Rye’s local proxy is the network enforcement point for model traffic.
By default, rye up starts the proxy on:
Start the proxy
Start with CA installation:
Start on a custom address:
Stop the proxy:
Intercepted domains
Rye intercepts common AI tool and model-provider domains by default, including OpenAI, Anthropic, Claude, Cursor, Windsurf, ChatGPT, and Gemini domains.
Override the list:
Intercept everything:
Manage stored patterns:
Manual proxy environment
For CLI tools, start Rye and set environment variables before launching the agent:
rye wrap handles these variables for the child process.
CA management
Rye generates a local CA certificate and private key in its log directory.
Protect the Rye CA private key. Any local CA trusted by a machine can sign certificates that the machine accepts. Install it only on devices you own or administer.
System proxy setup
Use automatic system proxy setup when an app does not inherit shell environment variables:
On macOS, you can use a PAC file so only matching domains route through Rye:
rye down restores proxy settings that Rye configured.
API shim
Use the API shim when a client supports a custom model API base URL. This avoids MITM certificate setup for that client.
Start an Anthropic-compatible shim:
Point a compatible client at the shim:
Use MITM proxying for broad compatibility. Use the API shim when the client exposes a reliable base URL setting. 
