mimic

mimic turns a mobile or web app's private API into a Python client. You capture your own traffic through mitmproxy (an iPhone via proxy, web apps via copied cURL or a HAR file), it pulls out the tokens and session details, and Claude Code (or opencode) writes a plain Python client you can script against. MIT licensed, from Divy Srivastava of Deno.

Clone the repo and run sh install.sh, which installs uv and mimic in an isolated environment; mitmproxy launches on first record. Don't use the manual uv tool install mimic-client line: that package isn't on PyPI, so the name is open for anyone to grab. The flow is record, hosts, learn, then gen, with a doctor command to check setup.

Free, no paid tier; code generation uses your own Claude Code or opencode login. Solo developers automating their own accounts are the whole audience. It replays your session, and the README is explicit: your own accounts only, and each app's terms are your problem.

The catch: it ships mimic unpin, a Frida-based certificate-pinning bypass that names banking apps and Instagram as examples, which takes it further into terms-of-service trouble than the pitch suggests. Apps using sender-constrained tokens (DPoP) still block it. And the repo has been quiet since late July.