littledivy's Mimic Uses Claude to Generate Python Clients from App Traffic
Summary
littledivy's mimic captures app traffic through mitmproxy and has Claude generate a plain Python client, so users call mobile APIs as library calls. The MIT-licensed repository has 2,600 stars. Certificate pinning blocks capture, and DPoP sender-constrained tokens defeat replay entirely.
Key Points
- mimic unpin <ipa|bundle-id> sets up a Frida-based bypass for certificate pinning, according to the project's pinning documentation.
- HAR file import works as a capture backend, added in pull request 5 on July 15, 2026.
- Non-idempotent requests are not retried unless the caller explicitly passes refresh=True.