I built a Chrome extension that lets any LLM drive your real Chrome session
quick context on what this is and why it exists. tried every "let an LLM use a browser" tool out there and they all stunk. Claude has a Chrome extension so nerfed it might as well not exist, half the actions just refuse plus they lock you in to their ecosystem. Cursor's browser tool is a chromium it spins up, not your Chrome, so anything behind a login is dead on arrival. Playwright MCP, same problem, fresh chromium with no cookies. Browserbase and the cloud-browser crowd run from a datacenter IP so anti-bot stacks flag them on sight. the open-source BrowserMCP gets the real-browser part right but its local stdio only, one tab, dies when you close your terminal.
so i built one as a Chrome extension. install it, sign in once, and any MCP-speaking client (Claude Code, Cursor, Zed, web Claude, ChatGPT, even Ollama through an MCP shim) can drive your real Chrome. real cookies, real fingerprint, real residential IP, real session. SSO and 2FA already done because you already did them.
what it does inside the extension:
- takes navigation, click, type, scroll commands from the LLM and runs them in your active tab
- captures full network (requests, responses, headers, timings) and exposes it as a tool the LLM can read mid-session
- captures DOM snapshots, console logs, screenshots
- holds an OAuth-issued token for the hosted MCP endpoint so the model can be running anywhere on the internet and still drive Chrome on your desk
what it gets you in practice:
- agent on your phone, browser on your laptop. i was on the couch yesterday, ChatGPT on my phone, driving Chrome on my desk upstairs.
- multi-profile per account. work Chrome and personal Chrome both attach, you pick which one from the MCP client.
- frontend debugging in seconds. point LLM at the broken page, it pulls the failing request, screenshots the busted layout, walks the repro. no more me copy pasting console errors into chat. (This was my main use case)
- gated sites stop being special. anything you can sign into, the agent can use, because its using your session.
- Example: ticketmaster drop ticket at 10am. normally that's me hammering F5, fighting the queue, picking seats before they get sniped. with this i sign into ticketmaster once in my Chrome, then prompt the LLM "watch the [show] page, when seats open grab two together in section 100 or better under $200, hold them in cart" it sits on the page using my real session, real cookies, real residential IP, so the queue treats it like me. seats hit, it filters, picks, adds to cart, i show up and purchase. cant do this with a cloud browser, ticketmaster flags datacenter IPs instantly. cant do it with a sandbox, not logged in there.
free tier covers normal use. only hit paid if you're scraping at scale and want big captures stored remote so they dont chew your local disk.
happy to answer questions about the extension internals, the MCP wiring, or the safety/permissions story.