Recipe

See where your apps connect

Kilobat shows the open connections of each app and the country where each address is registered.

Connections globe: Kilobat ProCLI: freeChecked: 29 October 2026

In the app

Open the dashboard and click the Connections tab. This needs Pro.
Read the busiest countries in the list. Click a country to filter the connections.
Click an app's row in the app list. Its panel shows its open connections with data and country.
Right-click a connection to block that host for the app or for every app. Blocking needs the network filter.

With the CLI

List the open sockets of every process.
```
kilobat destinations
```
Output Each socket with its process ID, process, transport, local and remote address, and state.
List the sockets of one process.
```
kilobat destinations --pid 4242
```
Read what an app's developer says it connects to.
```
kilobat access-policy com.raycast.macos
```

Block a host for one app.

kilobat block-host ads.example.com --app com.example.App

Through MCP

Connect the MCP server once with claude mcp add kilobat -- kilobat mcp. For other clients, see the docs. Then an agent can call these tools. Tools that change settings tell the agent to ask you first.

Tool and arguments	What it does
`list_connections` `{"pid": 4242}`	Open sockets, for one process or all.
`get_access_policy` `{"app": "com.raycast.macos"}`	The declared connections, their purpose and what breaks if you deny them.
`block_destination` `{"target": "ads.example.com", "app": "com.example.App"}`	Blocks a domain, IP or CIDR range for one app or every app.

Good to know

The country comes from the DB-IP database in the app. No address leaves your Mac.
It is the country where the address is registered. A CDN or VPN address shows its owner's country, not the server's location.
Check the access policy before you block a domain that an app needs.

Sources

Sources checked on 29 October 2026. Man pages are the ones installed with macOS; open one with man <name> in Terminal.