Table of Contents
1. Getting Started
D Inspector uses a local on-device VPN to route your network traffic through a built-in proxy. No external server is involved — everything stays on your device.
- Download D Inspector from the App Store. It's free to download and works on iPhone, iPad, and Mac.
- Open the app and tap the VPN toggle to enable the local proxy. iOS will ask you to allow the VPN configuration — this is a local-only VPN that never connects to external servers.
- Start browsing or using apps. HTTP traffic will immediately appear in the Traffic list in real time.
The VPN only routes traffic through the local proxy on your device. No data ever leaves your device or is sent to Nekosoftech servers.
2. HTTPS Inspection Setup
To inspect encrypted HTTPS traffic, you need to install and trust the D Inspector Root CA certificate.
- Open D Inspector and go to Settings → Certificate.
- Tap "Install Certificate". This will open the iOS Settings app to install the profile.
- Go to Settings → General → About → Certificate Trust Settings and enable full trust for the D Inspector Root CA.
- Go to Settings → SSL Proxying List in D Inspector and add the domains you want to inspect (e.g.,
*.api.example.com).
The Root CA private key is generated and stored securely on your device only. It never leaves your device. Only add domains you own or have authorization to inspect.
3. Traffic Capture & Filtering
Once the VPN is active, D Inspector captures all HTTP/HTTPS traffic from every app on your device. The Traffic list provides powerful tools to organize what you see:
Search
Real-time search across URL, headers, and body content.
Filter
Filter by HTTP method, status code range, content type, or domain.
Pin
Pin important requests to keep them visible at the top of the list.
Grouping
Group related requests by domain or path for organized debugging.
4. Developer Tools
D Inspector includes built-in developer utilities accessible from the Tools tab:
JWT Decoder
Decode and inspect JWT tokens inline — view header, payload, and signature.
Base64 Encoder/Decoder
Encode or decode Base64 strings directly within the app.
URL Decoder
Decode URL-encoded strings to readable format.
Compose Request
Build HTTP requests from scratch — like a mini Postman on your device.
5. Rules & Automation
Rules let you automatically modify, redirect, or block requests matching specific patterns:
Breakpoints
Pause requests or responses before they're sent. Edit headers, body, or status code on the fly.
Map Local
Return custom local responses (JSON, text, images) instead of hitting real servers.
Map Remote
Redirect requests to different hosts — point to staging or local dev servers.
Blocklist
Block requests by domain or URL pattern with wildcard support.
6. Scripting
Write custom scripts to automate request and response modifications. Scripts run in a sandboxed environment and can:
- Modify headers — Inject, remove, or transform request/response headers dynamically.
- Transform body content — Parse and modify JSON payloads, inject mock data, or strip sensitive fields.
- Pattern matching — Scripts trigger only on requests matching your defined URL patterns.
- Test Run — Test your script locally before activating it on live traffic.
7. Export & Share
D Inspector supports multiple export formats for sharing and offline analysis:
HAR Export
Export full traffic sessions as standard HAR files compatible with Chrome DevTools and other tools.
cURL Export
Copy any request as a cURL command for quick replay in terminal.
8. Widgets & Live Activity
Monitor your proxy status without opening the app:
Home Screen Widget
See VPN status and TLS mode at a glance. Toggle the proxy from your Home Screen.
Live Activity
Real-time proxy status on your Lock Screen and Dynamic Island while debugging.
9. FAQ
Does D Inspector send my data to external servers?
No. All traffic analysis happens entirely on your device. The VPN is local-only and does not connect to any external server.
Is a Mac required to use D Inspector?
No. D Inspector works standalone on iPhone and iPad. A Mac version is also available for macOS users.
Can I inspect traffic from any app?
Yes. When the local VPN is active, D Inspector captures traffic from all apps on your device. For HTTPS traffic, you need to install the certificate and add domains to the SSL Proxying List.
Is my data safe?
Yes. All captured data, certificates, and settings are stored in the app's private container on your device. You can also enable Biometric Lock (FaceID/TouchID) and auto-clear history for extra security.