Kitsuvo
io.github.leancoderkavyPublished by GitHub account leancoderkavyv0.2.10Updated Nov 7, 2026
Browse and inspect sites in your own Kitsuvo browser through an opt-in authenticated relay.
Overview
Lets an assistant drive the Kitsuvo desktop browser: open and read pages, explain AI-built detection evidence, and check responsive layouts.
- What you can do
- Open pages in Kitsuvo, read page text and snapshots, click and type on accessible elements
- Explain detection reports: score, identified builder, strongest signals, and separate AI-built, slop and impersonation verdicts
- Resize a page to phone, tablet and desktop sizes and report layout problems
- Check the connection and diagnose a missing browser executable
- Provide an interactive browser panel with navigation, tabs and page controls in supported hosts
- When to use it
- Useful when you want an agent to browse in your own Kitsuvo browser rather than a headless one, to explain why a site was flagged as likely AI-built, or to check a page's layout at several device sizes. Optional: filtering search results does not require it.
- Requirements
- The Kitsuvo desktop browser must be installed on Windows (64-bit) or macOS, with kitsuvo on PATH; the integrations do not install it. The registry endpoint is a remote OAuth-protected cloud relay, and connecting requires running the local connector and approving a client in the terminal. Local plugin routes need no account or API key; the HTTP bridge needs Node.js 22 or newer and a private KITSUVO_MCP_TOKEN.
Installation
In SourceWeft
- Open Kitsuvo in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.leancoderkavy%2Fkitsuvo/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"kitsuvo": {
"type": "http",
"url": "https://kitsuvo-mcp-relay.fly.dev/mcp"
}
}
}README
Kitsuvo integrations
[Kitsuvo: free browser for Mac and Windows] [MCP: stdio and Streamable HTTP] [Claude Code and Codex plugin] [Node.js 22 or newer] [License: Kitsuvo Integration License] [Last commit]
Kitsuvo hides likely AI-built websites in Google, Bing and DuckDuckGo, shows the evidence, and lets you open any page anyway.
Kitsuvo is a free browser for Mac and Windows. The integrations here are the secondary, optional way to use it: they let an AI client such as Claude Code, Codex or another MCP client drive that browser. You do not need them to filter search results. With them, an agent can open a page, read it, and explain the local evidence behind its AI-built, slop and impersonation verdicts, or check a layout at phone, tablet and desktop sizes.
This repository holds the public installation sources: the plugin and its four agent skills (setup, browse, evidence, responsive), the local HTTP MCP bridge, the cloud relay connector, a Rust MCP client, and browser-extension developer previews. The browser itself is a separate download.
Get Kitsuvo: kitsuvo.com for Windows (64-bit) and macOS (Apple silicon and Intel). Free, no account. First-launch prompts are explained at kitsuvo.com/install. The plugins start the installed browser; they do not install it. The filter is also available as a browser extension.
What your agent can do
No Kitsuvo account or API key is needed for local browsing and detection.
Additional clients
Client configs and desktop extension cover Cursor, VS Code, Gemini CLI, Cline, Continue, LM Studio, Devin and remote workflow clients. Registry metadata describes the opt-in authenticated endpoint. Directory approval is separate from these install sources.
Install
Every row except the extension needs Kitsuvo installed with kitsuvo on PATH.
If it is not on PATH, use the executable's absolute path as command and keep
the argument mcp.
Then ask: Open https://example.com in Kitsuvo and explain its detection evidence.
Claude Code
Install Kitsuvo on Windows or macOS and make kitsuvo available on PATH.
Then run:
The local server runs in Claude Code and Cowork. It does not run on Claude web or mobile.
Codex
The plugin includes setup, browsing, detection-evidence, and responsive skills.
Do not assume the connection is isolated from your normal sign-ins. On current
Mac 0.2.36, local MCP reuses the normal profile by default; add --separate-profile
to a direct MCP configuration for a separate persistent profile. Check your
installed build's browser_status and the connection guide.
Windows 0.2.4 predates browser_status and cannot satisfy the current connection
check; no qualified replacement Windows release is currently published.
The plugin requires the installed desktop browser; it does not install it.
Browser inside ChatGPT, Claude, Cursor, or T3 Code
The MCP App bridge provides an interactive browser panel with navigation,
tabs, page controls, detection evidence and Windows/macOS previews. Pages still run
in Kitsuvo on your computer. For Claude Desktop, launch
node integrations/mcp-http/server.mjs --stdio after installing that directory's
dependencies. For cloud hosts, use an authenticated tunnel or the cloud
connector's --app mode. See panel setup
and cloud setup.
Use node integrations/mcp-http/setup.mjs --host cursor --binary /absolute/path/to/kitsuvo
to print a local visual-panel configuration. Hosts claude, t3code, and
chatgpt have their own setup routes; see host setup.
T3 Code's embedded UI depends on the selected provider and build.
Other applications can mount the same panel with the typed
@kitsuvo/mcp-http/embed host SDK and an authorized MCP client. Try
npm run embed in integrations/mcp-http, then open
http://127.0.0.1:8787/embed. Set a private KITSUVO_MCP_TOKEN first and enter
it in the example's password field. See embedding Kitsuvo
for lifecycle, isolation and shared-profile details.
