Reqable
Advanced API Debugging Proxy
Free · In-App Purchases
Reqable is a new generation API debugging and testing one-stop solution, advanced web debugging proxy, making your work faster and simpler. Reqable can inspect HTTP/HTTPS traffic of your app, help you find and locale issue easily.
#1 Standalone Mode:
Traffic inspection can be performed independently without relying on the desktop. You can view the captured HTTP protocol message in the app, reqable provides many views, such as JsonViewer, HexViewer, ImageViewer and so on. And you can perform many actions on the traffic, like repeat, share to someone, save to phone, etc.
#2 Collaborative Mode:
The app could forward traffic to Reqable desktop app by scanning the QR code without manually configuring the Wi-Fi proxy. And iOS app provides the enhanced mode to capture the app that not using Wi-Fi proxy, such Flutter apps. With the collaborative mode, you can perform actions on desktop rather than mobile, it will greatly improve your work.
#3 Traffic Inspection
Reqable iOS uses the classic MITM proxy method for traffic inspection, support the following features:
- HTTP/1.x and HTTP2 protocol.
- HTTP/HTTPS/Socks4/Socks4a/Socks5 proxy protocol.
- HTTPS, TLSv1.1, TLSv1.2 and TLSv1.3 protocols.
- WebSocket upgraded based on HTTP1.
- gRPC and Protobuf.
- IPv4 and IPv6.
- SSL Proxying.
- HTTP/HTTPS secondary proxy.
- VPN mode and proxy mode.
- Search and filter.
- Compose requests.
- HTTP-Archive.
- Traffic Highlighting.
- Repeat and advanced repeat.
- cURL.
- Code snippet.
#4 REST Testing
Also, you can manage REST APIs with Reqable:
- HTTP/1.1, HTTP2, HTTP3 (QUIC), WebSocket, SSE and gRPC REST testing.
- Collections.
- Environments.
- Creating multiple Tabs for REST testing.
- Batch editing of query parameters, request headers, forms, etc.
- Authorization methods such as API KEY, Basic Auth, and Bearer Token.
- Custom proxy, system proxy and debugging proxy, etc.
- Metrics of request at different stages.
- Cookies.
- cURL.
- Code snippet.
EULA and privacy: https://reqable.com/policy
more - [OPT] Added Yaml type to HTTP testing.
- [OPT] Moved the request body tab before the request header tab in HTTP testing.
- [OPT] In HTTP testing, automatically switch to the request body tab when a request body exists.
- [OPT] In HTTP testing, the protocol version information is displayed in the metrics tab.
- [OPT] Added import path configuration for gRPC and Protobuf.
- [OPT] gRPC testing supports inputting bytes type data as an int array.
- [OPT] In gRPC testing, detailed message conversion error information is displayed.
- [OPT] In the gRPC testing settings, added options for inputting and outputting bytes type data as an array.
- [OPT] gRPC and Protobuf data in the Raw tab now display Unicode characters instead of escape sequences.
- [OPT] Added an entry icon in the gRPC and Protobuf views to open the configuration definition.
- [OPT] Adjusted the display strategy when gRPC service and method are too long.
- [OPT] In HTTP testing, the status code, timing, and data size information is displayed in the subtitle.
- [OPT] The HTTP capture details tab bar will no longer display the request method, protocol, and status code labels.
- [FIX] A bug where the help document link address on the Protobuf definition configuration page was incorrect.
- [FIX] A bug where the Proto specification file references were not handled correctly.
- [FIX] A bug where the file selector did not correctly restrict the selectable file types.
3.3.2 1 day ago
- [NEW] Full support for gRPC testing and traffic capturing.
- [NEW] Added HTTP raw message editing mode.
- [NEW] Added an option in the settings page to listen on the loopback interface.
- [NEW] Enhanced mode has been changed to a premium feature.
- [OPT] Enhanced mode provides the option to switch between SOCKS proxy and HTTP proxy.
- [OPT] Enhanced mode provides the option to enable DNS caching.
- [OPT] Redesigned the environment variable editing feature.
- [OPT] WebSocket request testing supports automatic saving to history.
- [OPT] WebSocket request testing message list will automatically restore after the app restarts.
- [OPT] Removed the StackTrace tab.
- [OPT] The URL input prompt option has been migrated to the app global settings.
- [FIX] A bug where API global settings did not take effect for new APIs.
- [FIX] A bug where the default language did not use the system language.
- [FIX] A bug where reverse search in the traffic list did not work.
- [FIX] A bug where SSE parsing did not correctly handle cases where there was no space after the name.
- [FIX] A bug where SSE search results were abnormal.
- [FIX] A bug where the request header, response header, and other lists were not sorted in descending order correctly.
