Rockxy

Open-source native macOS debugging proxy for HTTP/HTTPS, WebSocket and GraphQL.

Download Rockxy

macOS package (.dmg), architecture unlisted — verify before installing

Getting a "can't verify the developer" warning?

If you see a warning on first launch, go to System Settings > Privacy & Security and click "Open Anyway". Open source software usually isn't signed with an Apple developer certificate, which is normal.

Clicking "Download" takes you to a source confirmation page first; the download starts after confirmation.

About Rockxy

Open-source native macOS HTTP debugging proxy — intercept HTTPS, inspect APIs, mock responses, debug WebSocket & GraphQL. Community-driven. For developers, by developers.

See incorrect information? Tell us

Risk notice

Rockxy is still in early development (current release v0.34.0) and features may change. To decrypt HTTPS traffic, it requires installing a local root certificate and a privileged helper, which are system-level security-sensitive components. The dmg is distributed via GitHub Releases and no notarization status is explicitly confirmed; macOS may block it by default. Use with caution and keep the generated root CA private key protected.

Who it's for

macOS developers who need to debug HTTP, HTTPS, WebSocket, or GraphQL traffic
Mobile developers inspecting network activity from iOS devices and simulators
Developers who want to mock responses, set breakpoints, or rewrite requests during testing
Developers working with AI or Web3 APIs who need protocol-aware traffic inspection
Teams or individuals preferring a local-first, auditable open-source alternative to commercial proxies

Who it's not for

Users who only need browser DevTools and do not require a system-level proxy
Developers requiring Windows or Linux support (Rockxy is macOS-only)
Users who are unwilling to install a root certificate or configure proxy settings
Teams that require a stable 1.0+ release rather than an actively evolving 0.x version

Install guide

Download the installer from OpenSoftHub: Rockxy-0.34.0-51.dmg (recommended). There is only a macOS package — no per-architecture builds are provided.
Verify the checksum (optional but recommended). Download Rockxy-0.34.0-51.dmg.sha256 and run:

   shasum -a 256 Rockxy-0.34.0-51.dmg

Compare the output with the contents of the .sha256 file.

Install: open the dmg and drag Rockxy.app into the Applications folder.
First launch: if macOS says 'cannot be opened because it is from an unidentified developer', right-click Rockxy.app and select Open, or go to System Settings > Privacy & Security and click 'Open Anyway'.
Initialization: after launching, follow the welcome wizard to install the root CA certificate, the helper tool, and activate the proxy. Your admin password may be required.
Proxy configuration: make sure the macOS network proxy is enabled for Rockxy (usually configured automatically), or use the in-app Developer Setup Hub for client-specific instructions.

FAQ

Is Rockxy free?

Yes, Rockxy is open source under AGPL-3.0 and can be used, audited, and modified free of charge. If you redistribute a modified version, you must share the source under the same license.

Which macOS versions are supported?

Rockxy requires macOS 14.0 or later. There is no Windows or Linux build.

How do I update Rockxy?

Releases are published on the project's GitHub Releases page. Download the latest .dmg and replace the app in your Applications folder. Quit the running version before installing.

Why does Rockxy ask me to install a certificate?

To decrypt HTTPS traffic, Rockxy generates a local root CA and installs it into your keychain as trusted. This is required to inspect encrypted content. Without it, HTTPS requests remain encrypted; you would only see host and port information.

How do I verify the downloaded file?

Use the provided SHA256 checksum file. In the install guide, we show how to run shasum -a 256 in Terminal to verify the .dmg.