caido-mode

Full-coverage CLI for Caido's API, built on the official @caido/sdk-client package. Covers: All traffic goes through Caido, so it appears in the UI for further analysis. Cookies and auth tokens can be huge - session cookies, JWTs, CSRF tokens can easily be 1-2KB. Rather than manually copy-pasting: The setup command validates the PAT via the SDK (which exchanges it for an access token), then saves both the PAT and the cached access token to ~/.claude/config/secrets.json . Subsequent runs load the cached token directly, skipping the PAT exchange. The SDK uses a device code flow internally — the PAT auto-approves it and receives an access token + refresh token. A custom SecretsTokenCache (implementing the SDK's TokenCache interface) persists these tokens to secrets.json so they survive across CLI invocations. Auth resolution: CAIDO_PAT env var → secrets.json PAT → error with setup instructions Located at ~/.claude/skills/caido-mode/caido-client.ts .