Act for a person on websites: sandboxed browser, phone approvals, saved logins, scheduled plans.

Enables an MCP-capable AI chat to control selected tabs in a separate persistent Chromium browser, protected by OAuth, per-tab grants, and local approvals.

Enables MCP-capable agent CLIs on macOS to reuse an installed, unmodified OpenAI Browser Runtime to drive a connected Chrome or Edge browser (or a host's in-app browser backend) through js, js_reset, and turn_ended tools. It stays a thin bridge that preserves the Runtime's approval and security boundaries, failing closed when the client cannot handle approval requests.

Enables any AI agent to work inside your own signed-in Chrome or Edge, with risky steps gated behind approvals the agent cannot skip, receipts for every action, routines that replay without the AI, and per-site packs that read a site's own data. Everything runs locally, so pages, cookies and passwords never leave your machine.

Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.

Gives browser agents a reviewed map of 79 real sites — entry URLs, access verdicts, and role/accessible-name button maps for 104 screens — so an agent can find where things are and know whether it may act at all. Safety rules in code halt irreversible actions such as pay, order, submit and delete pending explicit human approval, while per-site memory recalls which routes worked last time.

Connect AI agents to your own Chrome with scoped access, approvals, and verified task results.