caido

name: caido description: "Connect to a Caido MCP instance for proxy traffic inspection and request comparison."

Caido

Use this when a bug bounty task needs Caido MCP traffic, project history, request inspection, or request comparison.

If Ryushe says "look at the request ", inspect the matching request in Ryushe's proxy by default unless he specifies another proxy, lane, browser profile, or MCP endpoint. If an agent uses that request to test an application, the active replay/testing lane remains the agent's own proxy by default; use the Ryushe-lane request as shape evidence only. The only active-testing exception is when the agent is on the same host as Ryushe's proxy and my proxy resolves to localhost from that runtime.

For replaying a known request shape, do not require Caido MCP by default. Prefer direct HTTP replay with curl, httpx, or a focused script. Use the agent's local MCP/proxy replay only when direct replay fails because the server expects browser/proxy-like behavior, such as Cloudflare/bot challenges, TLS/header fingerprint issues, browser-only flow state, or missing JS-generated tokens.

MCP URL

Default to:

http://localhost:3333/mcp

If the user gives a hostname or IP address, use:

http://<hostname-or-ip>:3333/mcp

If the user gives a full URL, use that exact URL.

Workflow

1. Resolve the MCP URL from the user's request.
2. Check connectivity before assuming Caido is available.
3. If the task mentions PwnFox, a colored browser/profile/session, or a phrase like "Red session", load /pwnfox and filter history by X-PwnFox-Color: <color>.
4. If unreachable, report whether it looks like host, firewall, bind-address, or port exposure trouble.
5. For comparisons, keep Caido projects isolated and compare equivalent workflows request-by-request.
6. For one live owned-session request capture or intercept/modify testing, route to /single-request-grabber after Caido connectivity is confirmed.
7. For live browser exploration, route to /chromium-test; the browser should attach to the agent's local proxy so browser-generated requests are observable.