HTTP MCP
Node.js 22 or newer is required. The bridge binds only to loopback and is for a
secure, authenticated tunnel. Every HTTP request must carry the matching
Authorization: Bearer <KITSUVO_MCP_TOKEN> header. See the setup guide for
PowerShell. Public cloud-directory submission needs a stable
HTTPS endpoint with authentication and a connection to each user's own browser.
See MCP setup.
Authenticated cloud relay
integrations/mcp-cloud includes the separate OAuth-protected cloud relay and
interactive local connector. The endpoint is
https://kitsuvo-mcp-relay.fly.dev/mcp. Connecting forwards selected page results
to the relay and the client you explicitly approve. Disconnecting revokes access.
See cloud setup for prerequisites, consent,
ephemeral-state limits and remaining publisher identity requirements.
Rust connector client
Build the standalone client with cargo build --locked --manifest-path crates/kitsuvo-connectors/Cargo.toml. It discovers and calls tools from explicitly
approved stdio and Streamable HTTP MCP servers. OAuth credentials are stored in
the macOS or Windows credential store. See connector setup
for approval syntax and current provider qualification limits.
Browser extensions
Free public store installs:
Store versions can be older than the preview ZIPs, so a change in a preview may not be in the store build yet. kitsuvo.com/extensions has the current store links and preview ZIPs. The extension works without installing the desktop browser.
extensions/chromium targets Chrome, Edge, Opera, Brave and Vivaldi.
extensions/firefox can be loaded temporarily for testing; use the Firefox
Add-ons listing for a normal install. extensions/safari is source that needs
Apple packaging and signing; use the Mac App Store listing to install. See
browser setup.
The extension checks local builder fingerprints and optionally filters search results. It has no cloud AI, telemetry, or desktop companion requirement. It does not include the desktop browser's full slop or impersonation checks. Manual packages remain developer previews. Browser-store availability does not establish approval in any AI-client directory.
Security and privacy
- Choose the profile. These local plugin configurations pass
mcpand inherit the installed browser's default. On current Mac 0.2.36 this reuses the normal signed-in profile, including website cookies. Add--separate-profilein a direct MCP configuration when you want a separate persistent profile. Checkbrowser_statusfor your installed build. The packages do not enable--allow-sensitive. - Sensitive pages are refused. Sign-in pages and password fields are not driven.
- Local by default. The plugin adds no analytics and no Kitsuvo-hosted upload service. Kitsuvo itself sends no telemetry.
- What the AI client sees. Tool arguments (URLs and any text you ask it to type) go to the browser. Page text, snapshots, reports and supported screenshots go back to the connected client, which handles them under its own data policy. Pages can contain personal data.
- Cloud paths are opt-in. The loopback bridge is not exposed unless you put a tunnel in front of it. The cloud relay reaches your browser only while you run its connector and after you approve a client in your terminal.
- Evidence, not proof. AI-built is provenance, not proof of harm. A low score is not proof of human authorship or safety.
Full policy: kitsuvo.com/privacy. To report a vulnerability, see SECURITY.md.
FAQ
What is Kitsuvo? A free browser for Mac and Windows that hides likely AI-built websites in Google, Bing and DuckDuckGo, shows the evidence, and lets you open any page anyway. These integrations are the optional, secondary way to let an AI agent use it.
Do I need an account, API key or paid plan? No. Local browsing and detection need none. Optional cloud AI checks in the desktop app are separate.
Does installing the plugin install Kitsuvo? No. Install the desktop browser
first. The plugin runs kitsuvo mcp.
Which systems are supported? The desktop browser is for Windows (64-bit) and
macOS (Apple silicon and Intel). Screenshot support depends on your installed
build: request only a mode that browser_status reports, and use snapshots when
image capture is unavailable. On Linux or ChromeOS, try the
extension preview.
Can the agent use my signed-in browser? Yes, when it uses your normal
profile: that is the local MCP default on current Mac 0.2.36. A separate profile must
be selected explicitly with --separate-profile. Sensitive sign-in pages and
password fields are protected by default. Page text from other signed-in pages
can still reach the connected AI client.
Does it work with ChatGPT? Through the Codex local marketplace, or a cloud client via the HTTP bridge with a secure tunnel or the cloud relay.
Is it listed in the Claude, ChatGPT or browser-extension stores? The extension has public listings on the Chrome Web Store, Edge Add-ons, Firefox Add-ons and the Mac App Store (Safari), linked above. That is separate from AI-client directory approval; no such approval is established here. The local Claude Code and Codex plugin install routes use this repository.
Can it prove a site was written by AI? No. It reports builder evidence and separates AI-built, low-value content and impersonation. Detection depends on recognizable traces.
Can I fork or redistribute this? The Kitsuvo Integration License allows personal use and local configuration changes. Other modification or redistribution needs written permission from [email protected].
Something broke. Open an install help or bug report issue. See CONTRIBUTING.md.
Repository map
Source: README.md at commit 5f7726d
Tools
0Version history
4- v0.2.10LatestOct 19, 2026
- v0.2.8Oct 17, 2026
- v0.2.7Oct 13, 2026
- v0.2.6Oct 11, 2026
Score
83% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.