For Claude Code, Codex, Cursor, and any agent with a shell
Agent Browser Gateway lets a local AI agent read and operate only the Chrome tab you share, over loopback, with every operation written to an audit log.
brew tap arcmanagement/agent-browser-gateway https://github.com/arcmanagement/agent-browser-gatewaybrew trust --cask arcmanagement/agent-browser-gateway/agent-browser-gatewaybrew install --cask agent-browser-gatewayThe agent starts with zero tabs. You share one from the extension popup or with a shortcut, and only that tab crosses the gate. Try it: toggle the tabs below and watch what the agent can list.
Option on macOS, Alt elsewhere. Rebind at chrome://extensions/shortcuts.
Screens from the extension's popup and approval window.
Three pieces on your machine: a Chrome extension, a menu bar Gateway, and the abg CLI. The Gateway binds only to 127.0.0.1 and accepts WebSocket connections only from browser-extension origins, so ordinary web pages cannot reach it.
ABG does not send browser data anywhere. If your agent sends prompts to a model provider, that transfer is made by the agent under its own terms.
lsof -nP -iTCP -sTCP:LISTEN Raw page HTML drags scripts, styles, and framework wrappers into the prompt. abg read returns the page as Markdown with headings, links, and lists intact, and per-domain plugins trim app chrome further.
abg read t1 --selector article --format markdown# Reset your password
Open Settings, then choose Security.
## Steps
1. Choose **Reset password**
2. Check your inbox for the link
- [Contact support](https://example.com/support)README benchmark on a Japanese WordPress post. Token counts are approximate (~2 chars/token).
Annotation mode lets you drag a box or select text, add a comment, and hand the agent structured context: selectors, text anchors, and coordinates. Reload the page and the annotations wait in session storage until you restore them.
Order summary
$abg annotate t1
{ "ok": true, "count": 2,
"annotations": [
{ "kind": "dom", "comment": "Total should include tax",
"selector": ".summary .total" },
{ "kind": "text", "comment": "Wrong plan name",
"text": "Team plan" } ] }$abg annotate t1
{ "ok": true, "count": 0,
"saved": { "count": 2, "urlMatches": true },
"nextCommand": "abg annotate t1 --restore" }$abg annotate t1 --restore
{ "ok": true, "count": 2,
"restore": { "status": "restored",
"restored": [ … 2 ], "unrestored": [],
"alreadyPresent": 0 } }The Gateway appends a JSON line for each read, operation, permit, and revoke to a local, owner-only log. Review it in the Gateway window, with abg audit, or open the file.
abg audit --lines 50abg activity --period dayPasted values and clipboard payloads are recorded as byte lengths, not content.
| time | action | tab | agent | detail |
|---|---|---|---|---|
| 09:41:02 | permit | 418 | — | accessMode: manual |
| 09:41:06 | read_dom | 418 | cli | staging.example.com/checkout |
| 09:41:09 | screenshot | 418 | cli | staging.example.com/checkout |
| 09:41:15 | click | 418 | cli | staging.example.com/checkout |
| 09:41:21 | paste | 418 | cli | selector · textBytes: 42 |
| 09:41:30 | revoke | 418 | — | reason: user_revoked |
{"ts":"2026-10-03T09:41:06Z","extensionId":"…","tabId":418,"url":"https://staging.example.com/checkout","action":"read_dom","agent":"cli"}ABG is for handing a human-owned, already-open tab to an agent workflow. Playwright remains the better fit when automation should own the whole browser lifecycle.
| Option | Best fit | Tradeoff | Where ABG differs |
|---|---|---|---|
| Agent Browser Gateway | AI-assisted work in a tab you are already using | Requires explicit local setup and tab sharing | Per-tab consent, local transport, CLI-first workflow, local audit log |
| Playwright | Deterministic E2E tests, CI, screenshots, clean browser profiles | Automation owns the browser session | ABG uses your everyday Chrome tab with your current login and context |
| Claude in Chrome | Provider-integrated browser assistance | Tied to that provider's product surface and data path | ABG is agent-agnostic and designed around local-first browser access |
| Browser MCP tools | MCP-native browser control and structured snapshots | Often targets a dedicated or broader browser context | ABG keeps the human's selected tab as the permission boundary |
Anything that can run a shell command can run abg. MCP clients can use abg mcp-server, a stdio wrapper over the same CLI.
The current public build is v0.5.2. Install the macOS app with Homebrew or the signed DMG; both point at the same release payload. Then add the Chrome extension.
Tap the repository, trust the cask when Homebrew asks for tap trust, then install.
brew tap arcmanagement/agent-browser-gateway https://github.com/arcmanagement/agent-browser-gatewaybrew trust --cask arcmanagement/agent-browser-gateway/agent-browser-gatewaybrew install --cask agent-browser-gatewayAlready installed? brew info --cask agent-browser-gateway or abg --help confirms it. Use brew reinstall --cask agent-browser-gateway only to force a fresh install.
4469b7d9e69b4bfe48329facd269381bf011660d3db1b9d638a2799f4cd35732 Verify the checksum before opening the DMG.
Chrome Web Store Listing serves v0.4.8 while v0.5.2 is in review. Shortcuts, annotation restore, and the Japanese UI need the v0.5.2 extension.
winget install --id ArcManagement.AgentBrowserGatewayWinGet becomes available after the signed Windows release and package indexing. The setup ZIP will be published through GitHub Releases after the signed Windows release workflow completes.
Windows release statusThe installer puts abg on your PATH. Claude Code and Codex skills come from the skills CLI:
npx skills add arcmanagement/agent-browser-gateway -g Uninstall. Remove the app from /Applications, delete abg from your PATH if you linked it manually, and remove the Chrome extension.
Published by ArcManagement, Inc. Release artifacts are served from GitHub Releases.
Free for personal use, non-profits, and small companies under the ArcManagement Source License. License details