Vicaro Beta

Beta self-hosted browser agent. The helper thinks; this extension is the hands, eyes, and face. Review actions before you approve.

Vicaro Beta puts an AI assistant in Chrome's side panel and lets your existing AI tools drive the same browser. WHAT YOU CAN DO - Ask in the panel: "summarize this page", "find the cheapest 2-bedroom in Astoria", "check my other tabs and tell me what changed". The assistant reads, clicks, types and reports back. - Or keep using your own tools. Vicaro registers itself as an MCP server in Cursor, Claude Code, opencode and others, so those assistants can read tabs, click, type and take screenshots themselves. REQUIREMENTS Vicaro needs the free helper app (macOS or Linux) and a model endpoint. The panel explains the connection and verifies it with one click. BETA WARNING This is early beta software. It can click, type, submit forms, make purchases, delete data, and change account settings. Actions you approve can lead to loss of money, data, access, or account state. Keep backups, use a Chrome profile you can afford to lose, start with Read only or Ask first, and check the result before continuing. Do not use it for payments, legal, medical, or irreversible account changes without checking. Provided as is, without warranty; you are responsible for the actions you approve. It is self-hosted by design. The thinking happens in a small helper you install and run on your own computer, pointed at the model you choose - a local server, your LAN, or any OpenAI-compatible provider. No Vicaro account or server is required, and there is no telemetry. Your pages, your history and your conversations stay on your machine and on the model endpoint you configured. You can optionally link one Google account for the web UI, but no chat or page data is sent to Google. SAFETY - Beta software: review the disclaimer above before approving actions. - Destructive actions - a purchase, a delete, a send - stop and ask you first. - History is optional, off by default, and requested only when you enable it in Settings. - Deep control (debugger) is declared at install because Chrome does not allow it to be optional; it is attached only while a task needs it and released when the turn ends. - Secrets can be stored locally and are substituted at execution time; they never reach the model. PRIVACY No analytics, no tracking, no data sold or shared. Page content goes to the model endpoint you configure, because that is the only way an assistant can read a page.