Interceptor

Interceptor connects an AI agent or script to your signed-in browser, native Mac apps, and a physical iPhone. It combines structured UI reads and actions with access to page traffic, rich editors, app internals, and device state. The agent can inspect what happened after an action and use that evidence for its next step.

Use it from any agent that can run shell commands, or through its built-in Model Context Protocol (MCP) server. Interceptor does not require a model API key; your chosen agent or model may have its own subscription or API costs.

Why Interceptor

• Your existing browser session. Work with the profiles, cookies, and logins you already use. The default browser path uses an extension rather than launching a separate automated browser.
• Look beyond pixels. Read DOM and accessibility structure, inspect network activity, and use specialized interfaces for rich editors, Electron apps, native runtimes, and iPhone services.
• Background automation. Browser and native Mac operations default to background execution so you can keep working. Explicit activation brings a target forward when needed. Behavior and exceptions.
• Keep the evidence. Return text or JSON, save artifacts, record workflows, and verify task state before marking a browser task complete.
• Use one command vocabulary. open, read, act, and inspect combine common steps; detailed verbs and agent skills cover deeper work.

Get started

Download an installer from Releases. Start with Browser for web tasks, or Full for native Mac and iPhone work.

The macOS release binaries target Apple silicon. Windows and Linux support browser automation; native desktop control and iPhone setup require a Mac.

macOS installation

1. Install the Browser or Full .pkg from Releases.
2. In Chrome or Brave, install the Interceptor extension. The local runtime and browser extension are both required.
3. For Safari, also install the Safari .pkg, open /Applications/InterceptorSafari.app once, then enable Interceptor and website access in Safari → Settings → Extensions. Safari requires your approval.
4. With Full, grant the permissions needed by your task to interceptor-bridge. Run interceptor macos trust --walkthrough for guidance. Accessibility enables native UI control; screen, microphone, and app-automation access are needed for their respective features.

For an unpacked Chrome/Brave extension, enable Developer Mode on the browser's extensions page and load /Library/Application Support/Interceptor/extension/. Keep one copy per profile. Store and unpacked installations share an extension ID; store updates arrive after store review.

Windows and Linux

On Windows, run the architecture-matched installer, install the browser extension, then open a new terminal. Chrome, Brave, and Edge can use the Chrome Web Store listing; Edge requires allowing extensions from other stores. The Windows guide also covers unpacked extensions, silent installation, updates, and removal.

On Linux, extract the architecture-matched archive and run this from its directory:

bash scripts/install.sh --browser-only --brave
# For Chrome, use --chrome instead of --brave.
./dist/interceptor open "https://example.com"

Follow the installer's extension-loading instructions. The archive includes compiled binaries, so a separate Bun installation is not needed for this release path.

Your first browser task

With the extension enabled and browser open:

interceptor open "https://example.com" --group first-task
interceptor read --group first-task
interceptor group close first-task

open starts the daemon when needed, opens a managed tab in the background, and returns the page's tree and text. You should see Example Domain. read inspects it again; group close cleans up that task's tabs.

If several browser contexts are connected, run interceptor contexts and add --context <id> to your browser commands. Safari's ID is safari. interceptor status reports local health but does not start the daemon by itself.

Connect your agent

For a shell-capable agent, adopt the browser, macOS, iOS, and research skills into detected agent runtimes. Mac and Windows installers bundle them; Linux archive users can run adoption from a source checkout containing .agents/skills/:

interceptor skills adopt

For an MCP client, register Interceptor and restart the client. The installer detects Claude Code, Codex, Gemini CLI, Cursor, and Claude Desktop:

interceptor mcp install
interceptor mcp status

The MCP server exposes browser, macOS, iOS, read, local, and raw tools, plus discovery resources. Its permissions are configured by the operator. See the MCP guide.

Browser automation

Read and operate the web apps you are already signed into. Chrome, Brave, and Safari use Interceptor's extension. Browser-specific limits are described in the browser guide.

• Pages and forms: read text, HTML, tables, links, frames, and accessibility-style element references. Click, type, select, drag, scroll, and navigate. Native dropdown selection validates exact values or unique labels and rejects invalid options.
• Rich editors and canvases: inspect supported scene graphs, select objects, navigate slides, and enter text in canvas-rendered editors. Workflows cover Google Docs, Slides, Sheets, Canva, and WebGL viewers; support depends on the app and operation.
• Network and application state: inspect fetch/XHR, SSE, WebSocket, Beacon, and BroadcastChannel traffic; examine headers, rewrite matching requests, and export captured traffic. Passive inspection uses standard page APIs without attaching a debugger.
• Files and exports: upload local files to inputs, drop zones, and supported file pickers. Save page-produced Blob, buffer, or blob: URL bytes directly to disk with save, including native exports from supported web apps.
• Capture and browser data: screenshots, OCR, canvas inspection, cookies, storage, history, bookmarks, downloads, and session management.
• Multiple tasks: select a browser profile with --context, a tab with --tab, and a task's managed tabs with --group. Use a distinct group for each concurrent worker.

interceptor open "https://example.com" --group browser-task
interceptor find "Learn more" --group browser-task
interceptor inspect --group browser-task
interceptor group close browser-task

To interact, use the current reference returned by read or find: interceptor act <ref> clicks it; interceptor act <ref> "text" enters text. Re-read after navigation or a stale-reference error, and check the resulting state after an action.

Browser command reference · Rich-editor workflows · Export capture

macOS automation

Desktop automation for native Mac apps, windows, menus, and dialogs, including supported background workflows. The Full pack