Many IoT systems have 3rd-party APIs people have reverse-engineered so they can add custom integrations, but these all work by impersonating the app, receiving updates from the server.
If I'm on my local network and so is my smart-plug or door-bell or whatever, is there a way to intercept the outgoing traffic before it even gets to the server?