---
title: matchTools
framework: networkextension
role: symbol
role_heading: Instance Property
path: networkextension/neapprule/matchtools
---

# matchTools

An array of app rule objects that restrict the rule so it only matches network traffic generated from helper processes.

## Declaration

```swift
var matchTools: [NEAppRule]? { get set }
```

## Discussion

Discussion Use this property to restrict this rule so it only matches network traffic that the matching app generates and all helper tool processes that the matching app spawns. For example, to match network traffic generated by the curl command line tool run from Terminal.app, do the following: Create an NEAppRule for Terminal.app. Set the app rule’s matchTools property to an array that contains an NEAppRule for the curl command line tool. Set this property to nil (the default) to match all network traffic generated by the matching app and all helper tool processes spawned by the matching app.

## See Also

### Accessing app rule properties

- [matchSigningIdentifier](networkextension/neapprule/matchsigningidentifier.md)
- [matchDesignatedRequirement](networkextension/neapprule/matchdesignatedrequirement.md)
- [matchPath](networkextension/neapprule/matchpath.md)
- [matchDomains](networkextension/neapprule/matchdomains.md)