---
title: "See where your apps connect · Kilobat Recipes"
url: "https://kilobat.app/guides/recipes/see-where-apps-connect"
description: "See every open connection of your Mac on a globe by country, list the sockets of one process, and read the connections an app's developer declares."
---

Recipe

# See where your apps connect

Kilobat shows the open connections of each app and the country where each address is registered.

Connections globe: Kilobat Pro · CLI: free · Checked: 29 October 2026

## In the app

1. Open the dashboard and click the Connections tab. This needs Pro.
2. Read the busiest countries in the list. Click a country to filter the connections.
3. Click an app's row in the app list. Its panel shows its open connections with data and country.
4. Right-click a connection to block that host for the app or for every app. Blocking needs the network filter.

## With the CLI

1. List the open sockets of every process.

   ```
   kilobat destinations
   ```

   Output Each socket with its process ID, process, transport, local and remote address, and state.
2. List the sockets of one process.

   ```
   kilobat destinations --pid 4242
   ```
3. Read what an app's developer says it connects to.

   ```
   kilobat access-policy com.raycast.macos
   ```
4. Block a host for one app.

   ```
   kilobat block-host ads.example.com --app com.example.App
   ```

## Through MCP

Connect the MCP server once with `claude mcp add kilobat -- kilobat mcp`. For other clients, see [the docs](https://kilobat.app/docs#agents). Then an agent can call these tools. Tools that change settings tell the agent to ask you first.

| Tool and arguments | What it does |
|---|---|
| `list_connections` `{"pid": 4242}` | Open sockets, for one process or all. |
| `get_access_policy` `{"app": "com.raycast.macos"}` | The declared connections, their purpose and what breaks if you deny them. |
| `block_destination` `{"target": "ads.example.com", "app": "com.example.App"}` | Blocks a domain, IP or CIDR range for one app or every app. |

## Good to know

- The country comes from the DB-IP database in the app. No address leaves your Mac.
- It is the country where the address is registered. A CDN or VPN address shows its owner's country, not the server's location.
- Check the access policy before you block a domain that an app needs.

## Sources

- [Kilobat docs: Where it connects](https://kilobat.app/docs#map)
- [Kilobat docs: Blocking domains and IPs](https://kilobat.app/docs#blocklist)
- [Kilobat llms.txt: CLI and MCP reference](https://kilobat.app/llms.txt)

Sources checked on 29 October 2026. Man pages are the ones installed with macOS; open one with `man <name>` in Terminal.

## Related guides

- [Get approvals for new apps](https://kilobat.app/guides/recipes/approve-new-apps): In Ask mode, Kilobat holds the first connections of an app that has no rule.
- [Find which app uses your bandwidth on a Mac](https://kilobat.app/guides/which-app-uses-bandwidth): Activity Monitor and nettop show which processes send and receive data.
- [See which app uses data on a hotspot](https://kilobat.app/guides/recipes/hotspot-data-by-app): Kilobat shows the upload and download of each app on your Mac.