Trust one certificate, flip on capture, and you're inspecting live HTTPS traffic. Follow the steps for your device below — every step is illustrated.
A one-time, on-device certificate lets the app read HTTPS content.
Open the Proxy tab and toggle capture — requests appear instantly.
Tap any request to read it, mock it, or resend it. That's it.
To let Moni Proxy show the content of HTTPS requests, you install a certificate that is generated on your own device and never leaves it. Pick your platform:
In the Moni Proxy app onboarding, tap Download CA Profile. Safari will save a configuration profile to your device.
Open the iOS Settings app — a Profile Downloaded banner appears near the top. Tap it.
Tap Install in the top-right, enter your passcode, and confirm.
Go to Settings → General → About, scroll to the bottom, and tap Certificate Trust Settings.
Switch the toggle next to Moni Proxy Root CA to ON and confirm. You're done.
In the app, tap Download CA Certificate. A .crt file is saved to your Downloads folder.
Go to Settings → Security & privacy → More security settings → Encryption & credentials → Install a certificate → CA certificate.
Tap Install anyway on the warning, pick the Moni Proxy .crt file, and authenticate with your PIN or fingerprint.
In the desktop app, open Settings → HTTPS and click Export Root CA Certificate to save moni-ca.pem.
macOS: double-click the file to add it to Keychain Access.
Windows: right-click → Install Certificate → Local Machine → Trusted Root Certification Authorities.
macOS: in Keychain Access open Moni Proxy Root CA → Trust → Always Trust.
Linux / Firefox: import it under the browser's Authorities and check “Trust this CA to identify websites”.
With the certificate trusted, capturing is a single switch. Watch traffic appear the moment your apps make a request.
Return any response you want for a matching URL — no backend required. Perfect for testing error states and edge cases.
/v1/users/me).200 or 500) and add any response headers.{
"id": 42,
"name": "Test User",
"role": "admin",
"isActive": true
}
For full control, write a JavaScript interceptor. Hook onRequest and onResponse to transform anything on the fly — it all runs on-device.
onRequest and/or onResponse and save.function onResponse(req, res) { if (res.status === 200) { let body = JSON.parse(res.body); body.user.role = "admin"; res.body = JSON.stringify(body); } return res; }
Stream your phone's traffic to the desktop for a roomier view. Both devices just need to be on the same Wi-Fi.
host:port shown).Install Moni Proxy, trust the certificate, and you'll be inspecting live HTTPS in under a minute.