Features
- Compromised CA protection: Proxyman refuses HTTPS and WebSocket servers whose certificate chain uses one of the eMudhra intermediate CAs whose private keys leaked in October 2026, also behind an external proxy. The request is never sent, and the response, Compose, Repeat and the Connection Log say why.
Improvements
- Script Editor: Tools > Scripting on a WebSocket flow adds onWebsocket() with examples to edit, drop and send messages. The message fields, sendToClient(), sendToServer() and abort() autocomplete and explain themselves on hover, like on macOS.
- MCP: The scripting docs cover the WebSocket examples and explain that only the first matching script runs.
Bug Fixes
- Fixed: WebSocket error messages no longer end with "undefined".