Show HN: A MitM proxy to see what your LLM tools are sending

Post by dtkav » Thu, Jan 29, 2026, 4:16 AM UTC

LudwigNagasena wrote: post #15

david_shaw wrote: post #3

Nice work! I'm sure the data gleaned here is illuminating for many users. I'm surprised that there isn't a stronger demand for enterprise-wide tools like this. Yes, there are a few solutions, but when you contrast the new standard of "give everyone at the company agentic AI capabilities" with the prior paradigm of strong data governance (at least at larger orgs), it's a stark difference. I think we're not far from th…

I had to vibe code a proxy to hide tokens from agents ( https://github.com/vladimirkras/prxlocal ) because I haven’t found any good solution either. I planned to add genai otel stuff that could be piped into some tool to view dialogues and tool calls and so on, but I haven’t found any good setup that doesn’t require lots of manual coding yet. It’s really weird that there are no solutions in that space.

Post by [deleted] » Thu, Jan 29, 2026, 4:29 AM UTC

jmuncor wrote: post #40

mikehotel wrote: post #35

Earlier quoted context omitted.

Addon to mitmproxy: https://docs.mitmproxy.org/stable/addons/overview/

What would you think of simply using an http relay for all providers? Would that make you feel better secutity wise? also could extend the tool to change the context you are sending and make it more granular to what you want/need...

Post by Retr0id » Thu, Jan 29, 2026, 4:32 AM UTC

mikehotel wrote: post #35

jmuncor wrote: post #32

Earlier quoted context omitted.

Agee! This was a fun project that I build because it is so hard to understand what "really" is in you context window... What do you mean by plugin/add-on? Add-on to what? Thinking of what to add to it next... Maybe security would be a good direction, or at least visibility of what is happening to the proxy's traffic.

Addon to mitmproxy: https://docs.mitmproxy.org/stable/addons/overview/

Post by maxkfranz » Thu, Jan 29, 2026, 4:37 AM UTC

maxkfranz wrote: post #56

Could you use an approach like this much like a traditional network proxy, to block or sanitise some requests? E.g. if a request contains confidential information (whatever you define that to be), then block it?

Post by asyncadventure » Thu, Jan 29, 2026, 4:51 AM UTC