MCP Integration
Give your AI assistant access to captured traffic, locally.
MinPin runs a local Model Context Protocol server over a Unix domain socket (0600 perms). AI tools like Claude Code, Cursor, VS Code, Windsurf and Claude Desktop can call its tools to read and search traffic and manage rules; nothing is sent to the cloud.
Enable it
- Turn on Enable MCP Server in Settings → MCP (PRO feature).
- Click Setup in Cursor, Setup in Claude Code, Setup in VS Code, Setup in Windsurf or Setup in Claude Desktop, or Copy JSON for another client. Each points the client at the bundled stdio bridge script (run with
python3). - Ask your assistant about captured requests, e.g. "why is /checkout returning 402?"
Manual setup
The Setup buttons write these for you. To configure a client by hand, copy the bridge path shown in Settings → MCP (MinPin keeps the bridge script in its Application Support folder) and use it in place of <bridge-path>.
Claude Code:
claude mcp add minpin python3 "<bridge-path>"Any client that reads an mcpServers JSON file (Cursor, Windsurf, Claude Desktop):
{
"mcpServers": {
"minpin": {
"command": "python3",
"args": ["<bridge-path>"]
}
}
}MinPin must be running with Enable MCP Server on; the bridge connects to its local socket and has nothing to talk to otherwise.
The 27 tools
| Area | Tools |
|---|---|
| Traffic | list_requests, get_request, search_requests, export_har, export_curl, toggle_recording, clear_requests, get_pin_list |
| Proxy and settings | get_proxy_status, get_settings, get_ssl_certificates, enable_ssl_proxying, get_scripts |
| Breakpoints | get_breakpoints, add_breakpoint, remove_breakpoint |
| Rules | get_rewrite_rules, add_map_local, remove_map_local, add_map_remote, remove_map_remote |
| Block list | get_block_list, add_block_rule, remove_block_rule |
| Security Mode | get_security_alerts, get_security_status, toggle_security_mode |
get_request returns bodies already decompressed (gzip, deflate, br and zstd) and flags bodies it had to send as base64. get_breakpoints lists each breakpoint's id, and remove_breakpoint takes that id (or a URL pattern and method). Redact Sensitive Data (on by default) masks Authorization, cookies, API keys and sensitive query parameters, and MCP clients can turn SSL decoding on only if you allow it in Settings → MCP.