Enables AI clients to use the OpenAI Codex browser runtime on macOS to drive signed-in Chrome or Helium profiles via a Node.js REPL.
Also known as stickerdaniel/browserjack
- Stars
- 5
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- —
- Last commit
- Nov 9, 2026
- License
- MIT
What is Browserjack MCP?
Browserjack enables AI clients to use the OpenAI Codex browser runtime on macOS to drive signed-in Chrome or Helium profiles via a Node.js REPL.
Summary generated from the project's README
About Browserjack MCP server
Browserjack provides a bridge for MCP clients like Claude Code to access the OpenAI Codex browser runtime on macOS. It allows an AI agent to drive existing, signed-in Chrome or Helium profiles through a persistent Node.js REPL. This setup uses the native OpenAI stack already installed via the ChatGPT.app on Apple Silicon hardware, meaning it does not require installing separate browser extensions or using Playwright.
Users must have macOS, Node.js 22 or newer, and the official ChatGPT.app with the Codex extension configured. The server acts as a thin stdio proxy that launches the OpenAI-signed codex sandbox. Because it uses a REPL instead of a fixed list of tools, the agent gains broader capabilities through macOS computer use. It is designed for developers who want to use their actual logged-in web sessions without needing an Anthropic plan for browser integration.
What you can do with it
- 1Access signed-in web sessionsAn AI agent can interact with websites using your existing Chrome or Helium profiles.
- 2Execute arbitrary browser commandsA developer can task an AI with performing complex web actions using a Node.js REPL instead of limited tools.
- 3Verify browser connectivityYou can run a diagnostic command to ensure the handshake between the MCP client and the browser is working.
Written from the project's README. Every use case is checked against a quote from it.
How to install Browserjack MCP
Formats verified 10 Nov 2026Add to CursorAdd to GooseInstall Browserjack MCP in Claude Code
$ claude mcp add browserjack -- npx -y browserjackInstall Browserjack MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"browserjack": {
"command": "npx",
"args": [
"-y",
"browserjack"
]
}
}
}Install Browserjack MCP in VS Code
.vscode/mcp.json
{
"servers": {
"browserjack": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"browserjack"
]
}
}
}Install Browserjack MCP in VS Code CLI
$ code --add-mcp '{"name":"browserjack","type":"stdio","command":"npx","args":["-y","browserjack"]}'Install Browserjack MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"browserjack": {
"command": "npx",
"args": [
"-y",
"browserjack"
]
}
}
}Install Browserjack MCP in Codex
$ codex mcp add browserjack -- npx -y browserjackInstall Browserjack MCP in Codex config.toml
~/.codex/config.toml
[mcp_servers.browserjack] command = "npx" args = ["-y", "browserjack"]
Install Browserjack MCP in Gemini CLI
$ gemini mcp add -s user browserjack npx -- -y browserjackInstall Browserjack MCP in Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"browserjack": {
"command": "npx",
"args": [
"-y",
"browserjack"
]
}
}
}Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work
- Source repository linked and reachablestickerdaniel/browserjack is public and reachablegithub.com/stickerdaniel/browserjack ↗Pass
- Package names this repository as its sourcebrowserjack names stickerdaniel/browserjack as sourcenpmjs.com/package/browserjack ↗Pass
- Build provenance (Sigstore attestation)Sigstore attestation for browserjacknpmjs.com/package/browserjack/v/0.4.1#provenance ↗Pass
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-11-09github.com/stickerdaniel/browserjack ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from browserjackPass
- No critical advisory in the package or its dependenciesNot checked
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubBrowserjack: OpenAI Codex browser bridge for MCP
Browserjack lets Claude Code and other MCP clients use the browser runtime that ChatGPT.app already installed on your Mac. Your agent gets a persistent Node.js REPL that drives your real, signed-in Chrome or Helium profile. Browserjack injects nothing into the browser and installs no extension of its own.
[!NOTE] Your agent acts in your logged-in browser sessions. The OpenAI interfaces it uses are undocumented, and any ChatGPT.app update can break them.
