your Claude Code sessions work exactly as they would without the proxy.

MIT