Debug the app,
See every request your iOS or Android app makes — no Mac, no cable, no desktop proxy to configure. Install the app, flip capture on, and traffic streams to your dashboard live.
Mobile debugging usually means
A desktop MITM proxy needs the phone on the same Wi-Fi and a manual proxy/CA setup — which breaks the moment you're on cellular, tethered, or away from your desk.
For mobile engineers and QA who need to see exactly what a request or response looked like on a real device — an auth flow that only fails on-device, a flaky endpoint, or a backend team asking "what did the app actually send?"
Busymate's iOS and Android apps run a system-wide capture engine directly on the phone — a NetworkExtension VPN on iOS, VpnService on Android. There's nothing to tether and nothing to trust on a laptop: the phone captures, decrypts, and streams on its own.
Capture on the device,
The phone is the whole capture stack — no companion app on a second machine, no shared network required.
System-wide, not app-only
Every app on the phone is captured, not just the one you're building — DNS and TCP alike, system-wide via the on-device VPN.
You decide what gets decrypted
TLS is decrypted only for hosts you add to the per-device SSL list. Spot an encrypted entry in the dashboard, enable it in one click, and the phone picks up the change over Realtime within seconds — no rebuild.
Live on your dashboard
Every request streams to the dashboard in real time — filter, tag, mock, breakpoint, or export to HAR from the same feed a teammate is watching.
- iOS
- Android
- Dashboard
- MCP
From install to
Entirely on the phone — no desktop setup.
- 01
Install and pair
Install Busymate DevTools from the App Store or Google Play and sign in. The phone pairs to your workspace and appears in the dashboard immediately.
- 02
Turn capture on
Flip the VPN toggle. Every request the phone makes — your app, a third-party SDK, the OS itself — starts landing in the feed.
- 03
Add a host to the SSL list, live
See an encrypted entry for your API host? Add it from the dashboard. The phone decrypts that host within seconds — no reinstall, no rebuild.
How it works
The same three moves on iOS and Android — the capture engine differs, the workflow doesn't.
- 01
Install, sign in, pair
Install Busymate DevTools from the App Store or Google Play and sign in with Apple, Google or email. Signing in pairs the phone to your workspace, so it appears in the dashboard's device list before you've captured anything.
- 02
Trust the certificate, then flip capture on
The app generates a certificate authority just for you and walks you through trusting it — on iOS via a configuration profile in Settings, on Android as a user certificate. Then turn capture on: the on-device VPN starts routing every app's traffic through the app, and the feed begins to fill.
- 03
Pick the domains to decrypt, from either end
Add your API host to the SSL list on the phone, or click the padlock next to an encrypted entry in the dashboard. Either way the phone picks the change up within seconds, and the next request from that host arrives decrypted — headers, query, timing and full bodies.
Before you install,
Do I need a Mac, a cable, or a shared Wi-Fi network?
No. The phone captures, decrypts and streams on its own — over cellular or any Wi-Fi. Nothing runs on a laptop, so the setup survives leaving your desk.
Does it capture only my app, or everything on the phone?
Everything: the on-device VPN sees every app's DNS and TCP traffic. Decryption is narrower on purpose — only the domains on your SSL list are opened; everything else passes through still encrypted.
What about apps that pin their certificate?
An app that pins its own certificate will not decrypt through the SSL list — on iOS, Android or the proxy. You still see that the connection happened, but not its contents. That is a real limit, and we say so rather than hide it.
Can a teammate see the same feed?
Yes. Captures sync to your workspace dashboard, where anyone with access can filter, tag, add a breakpoint or export the exchange as a HAR file — from the same feed you are watching on the phone.
See what your app is really doing,
Install the iOS or Android app and capture your first decrypted request in minutes.