Requirements
- macOS on Apple Silicon with Node.js 22 or newer
- The official ChatGPT.app with the ChatGPT/Codex extension set up in Chrome or Helium
- Claude Code or another stdio MCP client
Quickstart
npx browserjack setup --client claude --scope user
npx browserjack doctor --live
setup installs a versioned runtime in ~/Library/Application Support/browserjack/ and registers a stable shim with Claude Code, so later changes to the npx cache cannot change what Claude Code runs. doctor --live tests the browser handshake end to end.
Restart Claude Code and ask:
Use the browserjack MCP server to open https://example.com and return the page title.
Claude should answer Example Domain. If it doesn't, run npx browserjack doctor and see docs/troubleshooting.md.
How it works
Browserjack is a thin launcher and stdio proxy. It starts the OpenAI-signed codex sandbox, which runs OpenAI's own node_repl, and passes MCP messages between that runtime and your client. Every browser feature comes from the runtime. Browserjack has no Playwright, CDP, or navigation code and does not modify or redistribute OpenAI software.
Compared with Playwright MCP, Browser MCP, or Claude Code's Chrome integration, Browserjack reuses the OpenAI stack already on your Mac, gives the agent a REPL with macOS computer use instead of a fixed tool list, works with any stdio MCP client, and needs no Anthropic plan. In exchange it runs only on macOS and needs upkeep for new ChatGPT.app builds. If you have a direct Anthropic plan, the Chrome integration is the supported cross-platform choice.
Commands
browserjack run Start the stdio MCP server (Claude Code calls this)
browserjack doctor Check ChatGPT.app, signatures, runtime, compatibility
--json Machine-readable report
--live Also cold-start the runtime and test the handshake
browserjack status Show version, shim, current link, and Node path
browserjack setup Install the runtime and register the MCP server
--client claude (direct MCP) or plugin (runtime only)
--scope user | local | project
--mcp-name NAME MCP server name (default: browserjack)
browserjack update Reinstall this version with the recorded MCP identity
browserjack uninstall Remove the installation and its MCP entry
--keep-state Keep releases and state
doctor and status exit with 2 when a check fails and 1 on an unexpected error.
Compatibility
When a ChatGPT.app build is new to Browserjack, its first start runs a self-test with a real browser handshake. A build that passes starts instantly from then on. A build that fails does not start, and the next start tests it again. If a new build misbehaves in a way the self-test misses, open a compatibility issue with your doctor --json output and remove your username from the paths.
Security and privacy
Each launch runs the checks in the diagram. The sandbox lets the runtime write only to CODEX_HOME and temp directories. Browserjack has no telemetry, reads only OpenAI's public app update feed, and logs no browser content, cookies, tokens, or form data. Whatever the MCP client requests does enter that client's conversation. Details are in docs/security.md and docs/privacy.md. Report vulnerabilities as described in SECURITY.md.
FAQ
Why only macOS? Browserjack needs the runtime and code-signed native hosts that ship with ChatGPT.app for macOS. Windows and Linux have no local runtime to reuse.
Is this supported by OpenAI? No. Browserjack is not affiliated with or endorsed by OpenAI or Anthropic.
Is "browserjack" a hijacker? No. The name means jack as in connector. It only connects components you installed yourself.
Contributing
Run npm install && npm run verify, then read CONTRIBUTING.md.
MIT for this project's original code. OpenAI components remain under their own terms and licenses.
Browserjack MCP questions
How do I add Browserjack MCP to Claude Code?
Run claude mcp add browserjack -- npx -y browserjack in your terminal. Add --scope user to make it available in every project.
How do I add Browserjack MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
Why does Browserjack only work on macOS?
It requires the specific runtime and code-signed native hosts that are included with the macOS version of ChatGPT.app.
Is this an official OpenAI product?
No, Browserjack is not affiliated with or endorsed by OpenAI or Anthropic.
Does Browserjack hijack my browser?
No, the name refers to acting as a connector for components you have already installed yourself.