Skip to content

TonyPack

TonyPack is TonyProxy’s own bundle format for exporting a full session — every request, response, and body — as a single file you can hand to a teammate or archive.

Why not just HAR

HAR is great for interop with other tools, but it’s plain text — anyone with the file can read every header, token, and body inside it. TonyPack encrypts the whole bundle with a password you set at export time (AES-GCM, key derived from your password via PBKDF2), so a .tonypack file sitting in a Slack channel or email thread isn’t a plaintext leak of whatever you captured.

Export

File → Export Traffic… (⇧⌘E) → choose TonyPack → set a password. The exported file is opaque without that password — TonyProxy (or anyone else) can’t recover it if you lose it.

Import

Open a .tonypack file (double-click, or File → Import TonyPack…), enter the password, and it loads as a new session with all its original requests/responses/bodies intact.

When to use it

  • Sharing a repro case with a teammate that includes sensitive data (auth tokens, PII in bodies)
  • Archiving a session for later without leaving it in the app’s live storage
  • Anywhere you’d otherwise have to manually redact a HAR file before sharing