Participants argue that smart home devices should operate locally to prevent vendor lock-in, with some demanding refunds for cloud-dependent hardware while others note consumer preference for convenience over technical complexity. A secondary debate concerns the use of LLMs in generating discussion content, where users criticize AI text as inauthentic and complain about such posts.
442 readable replies · Supporting reply 1 · Supporting reply 2 · Supporting reply 3 · Supporting reply 4alufers
mitmproxy2swagger
HTML2022–2026
alufers / mitmproxy2swagger
mitmproxy2swagger
Automagically reverse-engineer REST APIs via capturing traffic
9Distinct people
9Mentions
0Explicit recommenders
9.7KGitHub stars
What to know before exploring
What it is
Automagically reverse-engineer REST APIs via capturing traffic
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.
Mentions over time
HN mentions by year9 dated mentions
Observed mentions: 2022-05-12 13:49:02 UTC to 2026-03-30 06:45:58 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 4 | 1 | 3 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
9 sourcesWAwazHFsRy·Mar 30, 2026Submission
Show HN: CLI to order groceries via reverse-engineered REWE API (Haskell)
I just had the best time learning about the REWE (German supermarket chain) API, how they use mTLS and what the workflows are. Also `mitmproxy2swagger`[1] is a great tool to create OpenAPI spec automatically.
And then 2026 feels like the perfect time writing Haskell. The code is handwritten, but whenever I got stuck with the build system or was just not getting the types right, I could fall back to ask AI to unblock me. It was never that smooth before.
Finally the best side projects are the ones you actually use and this one will be used for all my future grocery shopping.
[1]https://github.com/alufers/mitmproxy2swagger
205 points · Open discussionOnce you have the OpenAPI specs, you can build an MCP server on top of that. Automatically. You don't have them ? There's MITM2Swagger[0] that will do it's best to infer it. Probably you'll need some manual adjustments, but still. And MCP servers can now be integrated with any LLM, not only Anthropic. While I appreciate your approach, how do you fight the MCPs?
[0] https://github.com/alufers/mitmproxy2swagger
In Show HN: Superglue – open source API connector that writes its own code1) Having the TLS stack trust a "custom CA" provided by any number of debug tools (like mitmproxy or OWASP Zap) is relatively simple operation and can be done by anyone on any OS as long as you have admin/root.
2) There are a number of additional debug ways to decode the encryption from an application endpoint (e.g. https://wiki.wireshark.org/TLS and look at SSLKEYLOGFILE environment variable supported by most major TLS stacks and all major browser). Since MitmProxy2Swagger also supports HAR format ingest (e.g. https://github.com/alufers/mitmproxy2swagger#HAR ), this can easily be exported from any browser built-in debug tools (which also removes the encryption).
Modern TLS is great, but there are limitations on what it actually provides especially around the CA trust model. These mitm tools are not designed to take random traffic from
Read the rest
the internet you intercepted, they require privileged endpoint access to enable specific debug features or configurations.
MitmProxy2Swagger: Automagically reverse-engineer REST APIs
590 points · Open discussionHow does it compare to mitmmitmproxy2swagger?
https://github.com/alufers/mitmproxy2swagger
In Show HN: API Parrot – Automatically Reverse Engineer HTTP APIsReminds me of https://github.com/alufers/mitmproxy2swagger which I discovered from this thread https://news.ycombinator.com/item?id=31354130
I generated some specs from that!
I ran into trouble keeping them up to date.
In Show HN: Auto-generate an OpenAPI spec by listening to localhostThis reminds me a lot of:
https://github.com/alufers/mitmproxy2swagger
However, having the capability delivered in a browser extension is extremely handy!
In Show HN: OpenAPI DevTools – Chrome extension that generates an API specAre there APIs you have in mind?
One tool we have under development is a tool (might end up being a chrome extension) that will analyze web requests to turn them into a spec.
There are a few tools that are similar in purpose, though I've only seen ones based on proxying, rather than chrome's network request recording.
- https://github.com/alufers/mitmproxy2swagger
- https://github.com/adafruit/openapi-mitm
In Show HN: Stripe-quality API client libraries with a single button clickShow HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
691 points · Open discussion