motim 0.2.0

MOTIM (Model Over Traffic — Intercept & Manage) - Proxy for capturing, querying, and replaying API traffic

motim

Model Over Traffic — Intercept & Manage

Browse any website. motim captures every request. Now your AI agent can replay them — auth included.

pip install motim
motim init          # trust CA cert, create config
motim start         # proxy on localhost:8080
# browse normally...
motim search --host api.notion.com
motim replay 42     # exact same request, same cookies, same tokens

What it does

motim runs a local MITM proxy that records full HTTP(S) exchanges — method, URL, headers, cookies, request body, response body — into a local SQLite database (~/.motim/motim.sqlite3).

Then you search, inspect, replay, mutate, diff, and probe those exchanges from the CLI or Python. Auth just works because motim captured the real headers your browser sent.

Who it's for

• AI agents that need to call authenticated APIs without manual credential wiring
• Security researchers probing endpoints, diffing responses, finding hidden parameters
• Developers reverse-engineering undocumented APIs or debugging request flows
• CTF players replaying complex auth flows

Usage

Search and inspect

motim search --host api.example.com --status 200 --method POST
motim show 42                    # full request + response
motim cat 42                     # just the response body (pipe to jq)
motim cat 42 --request           # just the request body
motim export 42                  # as a runnable curl command
motim endpoints --service notion # discovered endpoint patterns

Replay and mutate

motim replay 42                                          # as-is
motim replay 42 --set-header "x-foo=bar"                 # add/override headers
motim replay 42 --drop-header "authorization"            # strip headers
motim replay 42 --patch-json '{"page_size": 50}'         # patch JSON body
motim replay 42 --transport curl --impersonate chrome    # browser TLS fingerprint

Probe (automated mutation testing)

motim probe 42 \
  --patch-json '{"admin": true}' \
  --patch-json '{"role": "superuser"}' \
  --drop-header "x-csrf-token" \
  --json

Replays a baseline, then each mutation. Diffs every result against the baseline.

Timeline

motim around 42 --window 60      # exchanges ±60s from exchange 42
motim session 42 --gap 120       # session slice (gap-based splitting)
motim diff 42 43                 # diff two exchanges
motim replay-seq 10 11 12 13     # replay a sequence in order

JS endpoint extraction

motim linkfinder --host app.example.com --regex '^/api/'
motim js-endpoints --service example

Extracts API routes from captured JavaScript bundles — finds endpoints before you click the UI path that triggers them.

Everything else

motim services                # list captured services
motim export-yaml notion      # YAML summary export
motim rebuild-index           # rebuild derived indexes
motim doctor                  # health check
motim config show             # view config

Python library

from motim import get, Client, ExchangeDB

# One-liner
r = get("api_notion_com", "/v1/users/me")

# Client
client = Client("notion")
r = client.get("/v1/users/me")

# Direct DB access
with ExchangeDB("~/.motim/motim.sqlite3") as db:
    results = db.search_exchanges(host="api.notion.com", limit=10)

Agent integration

motim ships a skill file so AI agents know how to use it. All commands support --json for machine-readable output.

motim init                  # installs to ~/.claude/skills/motim/ (Claude Code)
motim agents-md             # writes AGENTS.md for Codex, opencode, etc.

Setup

motim init does everything: creates ~/.motim/, generates a mitmproxy CA cert, trusts it in your system keychain, and installs the agent skill.

After motim start, point your browser at localhost:8080. Use SwitchyOmega or set it system-wide.

Config lives at ~/.motim/config.yaml — header profiles, timeouts, domain filters. Run motim config show to see it.

Development

git clone https://github.com/vaibhavk97/motim.git
cd motim
pip install -e ".[dev]"
pytest

License

MIT