fiddler-mcp

The MCP uses `mitmdump` with the `--set ssl_insecure=true` flag. This disables SSL/TLS certificate verification for upstream connections, which can make the proxy susceptible to Man-in-the-Middle attacks if used for general browsing on untrusted networks. However, for its stated purpose of development and API analysis, this is sometimes a necessary configuration. Captured flows and extracted credentials (API keys, tokens, cookies) are stored locally in unencrypted JSON files in `~/.fiddler-mcp/flows.json`. While this is an expected behavior for a tool of this nature, it means these files should be protected with appropriate system-level security, as their compromise could lead to credential leakage.