by wxtsky
Bring Your Own Browser — let your AI agent use the Chrome you already have open
# Add to your Claude Code skills
git clone https://github.com/wxtsky/byobLast scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T16:23:58.669Z",
"npmAuditRan": false,
"pipAuditRan": true
}See how byob compares with popular alternatives.
byob is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by wxtsky. Bring Your Own Browser — let your AI agent use the Chrome you already have open. It has 144 GitHub stars.
Yes. byob passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/wxtsky/byob" and add it to your Claude Code skills directory (see the Installation section above).
byob is primarily written in JavaScript. It is open-source under wxtsky on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh byob against similar tools.
No comments yet. Be the first to share your thoughts!
From $49 · 30 days · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Bring Your Own Browser — let your AI assistant use the Chrome you already have open.
English · 中文
byob is a local MCP server that lets AI coding tools (Claude Code, Cursor, Cline, Windsurf, etc.) directly control your real Chrome — the one where you're already logged into everything.
"read my Twitter timeline and summarize the top 5 posts"
"google 'mcp protocol spec', click the first result, read the page"
"take a screenshot of example.com"
"grab my GitHub session cookie so I can curl with it"
"open my Gmail tab and tell me how many unread"
"fill in this form with my details and submit it"
| WebFetch | Headless Puppeteer | byob | |
|---|---|---|---|
| Sees logged-in pages | ❌ | ⚠️ manual cookie copy | ✅ already logged in |
| Passes bot detection | ❌ | ❌ | ✅ real human browser |
| Setup time | 0 | hours | ~5 min |
| Cloud cost | free | $$ | free |
Compared with tools that attach over Chrome's remote-debugging port (DevTools MCP, agent-browser, Playwright --cdp): byob is an extension, so there's no debugging port to open, no "Allow remote debugging?" prompt on every connection, and nothing else on your machine can hijack your logged-in browser through it.
curl -fsSL https://raw.githubusercontent.com/wxtsky/byob/main/install.sh | bash
On Windows, run the same command from Git Bash or MSYS2. The script checks prerequisites (Node.js ≥ 20, bun, Chrome/Edge/Brave), clones the repo, builds everything, and walks you through MCP registration interactively. If bun is not installed, it offers to install it for you using the native installer for your OS.
Set
BYOB_INSTALL_DIRto change the install location (default:~/byob). Advanced:BYOB_REPO,BYOB_REF, andBYOB_SKIP_SETUP=1are supported for forks, pinned refs, and CI-style dependency install only.
Requires Node.js ≥ 20, bun, Chrome, and any MCP-compatible AI tool.
git clone https://github.com/wxtsky/byob
cd byob
bun install
bun run setup
bun run setup walks through the install interactively:
After the script finishes, three manual steps remain:
Open chrome://extensions in Chrome.
/your/path/to/byob/packages/extension/output/chrome-mv3
Quit Chrome completely (⌘Q on Mac / close all windows on Windows), then reopen.
Closing a single tab or window is not sufficient — Chrome only reads the Native Messaging config at startup.
The setup script registers your selected tools automatically. The block below is for reference only — use it if you skipped the prompt or want to register a different tool later:
claude plugin marketplace add wxtsky/byob
claude plugin install byob@byob --scope user
Run /reload-plugins in Claude Code after installing. The plugin includes the
/byob:control-chrome Skill and starts its bundled MCP server automatically;
do not also register a second byob MCP server.
For local development without installing:
claude --plugin-dir /path/to/byob/plugins/byob
claude mcp add byob -s user -- /path/to/tsx /path/to/byob-mcp.ts
To enable browser_evaluate, add -e BYOB_ALLOW_EVAL=1 after -s user.
codex mcp add byob -- /path/to/tsx /path/to/byob-mcp.ts
Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
{
"mcpServers": {
"byob": {
"command": "/path/to/tsx",
"args": ["/path/to/byob-mcp.ts"]
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json (same JSON format as Cursor):
{
"mcpServers": {
"byob": {
"command": "/path/to/tsx",
"args": ["/path/to/byob-mcp.ts"]
}
}
}
Open Cline sidebar → MCP Servers → Configure, then add (same JSON format):
{
"mcpServers": {
"byob": {
"command": "/path/to/tsx",
"args": ["/path/to/byob-mcp.ts"]
}
}
}
The actual paths are printed by the setup script. The examples above use shortened paths for readability.
To enablebrowser_evaluate, add"env": { "BYOB_ALLOW_EVAL": "1" }to the config (or-e BYOB_ALLOW_EVAL=1for CLI tools).
After you finish steps 2 and 3 (load the extension and ⌘Q-restart Chrome), setup auto-detects the bridge coming online and prints ✓ bridge online. The installation is complete — open a new session in your AI tool and try "use byob to read ...".
If you exited setup early with Ctrl+C, or want to check the state later:
bun run doctor
bun run doctor prints actionable fixes under every ✗ (e.g. "⌘Q-restart Chrome", "extension ID mismatch", etc.).
v0.5 has 25 tools. Elements are targeted by refs from the snapshot ([ref=e12]), a CSS selector, or x/y.
| Tool | What it does |
|---|---|
browser_snapshot |
The page as an accessibility outline with refs — interactive-only, diff, scoped; iframes (even cross-origin) inline |
browser_find |
Find by role+name / text / label / placeholder / testId, optionally click/fill/check right away |
browser_click |
Click (real mouse events), double/right click, modifiers; auto-waits and reports navigation / new tabs / dialogs |
browser_type |
Fill inputs, textareas, contenteditable (React/Vue-safe); per-key mode; submit |
browser_press_key |
Keys and combos with real key codes (Enter, Shift+Tab, ControlOrMeta+A) |
browser_hover / browser_select / browser_scroll / browser_drag |
Menus, <select>, page or container scrolling, HTML5 drag-and-drop |
browser_upload_file |
Attach local files to <input type=file> |
browser_batch |
Many steps in one call (fill a whole form and submit) |
browser_wait |
Wait for element state, text, URL, load / network idle |
browser_read |
Content as text / markdown (reader mode) / html / links / tables, with outline and filter |
browser_screenshot |
Viewport / full page / element / clip → image returned to the model; ref labels; PDF |
browser_navigate |
Open a URL in a background tab, back / forward / reload |
browser_tabs |
List / open / select / close tabs, search history |
browser_console |
Console messages and page errors, buffered |
browser_network |
Record traffic (summary / JSON / HAR) or intercept: block / mock / modify |
browser_inspect |
Element box / state / styles, Web Vitals |
browser_storage |
Cookies and local/session storage — get / set / clear |
browser_dialog |
Answer alert / confirm / prompt explicitly |
browser_emulate |
Device, dark mode, geolocation, timezone, locale, offline, headers |
browser_clipboard |
Read / write clipboard text |
browser_download_images |
Save a page's images |
browser_evaluate |
Run page JavaScript (only with BYOB_ALLOW_EVAL=1) |
Schemas: shared/src/tools.ts. Upgrading from 0.4? Tool names changed — see the changelog.
AI tool → byob-mcp → byob-bridge → Chrome extension → your tab
(stdio) (Unix socket) (Native Messaging) (Chrome DevTools Protocol)
window.__byob*, no data-byob-* attributes, nothing a site can see or tamper with.All communication stays local. No data leaves your machine. When Chrome closes, all byob processes exit automatically.
bun run setup # install or re-install
bun run doctor # check what's working
bun run bridges # list running bridge processes
bun run logs # tail the bridge log
bun run unsetup # remove everything
bun run policy # show / change which sites byob may touch (flags below)
All run from the byob repo root.
<div#cookie-banner>").