The official Claude in Chrome extension gives Claude Code full browser automation — as long as you stay within Anthropic's allowlist of "safe" sites. Open Claude in Chrome is a clean-room reimplementation that strips the restrictions while keeping all 18 MCP tools and matching the official extension's performance.

What's Different

Claude in Chrome Open Claude in Chrome
Domain blocklist 58 blocked domains across 11 categories No blocklist. Navigate anywhere.
Browser support Chrome and Edge only Any Chromium browser (Chrome, Edge, Brave, Arc, Opera, Vivaldi, etc.)
Source code Closed source Open source (MIT)
Tools 18 MCP tools Same 18 MCP tools
Performance Baseline Identical

Blocked Domains in the Official Extension

Category Blocked Sites
Banking Chase, BofA, Wells Fargo, Citibank
Investing/Brokerage Schwab, Fidelity, Robinhood, E-Trade, Wealthfront, Betterment
Payments/Transfers PayPal, Venmo, Cash App, Zelle, Stripe, Square, Wise, Western Union, MoneyGram, Adyen, Checkout.com
BNPL Klarna, Affirm, Afterpay
Neobanks/Fintech SoFi, Chime, Mercury, Brex, Ramp
Crypto Coinbase, Binance, Kraken, MetaMask
Gambling DraftKings, FanDuel, Bet365, Bovada, PokerStars, BetMGM, Caesars
Dating Tinder, Bumble, Hinge, Match, OKCupid
Adult Pornhub, XVideos, XNXX
News/Media NYT, WSJ, Barron's, MarketWatch, Bloomberg, Reuters, Economist, Wired, Vogue
Social Media Reddit

Open Claude in Chrome has none of these restrictions.

Architecture

Default:

Claude Code <--stdio MCP--> mcp-server.js <--TCP--> native-host.js <--native messaging--> Extension <--> Browser

Code mode / hybrid (additive — mcp-server.js is reused unchanged as the upstream):

Claude Code <--stdio MCP--> server-{codemode,hybrid}.js
                              |  spawns + proxies via MCP
                              v
                            mcp-server.js (child) <--TCP--> native-host.js <--native messaging--> Extension <--> Browser
                              ^
                              |  HTTP tool-callback
                              |
                            workerd (wrangler dev sidecar)
                              |  Worker Loader → V8 isolate
                              v
                            sandboxed Worker runs LLM-written code

Three components:

  1. Extension — Manifest V3 with CDP-based browser automation (all 18 tools)
  2. MCP Server — Node.js process started by Claude Code, exposes tools via MCP
  3. Native Messaging Host — Bridge between the MCP server and the extension

The codemode and hybrid servers add a fourth piece — a wrangler dev subprocess hosting a Cloudflare Worker that runs the LLM-generated code in a V8 isolate. The Worker calls back to the proxy over HTTP for actual tool execution, which is forwarded to the unchanged upstream mcp-server.js.

Installation

One flow, top to bottom, turns everything on — all 18 browser tools, execute_code, and the imitation-learning recorder.

Prerequisites

  • Node.js v18+
  • Any Chromium browser (Chrome, Edge, Brave, Arc, Opera, Vivaldi, etc.)
  • Claude Code v2.1.80+ (the recorder needs channels; browser automation alone works on v2.0.73+)
  • An OpenAI API key (used to transcribe recording narration)

Step 1: Install dependencies

cd host
npm install
cd ..

Step 2: Load the extension

  1. Go to chrome://extensions (or brave://extensions / edge://extensions)
  2. Enable Developer mode
  3. Click Load unpacked and select the extension/ directory
  4. Copy the extension ID shown under the extension name

Step 3: Register native messaging

./install.sh <your-extension-id>

If you use multiple browsers, pass all IDs: ./install.sh <chrome-id> <brave-id> <arc-id>

Step 4: Restart your browser

Close all windows and reopen. The browser reads native messaging host configs on startup.

Step 5: Set your OpenAI key and enable the microphone

Right-click the extension icon → Options. Both of these are required before recording:

  • Paste your OpenAI key and click Save & validate (transcribes your narration).
  • Click Enable microphone and allow the browser prompt. The recorder captures audio in a background page that can't show a permission prompt itself, so you grant mic access once here; otherwise recordings capture no voice.

Step 6: Add the server to Claude Code

The hybrid server exposes everything: all 18 tools directly, execute_code alongside (the model picks per call), and the recording channel.

claude mcp add open-claude-in-chrome-hybrid -- node /absolute/path/to/host/codemode/server-hybrid.js

Find the absolute path with echo "$(pwd)/host".

Step 7: Launch with recording enabled

Channels are a research preview, so start Claude Code with the development flag (the name is the server from step 6):

claude --dangerously-load-development-channels server:open-claude-in-chrome-hybrid

Accept the one-time prompt and keep the session open — channels inject into a live interactive session, not claude -p. That's it: browser automation and recording are both on.

The hybrid server above is the superset. Two leaner variants exist if you want them (they can coexist; register more than one):

Default — the 18 tools, nothing else:

claude mcp add open-claude-in-chrome -- node /absolute/path/to/host/mcp-server.js

Code mode — three tools: execute_code, screenshot, zoom. The model writes JS that calls chrome.* (the typed API for all 18 tools) in a sandboxed Cloudflare Worker, collapsing multi-step flows into one round trip:

claude mcp add open-claude-in-chrome-codemode -- node /absolute/path/to/host/codemode/server-codemode.js

The first call on either codemode/hybrid variant pays a one-time ~3–5s cost while wrangler dev boots the sandbox; subsequent calls are fast. The Workerd sidecar is spawned and torn down with the MCP server. These variants depend on npx wrangler, pulled automatically on first launch. Recording is only on the hybrid server.

Verification

Start a new Claude Code session and test:

Navigate to reddit.com and take a screenshot

Reddit loads. No domain restriction.

Imitation Learning (Recording)

Teach Claude Code a browser task by doing it once. The extension records an expert rollout in two synchronized tracks — what you did (clicks, typing, scrolling, resolved to durable element anchors) and why (your spoken narration, transcribed) — across every tab, then hands the recording to a live Claude Code session over a channel. Claude reads the rollout and carries out the task, extrapolating to sister tasks. Enabled by the Installation flow above. Full design: docs/imitation-learning-alignment.html.

Record

  1. Tell the session you're about to teach it something.
  2. Click the toolbar icon to start. The badge walks a fixed pipeline: (booting the mic, ~2.5s) → REC (talk now). Clicks during are ignored.
  3. Act and narrate out loud. Hold Alt while clicking to demonstrate an action without it firing (override/mask mode).
  4. Click the icon again to stop. The badge shows while the recording is transcribed and saved — clicks are ignored until the paste-able reference lands on your clipboard and the icon shows 📋. Only then is the icon live again. Paste the reference into Claude Code to point it at the recording. (If a Claude session with the channel is connected, it's also notified automatically and the tooltip says so — but the clipboard copy happens either way.)

Recorded sessions are browsable under the extension's Options page (all captured data, disclosed in layers), each with its own Copy reference button.

Verify recording works

The minimum end-to-end check, the recorder's equivalent of the reddit test above. Do it in a session launched per step 7.

  1. In the Claude Code session, say: "I'm going to teach you something — wait for my signal."
  2. Click the toolbar icon (badge shows REC). Navigate to any page, click a couple of things, and say two or three sentences out loud about what you're doing. Click the icon again to stop.
  3. Confirm:
    • The icon shows a 📋 and the reference is on your clipboard (paste it anywhere to check — it points at the recording folder).
    • Options → Recorded sessions shows the session with events > 0, utterances > 0, a working audio player, a frame count, and your words under Narration.
    • trace.json and images/ exist under ~/.config/open-claude-in-chrome/recordings/<recording_id>/.
    • If a channel session is connected: a <channel … event="recording_complete" …> message appears and Claude acknowledges it and reads the trace.

If utterances is 0 or there's no audio, the mic wasn't enabled — redo Installation step 5. If nothing saved (no 📋), the native host isn't running — rerun ./install.sh <extension-id> and restart the browser. If no channel message appears, the session wasn't launched with the flag in step 7 (or a stale MCP server is running — pkill -f "server-hybrid" and reconnect with /mcp).

The real test (beyond the minimum): one narrated rollout of a task, then a sister task — same shape, different specifics — that Claude completes unaided from the recording. That's the proof the trace teaches rather than replays.

Status & limitations

The MCP channel, the recording_ack round-trip, the primary→client event routing, the transcription + track merge, and the native-host file writes are validated outside the browser; the in-browser capture, mic, and stop pipeline are wired and awaiting your live pass above. Known v1 choices:

  • The bundle is written by the native host (a Node process with filesystem access) to ~/.config/open-claude-in-chrome/recordings/<id>/trace.json, SCHEMA_v0.md, and images/. No chrome.downloads, so no OS save dialog, and it saves whether or not Claude is connected.
  • Four tracks: behavior (discrete actions), cursor (raw trajectory), images (240p frames captured on events, ≤1/sec), narration. All references and files are just data; the agent reads what it wants.
  • The viewer keeps small copies of the audio and frames in IndexedDB (the Options page can't read the on-disk files). Long recordings accumulate; a "keep last N" cleanup is a later refinement.
  • The capture layer is purpose-built (anchors + effects + heuristics), not a vendored rrweb.

Code Mode Test Client

A self-explanatory in-browser test suite for comparing default / code-mode / hybrid behavior across the kinds of flow they each should excel at. Lives in scratch/test-form/.

Serve it

cd scratch/test-form
python3 -m http.server 8765

Open http://localhost:8765/. The page is a four-challenge suite the agent works through end-to-end:

  1. Single-Screen Form — everything visible in one screenshot. A model that captures the layout once should be able to batch all clicks + types + submit into a single round trip.
  2. Multi-Step Wizard — three steps where step 2's fields depend on step 1's choice. Forces screenshot → action → screenshot, no batching across steps.
  3. Repeat Submissions — the same Challenge 1 form, submitted three times with different values. Coordinates don't change; this is where pre-planned batching pays off most.
  4. Click Sequence — a 3×3 grid plus a randomly-generated ordering. Every coordinate is visible at once; the model can batch nine sequential clicks from one screenshot.

Completion is non-ambiguous: the suite ends on a green "All Challenges Complete" banner with a per-challenge wall-clock table. A sticky progress header on every page shows the current challenge number and a ✓ for each completed one.

Run the experiment

YOU MUST NOT USE THE FOLLOWING TOOLS IN ANY CAPACITY: form_input || javascript_tool

TASK:
Open http://localhost:8765/ on a new tab and complete every challenge on the page. Follow the on-page instructions until you reach the "All Challenges Complete" banner.

For the MCP use only (not any of the other ocic MCPs): open-claude-in-chrome||open-claude-in-chrome-codemode||open-claude-in-chrome-hybrid

What to look for across the three MCP variants:

  • Challenge 1: ratio of screenshots to actions. Default tends to look-act-look-act; code-mode/hybrid should look once then batch.
  • Challenge 2: all three should look comparable — visual feedback is required between steps regardless of MCP.
  • Challenge 3: this is where the gap should open. One screenshot up front, then three batched form-fills in code-mode/hybrid vs. fresh look-act loops in default.
  • Challenge 4: similar. Coordinates fixed, sequence visible. Code mode batches the nine clicks; default clicks one at a time.

If the model still uses direct tools on the second submission, that's a signal the execute_code description needs tuning — see host/codemode/common.js (buildExecuteCodeDescription) and the per-server EXTRA_NOTES.

Results

Final Results Table

Available Tools

All 18 tools, identical to Claude in Chrome:

Tool Description
tabs_context_mcp Get tab group context
tabs_create_mcp Create new tab
navigate Navigate to URL, back, forward
computer Mouse, keyboard, screenshots (13 actions)
read_page Accessibility tree with element refs
get_page_text Extract article/main text
find Find elements by text/attributes
form_input Set form values by ref
javascript_tool Execute JS in page context
read_console_messages Console output (filtered)
read_network_requests Network activity
resize_window Resize browser window
upload_image Upload screenshot to file input
gif_creator GIF recording (stub)
shortcuts_list List shortcuts (stub)
shortcuts_execute Run shortcut (stub)
switch_browser Switch browser (stub)
update_plan Present plan (auto-approved)

Updating After Code Changes

No build step. All files are plain JavaScript. After pulling or editing code:

What changed What to do
extension/background.js, extension/content.js, extension/manifest.json, or extension/recorder/* Reload the extension: brave://extensions > click the reload icon
host/mcp-server.js Kill stale servers and reconnect: pkill -f "node.*mcp-server" then /mcp in Claude Code
host/codemode/*.js or host/codemode/worker/* Kill the codemode server: pkill -f "server-codemode|server-hybrid" and pkill -f wrangler, then /mcp in Claude Code
host/native-host.js Restart the browser (close all windows, reopen)
install.sh or native host name changed Re-run ./install.sh <extension-id>, restart browser, re-add MCP

Quick reset (nuclear option)

If things are broken and you're not sure why:

# 1. Kill all MCP servers
pkill -f "node.*mcp-server"

# 2. Re-run install
./install.sh <your-extension-id>

# 3. Restart browser (close all windows, reopen)

# 4. Reload extension in brave://extensions

# 5. Reconnect in Claude Code
# /mcp

Multiple Sessions

Multiple Claude Code sessions can share the same browser extension. The first session becomes the "primary" (owns the TCP port), and subsequent sessions connect as clients through the primary. All sessions can use the browser simultaneously.

If a session disconnects, kill stale servers and reconnect:

pkill -f "node.*mcp-server"
# then /mcp in each Claude Code session

Troubleshooting

Extension not connecting

  1. Verify the extension is loaded and enabled
  2. Check that ./install.sh was run with the correct extension ID
  3. Restart the browser completely (all windows)
  4. Verify the native messaging host manifest exists:
    • Chrome (macOS): ~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.anthropic.open_claude_in_chrome.json
    • Brave (macOS): ~/Library/Application Support/BraveSoftware/Brave-Browser/NativeMessagingHosts/com.anthropic.open_claude_in_chrome.json
    • Edge (macOS): ~/Library/Application Support/Microsoft Edge/NativeMessagingHosts/com.anthropic.open_claude_in_chrome.json

MCP server not found

Use an absolute path:

claude mcp add open-claude-in-chrome -- node /absolute/path/to/host/mcp-server.js

"Browser extension is not connected"

The MCP server started but the native host hasn't connected. Try:

  1. Open any webpage (wakes the service worker)
  2. Check service worker logs: chrome://extensions > "Inspect views: service worker"
  3. Verify host/native-host-wrapper.sh exists

Tools fail immediately after reconnect

Stale MCP server processes from previous sessions may be holding the port. Fix:

pkill -f "node.*mcp-server"

Then /mcp in Claude Code to reconnect. The fresh server will bind the port and accept the native host connection.

Port conflict

Default port is 18765. To change:

  1. Create ~/.config/open-claude-in-chrome/config.json:
    { "port": 19000 }
    
  2. Restart browser and Claude Code

License

MIT

Built by Sebastian Sosa (Noemica)