- [FIX] A bug where the version detection was incorrect in collaborative mode.
3.3.0 12 Oct
- [OPT] Improved the performance of the log console.
- [FIX] A bug where the content of HTTP plaintext requests might be displayed incorrectly.
- [FIX] A bug where custom request headers were not populated when creating WebSocket from the traffic list.
- [FIX] A bug where SSL handshake group_list parameter was not set correctly.
3.2.23 10 Aug
- [OPT] Improved the text quality of internationalization.
- [OPT] SOCKS5 UDP proxy automatically blocks HTTP3/QUIC requests.
- [OPT] cURL import now supports recognizing content with // and # comments.
- [OPT] cURL import now ignores the -o parameter.
3.2.18 5 Aug
- [OPT] Added multi-language internationalization support for Traditional Chinese, Japanese, Korean, Spanish, French, German, and Russian.
- [OPT] Added an option in Settings to choose whether to show a notification when a version update is detected.
- [FIX] A bug where the response body was not ignored for HEAD requests.
- [FIX] A bug where the tab label displayed incorrectly when image decoding failed.
3.2.17 30 Jul
- [OPT] Added an option to preserve environment variables when exporting cURL.
- [OPT] Removed URL validation during cURL import.
- [OPT] Readonly JSON will be formatted using serialization.
- [OPT] Auto-detect XML data and apply formatting.
- [OPT] A bug where certain types of responses would remain in a loading state indefinitely.
3.2.16 28 Jul
- [OPT] Reduced network latency that occurred when there was an excessive amount of data in the traffic list.
- [Fix] Corrected several English spelling and grammar errors.
- [Fix] A bug where JSON minification did not correctly handle escape characters.
3.2.15 26 Jul
- [OPT] Automatically detect the actual data type of binary/octet-stream.
- [OPT] SOCKS5 proxy DNS resolution uses local resolution instead of forcing the use of the 8.8.8.8 resolution server.
- [OPT] Added a toast when pasting long-text.
- [Fix] The bug where WebSocket traffic capture Sec-WebSocket-Extensions response handling was incorrect.
- [Fix] The bug where compressing certain JSON strings would cause the app to freeze.
- [Fix] The bug where WebSocket closing would display status Aborted instead of Completed.
3.2.14 24 Jul
- [OPT] Support formatting JSON with comments and syntax errors.
- [OPT] API testing header adds key-value pair copy icon button.
- [OPT] In the JSON request body, extra commas after comment fields will be automatically removed.
- [OPT] Close auto-cookie when creating API testing from the traffic list.
- [OPT] Close auto-cookie when creating API testing from cURL.
- [OPT] The cURL copied from the traffic list will automatically merge multiple Cookie headers.
- [OPT] Automatically infer the type when Content-Type is missing or binary.
- [FIX] The bug where SOCKS5 proxy did not correctly handle the priority of domain lookups for the same IP.
- [FIX] The bug where copying the API testing header as JSON did not merge cookies.
- [FIX] The bug where JSON formatting could cause loss of precision in floating-point data.
3.2.10 17 Jul
- [OPT] When proxying SSL requests, certificate security is no longer checked.
- [OPT] SSE supports configuring custom extractors.
- [OPT] JSON tree supports viewing details by single clicking on nodes.
- [FIX] The bug where SSE list and preview did not automatically scroll to the bottom.
- [FIX] The bug where responses missing Content-Length were not handled correctly.
- [FIX] The bug where DNS resolution cache was not handled correctly when using a socks5 proxy.
- [FIX] The bug where packet capture could cause crashes.
3.2.8 15 Jul
- [IMP] When using collaborative mode, the desktop app version must be updated simultaneously.
- [OPT] In enhanced mode, the proxy protocol uses socks5 instead of http.
- [OPT] cURL supports multi-line mode and defaults to multi-line mode.
- [OPT] cURL supports using single quote or double quote and defaults to single quote.
- [OPT] socks5 proxy supports UDP.
- [OPT] The traffic list URL scheme no longer uses the proxy protocol name when the request is not completed.
- [OPT] Report server URL now supports syntax highlighting and auto-completion.
- [FIX] The bug where the proxy server could not connect in some cases.
- [FIX] The bug where the request body in API testing caused a memory leak.
- [FIX] The bug where adding a remote device failed after the proxy port conflicted and automatically incremented.
- [FIX] The bug where report server rules could not be disabled.
- [FIX] In enhanced mode, connection failures due to DNS resolution issues.
3.2.5 9 Jul
- [OPT] API testing history now supports setting a retention period.
- [OPT] API testing history now remembers whether the display mode is by timeline or by URL.
- [OPT] API testing history now supports deleting by group.
