Product Introduction
Definition: Kampala by Zatanna is a high-performance reverse engineering and traffic interception platform designed to deconstruct and automate workflows within websites, mobile applications, and desktop software. It functions as a sophisticated man-in-the-middle (MITM) proxy and automation engine that enables developers to observe, capture, and replicate complex network requests in real-time.
Core Value Proposition: Kampala exists to bridge the gap between closed software ecosystems and programmable interfaces. By providing complete visibility into HTTP/S traffic, the platform allows users to transform any manual web or app interaction into a stable, dependable API. It specifically targets the technical debt and integration hurdles associated with modern authentication stacks, including SSO, OAuth, and multi-factor authentication (MFA), by automating the "warmth" of session cookies and tokens for seamless agentic workflows.
Main Features
Full Traffic Interception: Kampala provides a real-time monitoring environment for every HTTP/S request and response generated by any application or browser. Unlike standard browser developer tools, it captures traffic from native macOS and Windows applications (via waitlist), allowing users to inspect the underlying API calls of desktop and mobile software that are typically obfuscated.
Automated Auth Chain Tracing: This feature autonomously maps the lifecycle of security credentials. It identifies and tracks tokens, cookies, and session headers across multi-step login sequences. By tracing the auth chain, Kampala can handle complex handshakes like SSO redirects and MFA prompts, ensuring that the resulting automation maintains authorized access without manual intervention.
Flow Replay & Exporting: Kampala captures sequential network interactions and converts them into stable automation scripts. Users can complete a workflow once—such as purchasing a product or generating a report—and the platform will package that sequence into a replayable format. These flows can be exported to a local environment via an MCP (Model Context Protocol) or an agent harness, or hosted as a managed API on Zatanna’s servers.
HTTP/TLS Fingerprint Preservation: To prevent detection by anti-bot and security systems, Kampala maintains the original HTTP/TLS fingerprint of the intercepted traffic. By mimicking the specific cipher suites, headers, and handshakes of the source application, the automated requests appear identical to genuine user traffic, ensuring high reliability and avoiding IP or session blocking.
Problems Solved
Pain Point: Obfuscated or Non-Existent APIs. Many modern web and mobile applications do not provide public APIs for developers. Kampala solves this by allowing users to reverse engineer the internal APIs used by the applications themselves, making data and functionality accessible for integration.
Target Audience: The primary users include AI Engineers building autonomous agents, Backend Developers integrating legacy systems, Security Researchers performing vulnerability assessments, and Data Engineers who require high-fidelity web scraping and automation capabilities.
Use Cases:
- Legacy System Modernization: Turning old, UI-only internal software into programmable APIs for modern internal systems.
- AI Agent Tooling: Providing LLM-based agents with the ability to perform actions inside authenticated web environments (e.g., "Book a flight" or "Update CRM").
- Mobile App Analysis: Extracting hidden API endpoints from iOS or Android applications to sync data with third-party dashboards.
- Automated QA Testing: Replaying complex user journeys to ensure backend reliability under specific session conditions.
Unique Advantages
Differentiation: Traditional automation tools like Selenium or Puppeteer rely on DOM manipulation, which is fragile and easily detected. Kampala operates at the network layer, making it more robust against UI changes. Compared to standard proxies like Charles or Fiddler, Kampala is specifically built for automation, offering one-click API hosting and native integration with AI agent frameworks.
Key Innovation: The integration of the Model Context Protocol (MCP) and agent harness allows for immediate local execution. The "cookie warming" technology is a significant innovation, as it maintains active, authenticated sessions in the background, solving the persistent problem of session expiration in automated scripts.
Frequently Asked Questions (FAQ)
Can Kampala by Zatanna bypass Multi-Factor Authentication (MFA)? Kampala handles MFA by allowing the user to complete the authentication process once while the tool is active. It then captures the resulting session tokens and cookies, tracing the auth chain so that subsequent automated requests can use the "warm" credentials to bypass repetitive MFA prompts until the session expires or requires renewal.
Does Kampala support mobile app reverse engineering? Yes. Kampala is designed to intercept traffic from mobile apps as well as websites and desktop applications. By routing mobile device traffic through the Kampala proxy, developers can see every HTTP/S request the app makes, allowing them to document and replicate the app's internal API logic.
What is Fingerprint Preservation and why is it important for SEO and scraping? Fingerprint preservation ensures that the TLS handshake and HTTP headers of your automated requests match those of a real browser or native app. This is critical for bypassing advanced bot protection services (like Cloudflare or Akamai) that analyze network fingerprints to distinguish between human users and automated scripts, thereby ensuring higher success rates for data extraction and automation.
