This is pretty useful, am I right in assuming that this currently will not track payloads sent to MCP servers talking to Claude over stdio (Claude-> Stdio -> MCP Process -> Network)?

If yes, that might be an interesting problem to solve right? Given that MCP server itself could be sending data out to server to do something.

Curious how this handles apps that do certificate pinning: does it just fail closed and pass that traffic through unclassified, or is there a workaround?

[flagged]