- [OPT] A friendly toast message will appear when a feature requires a premium membership.
- [OPT] Redesign the API testing history cache settings page.
- [FIX] The bug where images in the desktop app introduction failed to load.
- [FIX] The bug where the options in the long-press menu of domain group requests were not working.
3.2.4 2 Jul
- [NEW] Open APIs for controlling various Reqable features.
- [OPT] After re-login, all data will be fully synchronized from the cloud to avoid inconsistencies between cloud and local data.
- [OPT] The maximum length of rule names has been increased from 32 to 64.
- [OPT] Added reqablePort built-in variable to environment, representing the current proxy port.
- [FIX] The bug where WebSocket testing could not be created from the traffic list.
- [FIX] The bug where WebSocket testing could not be added to the collection from the traffic list.
- [FIX] The bug where 307 and 308 redirects changed the request method to GET and discarded the request body.
- [FIX] The bug where SOCKS proxy options caused cURL import to fail.
3.2.1 29 Jun
- [FIX] The bug where SSL was not compatible with unsafe legacy renegotiation.
- [FIX] The bug where URL was not correctly encoded in some language code snippet.
- [FIX] The bug where numeric domain names could not be resolved.
3.1.3 29 May
- [OPT] Improve CA certificate installation guide.
- [FIX] The bug where the collaborative device certificate installation status was incorrect.
- [FIX] The bug where URL parameters + were automatically decoded as spaces.
- [FIX] The bug where single quotes were not handled correctly when generating cURL commands.
- [FIX] The bug where empty response bodies in capture details were always shown as loading.
- [FIX] The bug where collaborative device information did not update after being added.
3.1.2 26 May
- [New] Introduce API documentation feature.
- [New] Redesign capture gateway, supporting network Layer4 and Layer7 configurations and other new features.
- [New] Redesign SSE view, supporting raw view and Markdown preview.
- [OPT] Upgrade OpenSSL version to 3.6.1.
- [OPT] Align API names in the API collection list.
- [OPT] SSE chat view now limits each text message to 4k characters.
- [OPT] SSE list may experience lag due to long text.
- [OPT] WebSocket chat view now limits each text message to 4k characters.
- [OPT] WebSocket list may experience lag due to long text.
- [OPT] Update Magisk module template.
- [FIX] The bug where capturing failed when the server used new algorithms like X25519MLKEM768.
- [FIX] The bug where the application crashed when the API carried a non-standard Referer header.
- [FIX] The bug where Content-Type was displayed incorrectly in the capture overview.
- [FIX] The bug where API collection and folder settings did not sync correctly with the cloud.
- [FIX] The bug where API request Cookie headers were not automatically updated.
- [FIX] The bug where the order of cURL request headers was incorrect when copying from traffic list.
3.1.1 10 May
- [New] Introduce API documentation feature.
- [New] Redesign capture gateway, supporting network Layer4 and Layer7 configurations and other new features.
- [New] Redesign SSE view, supporting raw view and Markdown preview.
- [OPT] Upgrade OpenSSL version to 3.6.1.
- [OPT] Align API names in the API collection list.
- [OPT] SSE chat view now limits each text message to 4k characters.
- [OPT] SSE list may experience lag due to long text.
- [OPT] WebSocket chat view now limits each text message to 4k characters.
- [OPT] WebSocket list may experience lag due to long text.
- [OPT] Update Magisk module template.
- [FIX] The bug where capturing failed when the server used new algorithms like X25519MLKEM768.
- [FIX] The bug where the application crashed when the API carried a non-standard Referer header.
- [FIX] The bug where Content-Type was displayed incorrectly in the capture overview.
- [FIX] The bug where API collection and folder settings did not sync correctly with the cloud.
- [FIX] The bug where API request Cookie headers were not automatically updated.
- [FIX] The bug where the order of cURL request headers was incorrect when copying from traffic list.
3.1.0 9 May
- [FIX] The bug where the response data in the raw tab did not automatically update.
- [FIX] A bug in the curl command where the `-no-buffer` option causes import failures.
- [FIX] The bug where JSONP data with a trailing semicolon was not formatted correctly.
3.0.40 27 Mar
- [OPT] Support adding multiple records from the traffic list to API collection at once.
- [OPT] Go code snippet now fully supports form requests.
- [OPT] Optimize error message when opening HAR files.
- [FIX] The bug where SSL exceptions with Missing Authority Key Identifier might occur during capture.
- [FIX] The bug where data in the capture overview did not update with request status.
- [FIX] The bug where binary data in non-ASCII headers in the raw tab of the capture details was incorrect.
- [FIX] The bug where custom encoding without specifying the encoding type in `Content-Disposition` caused file names to appear garbled when saving response content.
