mitmproxy vs Tucano Proxy

mitmproxy is a free set of tools for inspecting and changing traffic sent through a proxy. It handles HTTP/1, HTTP/2, WebSocket, and SSL/TLS traffic, and can intercept HTTP and HTTPS requests and responses for editing. Conversations can be saved for later analysis, and users can replay client requests or recorded server responses. The project provides an interactive console, a browser-based GUI, and non-interactive terminal output through mitmproxy, mitmweb, and mitmdump. Proxy modes include regular, local capture, WireGuard, reverse, transparent, TUN, upstream, SOCKS5, and DNS. Python addons can alter behavior in response to events and expose commands. WireGuard mode can capture traffic from external devices or individual Android apps. A built-in certificate authority generates interception certificates as needed. Installation options cover Windows, macOS, Linux, PyPI, and official Docker images. The project says it does not phone home or check for updates. Documentation notes that HTTP/3 client replay is currently broken; dependencies in precompiled binaries and Docker images are fixed at release and cannot be updated in place.

Tucano Proxy is a free, MIT-licensed open-source HTTP/HTTPS debugging proxy for inspecting and replaying network traffic. It runs through a configurable local MITM proxy and captures HTTP, HTTPS, and WebSocket connections. A native CLI, terminal inspector, local web interface, and desktop app provide several ways to work, with named sessions shared across the CLI, terminal UI, and web UI. The inspector presents request and response headers, timing, and bodies, with viewers for JSON, XML, HTML, raw text, hex, images, and forms. Filtering, search, capture comparison, notes, color marks, editable request replay, and exports to cURL, HAR, and Python requests support investigation. The project documents MCP integration and a coding-agent skill. Desktop installers cover macOS Apple Silicon, macOS Intel, and Windows; standalone CLI releases include macOS, Linux, and Windows. It can create a root CA and offer trust-store installation, while ordinary startup does not install certificates or change system proxy settings.