English Français العربية

io.github.beSaif/zenpilot

Official registry Search and web

Let Claude use your Zen Browser, like Claude in Chrome. No extension, only sites you allow.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package zenpilot
Claude Code 
claude mcp add zenpilot -- uvx zenpilot==0.5.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "zenpilot": {
            "command": "uvx",
            "args": [
                "zenpilot==0.5.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Install
  2. Use it
  3. Staying safe
  4. Commands
  5. Settings
  6. Good to know
  7. Hacking on it
  8. License

Let Claude use your Zen browser. Works with Claude Desktop and Claude Code, kind of like Claude in Chrome but for Zen.

There's no browser extension. zenpilot opens Zen with its remote control turned on and talks to it directly.

Alpha. Only tested on macOS with Zen 1.23.

Install

You need a Mac with Zen in /Applications.

Claude Desktop: download zenpilot-<version>.mcpb from the latest release and open it. That's it.

Claude Code (or both): with uv installed, run:

uv tool install zenpilot
zenpilot setup

Setup asks which Zen profile to use and which sites Claude may visit. Then it connects zenpilot to Claude Code (and Claude Desktop, if you have it) and opens Zen. Restart Claude Desktop afterwards.

Use it

Just ask Claude: "order a large pizza with bacon on httpbin.org/forms/post for Sam, then submit it".

The first time, a few popups may show up. Only you see them, not Claude:

  • Which profile? zenpilot is a fresh profile that isn't logged in to anything. Pick your own profile if you want Claude to use sites you're logged into.
  • Reopen Zen? If Zen is already open without remote control, zenpilot offers to restart it. Your tabs come back.
  • Allow this site? Claude only works on sites you allow. Choose Don't Allow, Allow This Session or Always Allow.

Pressing Enter always picks the safe answer.

Claude can open, switch and close tabs, go to a URL, read the page, click, type, scroll and take screenshots. It can't touch cookies, passwords or downloads, and it can't run its own JavaScript.

Staying safe

  • Allowlist. Claude only works on sites you've allowed. Add one with zenpilot allow github.com.
  • Stick to the zenpilot profile if you can. It's logged out of everything. On your main profile, a shady page could try to trick Claude into doing stuff in your accounts, so only allow sites you trust.
  • Read-only mode. Set read_only = true and Claude can look but not click or type.
  • Log. Everything Claude does is written to ~/.local/state/zenpilot/audit.jsonl.
  • Remote control is open while Zen runs this way. Other apps on your Mac could connect to it too, and some sites (banks, Cloudflare checks) may think you're a bot. When you're done, quit Zen and open it normally.

zenpilot also stops Zen from switching off its own protections (Safe Browsing, the popup blocker and so on), which would otherwise happen when remote control is on.

Commands

CommandWhat it does
zenpilot setupSet everything up (see above)
zenpilot allow [site...]Allow sites. --remove takes them off. No sites lists them.
zenpilot launchOpen Zen with remote control on
zenpilot doctorCheck your setup and say how to fix anything that's broken

Settings

They live in ~/.config/zenpilot/config.toml, and changes apply right away.

allowlist = ["localhost", "127.0.0.1"]   # "example.com" covers its subdomains too
read_only = false                        # true: Claude can look but not click or type
profile = "zenpilot"                     # which Zen profile Claude uses
auto_launch = true                       # open Zen when Claude needs it
prompts = true                           # show the popups above
port = 9222
audit_log = "~/.local/state/zenpilot/audit.jsonl"
dangerously_allow_all_sites = false      # skips the allowlist. Please don't.

Good to know

  • Only one Claude can drive Zen at a time. zenpilot lets go after 2 minutes of doing nothing, so Claude Desktop and Claude Code can take turns.
  • Zen can be hidden or behind other windows. It still works.
  • Zen loads restored tabs lazily, so Claude only sees an old tab once you've opened it.
  • Stuck? Run zenpilot doctor. If Zen says it already has a session after a crash, restart Zen.

Hacking on it

git clone https://github.com/beSaif/zenpilot.git && cd zenpilot
uv sync && uv run zenpilot setup     # points Claude at your clone
uv run pytest -m "not integration"   # unit tests
uv run pytest                        # all tests, needs Zen running (zenpilot launch)

Pushing a v* tag that matches pyproject.toml publishes to PyPI and makes a GitHub release with the .mcpb.

License

MIT

Frequently asked questions

What is io.github.beSaif/zenpilot?

Let Claude use your Zen Browser, like Claude in Chrome. No extension, only sites you allow.

How do I install io.github.beSaif/zenpilot?

It runs on your machine. In Claude Code: claude mcp add zenpilot -- uvx zenpilot==0.5.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.beSaif/zenpilot need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.beSaif/zenpilot open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.beSaif/zenpilot?

It is published by beSaif. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.