motim

Model Over Traffic — Intercept & Manage

A search, inspect, and replay layer over network traffic for AI agents.

motim runs a local proxy that captures HTTP(S) traffic into a SQLite database. Agents query it via CLI to understand how web services work and operate on them — no API docs, no credential wiring, no guesswork.

Browser                              Agent
   │                                   │
   ▼                                   ▼
┌──────────┐    ┌────────────┐    ┌──────────────┐
│  motim   │───▶│  SQLite    │◀───│  search      │
│  proxy   │    │  (traffic) │    │  inspect     │
│  :8080   │    │            │    │  replay      │
└──────────┘    └────────────┘    └──────────────┘

You browse a site. motim records every request and response. Now your agent can search that traffic, understand the API, and replay requests — with the exact auth, headers, and body the browser used.

Examples

Agent discovers how an API works:

motim endpoints --service example --json
motim search --host api.example.com --method POST --json
motim show 42 --json    # full request + response

Agent replays a captured request:

motim replay 42 --json
motim replay 42 --patch-json '{"page_size": 50}' --json
motim replay 42 --set-header "x-custom=value" --json

Agent investigates a failure:

motim search --host api.example.com --status 403 --json
motim diff 42 43 --json
motim around 42 --window 60 --json    # nearby exchanges

Agent probes an endpoint:

motim probe 42 \
  --patch-json '{"admin": true}' \
  --drop-header "authorization" \
  --json

Agent extracts endpoints from JavaScript:

motim linkfinder --host app.example.com --regex '^/api/' --json

Every command supports --json for machine-readable output.

Install

pip install motim

Optional extras:

pip install 'motim[curl]'        # browser TLS fingerprinting
pip install 'motim[linkfinder]'  # JS endpoint extraction

Getting started

motim init          # create dirs, trust CA cert, install agent skill
motim start         # start proxy on localhost:8080
# point your browser at localhost:8080 (use FoxyProxy or set system-wide)
# browse normally — traffic flows into ~/.motim/motim.sqlite3

Agent integration

motim ships a skill file that teaches agents how to use it.

motim init              # auto-installs skill for Claude Code
motim agents-md         # writes AGENTS.md for Codex, opencode, etc.

The skill gives agents a decision tree: when to search, when to replay, when to probe, how to handle auth failures. Agents use the CLI with --json — no Python SDK needed.

CLI reference

# Proxy
motim start                     # start capture proxy
motim stop                      # stop proxy
motim status                    # check proxy status
motim doctor                    # health check

# Search & inspect