OS notes
- macOS: Trust the local certificate in Keychain if your proxy requires TLS interception
- Linux: Trust the local certificate in the CA store used by the app or browser that makes the request
- Windows: Trust the local certificate in Windows Certificate Manager before you test the tool
- WSL: Remember that certificate trust inside WSL and trust in Windows are separate
Use this path only when needed
This flow is heavier than a direct provider configuration. Start with the direct guides first and move here only when the tool blocks custom endpoint settings.Typical MITM flow
- Start the local proxy service that forwards requests to
appleai.codes. - Trust the local certificate or network interception layer if the tool requires it.
- Map the tool’s expected upstream model names to your routed
appleai.codesmodel paths. - Confirm one request succeeds before you use the tool for real work.
Good candidates for this flow
- GitHub Copilot chat surfaces that do not expose provider settings
- Kiro or other hosted IDE agents that hardcode the upstream API
- Products that accept only the vendor’s default hostname