Releases·Tool Release
Dev builds open-source bridge letting Claude Code and Cursor drive a logged-in Chrome, with approval gating for sensitive and destructive actions
An open-source tool author describes the security architecture built so coding agents like Claude Code and Cursor can control the user's real, signed-in Chrome instead of a headless instance. The post details four mitigation layers — trusted input injection, an unreachable approval layer, prompt-injection tagging, and a loopback-only encrypted channel — and flags a remaining gap in cookie gating.
19 engagement1 sourceFri, Sep 25, 2026, 07:25 PM
AI Overview
- Dev's open-source bridge routes Claude Code and Cursor through the signed-in Chrome via DevTools Protocol Input, since synthetic isTrusted:false events fail anti-bot checks.
- Actions are classed read, navigate, write, sensitive, destructive; sensitive and destructive hold for side-panel approval, with 25-second timeout as denial.
- Bridge binds 127.0.0.1, pins extension id via Origin check, and uses ECDH P-256 into HKDF into AES-256-GCM with a fresh keypair per connection; one session per server.
- Page text gets tagged with random per-result ids to resist injected instructions; the author tests 28 planted payloads and calls it insufficient alone.
- Author concedes get_cookies with includeValues returns cookie values unasked in no-prompt mode and says the README overstates that gating.
Related
Products·launched
OnBridge — Chrome extension + MCP server letting coding agents drive your logged-in browser
OnBridge is a Chrome extension plus MCP server that lets Claude Code, Codex, or Cursor browse, click, and type in your real Chrome session with your existing logins and extensions, rather than a blank headless instance. An ask_user tool blocks agent actions until you approve them in a side panel, protecting against unwanted spending. It targets developers who want agents to act on authenticated sites.
OnBridge is a Chrome extension plus MCP server that lets Claude Code, Codex, or Cursor browse, click, and type in your real Chrome session with your existing logins and extensions, rather than a blank headless instance. An ask_user tool blocks agent actions until you approve them in a side panel, protecting against unwanted spending. It targets developers who want agents to act on authenticated sites.
1 engagement1 sourceredditFri, Sep 25, 2026, 07:38 PM
Products·building
Browser agent with explicit control and revocation for Chrome
A browser automation agent that works with your everyday Chrome profile, separating site permissions, tab authorization, and an exclusive control lease. It lets the agent select authorized tabs without switching the user's view, and provides immediate revocation, ensuring manual browser use remains with the person.
A browser automation agent that works with your everyday Chrome profile, separating site permissions, tab authorization, and an exclusive control lease. It lets the agent select authorized tabs without switching the user's view, and provides immediate revocation, ensuring manual browser use remains with the person.
6 engagement1 sourceredditFri, Jul 31, 2026, 08:26 AM
Products·launched
Hands: Rust MCP/CLI for Windows desktop automation via real Chrome
Hands is a Rust-based MCP/CLI tool that lets coding agents control a Windows PC by seeing the desktop and interacting with a real Chrome browser using OS-level input. It solves the problem of automating daily Chrome without turning it into an automation browser, avoiding Playwright/Puppeteer and remote debugging. LLM harnesses like Grok, Codex, Claude Code, or OpenCode can call its tools to observe, click, type, and scroll.
Hands is a Rust-based MCP/CLI tool that lets coding agents control a Windows PC by seeing the desktop and interacting with a real Chrome browser using OS-level input. It solves the problem of automating daily Chrome without turning it into an automation browser, avoiding Playwright/Puppeteer and remote debugging. LLM harnesses like Grok, Codex, Claude Code, or OpenCode can call its tools to observe, click, type, and scroll.
1 engagement1 sourcehackernewsSun, Aug 23, 2026, 01:16 AM
Products·launched
Auth Your Agent - phone-approved sign-in and purchases for AI agents
Auth Your Agent is an OpenID Connect-based auth layer that lets websites let in AI agents without handing over passwords or session cookies. The agent authenticates with its own key, and the owner approves sign-ins or purchases via a prompt on their phone. It targets developers and site owners who need to give agents scoped, consented access.
Auth Your Agent is an OpenID Connect-based auth layer that lets websites let in AI agents without handing over passwords or session cookies. The agent authenticates with its own key, and the owner approves sign-ins or purchases via a prompt on their phone. It targets developers and site owners who need to give agents scoped, consented access.
2 engagement1 sourceredditSat, Oct 3, 2026, 01:06 PM
Products·launched
ChromeBoost: Gemini CLI extension for real Chrome control
ChromeBoost is a tool that integrates with Gemini CLI to let the AI agent control a real Chrome browser, enabling it to click buttons, fill forms, and interact with web pages the user is already logged into. It solves the problem of agentic AI being unable to perform non-repo tasks like setting up analytics or pulling API keys from dashboards.
ChromeBoost is a tool that integrates with Gemini CLI to let the AI agent control a real Chrome browser, enabling it to click buttons, fill forms, and interact with web pages the user is already logged into. It solves the problem of agentic AI being unable to perform non-repo tasks like setting up analytics or pulling API keys from dashboards.
5 engagement1 sourceredditMon, Aug 17, 2026, 02:23 AM