- [FIX] A bug in the curl command where the `-g` option causes import failures.
3.0.39 6 Mar
- [FIX] The bug where SOCKS proxy URLs were not syntax highlighted.
- [FIX] The bug where URL syntax highlighting for IPv6 addresses was abnormal.
- [FIX] The bug where IPv6 address requests were interrupted under SOCKS proxy.
- [FIX] The bug where URL was incorrect when creating IPv6 requests from the traffic list.
- [FIX] The bug where enabling follow debug caused the application to crash with IPv6 requests.
- [FIX] The bug where the new version changelog did not refresh after switching languages in app settings.
3.0.38 2 Feb
- [OPT] Automatically format node content in JSON tree view.
- [OPT] WebSocket testing will cache the last sent message.
- [OPT] Code snippet supports Dart-Dio.
- [OPT] JSON Tree view will remember the last search type.
- [FIX] The bug where HTTP redirects did not correctly handle current path redirects.
3.0.34 16 Jan
- [OPT] In the Cookie view, copying icon now copies the concatenated cookie string instead of key-value entries.
- [OPT] JSON tree view node context menu adds copy dictionary path option.
- [OPT] Protocol version is no longer specified when copying cURL from the traffic list.
- [OPT] Code snippet for Java-HttpClient adds main method and prints body text to console.
- [FIX] The bug where code snippet for Java-HttpClient did not correctly handle query and form encoding.
- [FIX] The bug where code snippet for Python-http.client did not correctly handle query and form encoding.
- [FIX] The bug where WebSocket details changed with data updates.
- [FIX] The bug where SSE details changed with data updates.
3.0.32 5 Jan
- [New] Code snippet supports setting indentation.
- [New] Code snippet for Python-Requests supports whether to use dictionary parameters.
- [OPT] Added background color to third-party login icon buttons.
- [OPT] API testing can inherit common headers defined in the folder when the current is not selected.
- [OPT] API testing can inherit common parameters defined in the folder when the current is not selected.
- [OPT] Automatically fill in the 'Content-Length' header when generating cURL if a request body is expected but not present.
- [FIX] The bug where exporting cURL did not correctly handle duplicate headers.
- [FIX] The bug where code snippet did not correctly handle duplicate headers.
3.0.30 29/12/2025
- [OPT] Replace cURL command parser.
- [OPT] Importing curl no longer blocks if a file is not found.
- [OPT] form-data adds a warning for missing files.
- [OPT] Compatible with some non-standard `content-type` types.
- [FIX] HEX view in WebSocket and SSE could not gain focus, causing shortcut keys to be not working.
- [FIX] SSE view in traffic list did not display data due to encodings.
- [FIX] XML prettify did not correctly handle nested characters.
- [FIX] Importing cURL did not handle single and double quotes correctly.
3.0.28 29/11/2025
- [OPT] Display all new version logs during version updates.
- [OPT] Display VPN addresses in the IP list.
- [OPT] Automatically clean up outdated log files.
- [FIX] Remove trailing `;` when importing cURL headers with empty values.
- [FIX] Application does not automatically open files when launched from file association.
- [FIX] API request tab save prompt status not displaying correctly in some cases.
- [FIX] Tabs did not restore the previously selected remote device after app restart.
3.0.27 18/11/2025
- [OPT] Added Yaml type to HTTP testing.
- [OPT] Moved the request body tab before the request header tab in HTTP testing.
- [OPT] In HTTP testing, automatically switch to the request body tab when a request body exists.
- [OPT] In HTTP testing, the protocol version information is displayed in the metrics tab.
- [OPT] Added import path configuration for gRPC and Protobuf.
- [OPT] gRPC testing supports inputting bytes type data as an int array.
- [OPT] In gRPC testing, detailed message conversion error information is displayed.
- [OPT] In the gRPC testing settings, added options for inputting and outputting bytes type data as an array.
- [OPT] gRPC and Protobuf data in the Raw tab now display Unicode characters instead of escape sequences.
- [OPT] Added an entry icon in the gRPC and Protobuf views to open the configuration definition.
- [OPT] Adjusted the display strategy when gRPC service and method are too long.
- [OPT] In HTTP testing, the status code, timing, and data size information is displayed in the subtitle.
- [OPT] The HTTP capture details tab bar will no longer display the request method, protocol, and status code labels.
- [FIX] A bug where the help document link address on the Protobuf definition configuration page was incorrect.
- [FIX] A bug where the Proto specification file references were not handled correctly.
- [FIX] A bug where the file selector did not correctly restrict the selectable file types.
more Version 3.3.2 1 day ago
Data Linked to You The following data may be collected and linked to your identity:
Data Not Linked to You The following data may be collected but it is not linked to your identity:
