Ghostlight in Browser

Governed browser automation over your own authenticated session, for AI agents.

Ghostlight lets AI agents work in the Chromium browser you already use -- with your signed-in sessions, visible actions, local control, and optional policy guardrails. It connects compatible Model Context Protocol (MCP) clients, including Claude Code, Cursor, VS Code, and Codex, to a dedicated automation window in your real browser. Requires the local Ghostlight application: This extension is the browser half of Ghostlight. You must separately install and register the local Ghostlight application. Without that application running, the extension cannot receive instructions or take browser actions. What Ghostlight can do: - Read page text, structure, accessibility information, and shadow DOM. - Click, type, scroll, drag, and fill forms with real-input fidelity. - Show a visible cursor and action feedback while automation runs. - Return screenshots and relay user-requested recording frames so the local application can create an animated GIF. - Place host-supplied files and screenshots into page inputs and drop targets. The extension never reads files from your disk. - Find elements and run explicitly requested JavaScript inside the attached page. - Inspect console messages and network-request metadata. - Open, navigate, group, and manage tabs in a clearly labeled automation window. Governance stays on your machine The local application is the policy and audit layer. Ghostlight can run unrestricted, or it can limit domains and capabilities, explain denied actions, honor a "take the wheel" pause, and provide a panic kill switch. It writes a structured local record of what ran. The extension contains no policy, allowlist, or licensing logic. Local-first and private - No developer-operated service. - No analytics, telemetry, advertising, tracking, or data sale. - The extension communicates with the local Ghostlight application through Chrome native messaging, an on-device process-to-process channel. - Extension logic ships inside the reviewed package. It does not fetch or dynamically import code that changes extension behavior. - JavaScript requested through Ghostlight runs only inside the attached web page, not in the extension itself. Open and inspectable Ghostlight's source, install scripts, policy engine, decisions, and documentation are public: https://github.com/sylin-org/ghostlight Installation guide: https://sylin.org/ghostlight/ You remain in control. You decide whether Ghostlight runs, which policy it enforces, and when to pause, stop, or remove it.