Kitsune

Kitsune

[Kitsune: an orange fox in a browser window, connecting your browser and your AI agent]

[kitsune-browser-mcp on PyPI] [kitsune-browser on PyPI] [Python] [Release] [License: MIT] [Docs]

Let your coding agent use the browser you already have open, while you keep using it too.

Kitsune connects Claude Code, Codex, Pi, OpenCode and other MCP clients to Firefox, Zen or LibreWolf. The agent works in background tabs of its own, signed in wherever you are signed in. It can read your tabs, but it has to ask before it changes one. There is no Playwright, Chromium or WebDriver to install.

[Claude Code asks for the user's Wikipedia tab after researching in background tabs; the user approves in Kitsune's toolbar popup, the agent jumps the tab to the right section, and the user takes the tab back and closes the agent's tabs from the popup]

_{New in 0.7.2: the agent asks for your tab, and you approve, take it back and clean up from the toolbar popup. A real recording on Wikipedia, sped up while the agent thinks (full 45-second video).}

Why Kitsune?

• It works beside you. New tabs open in the background, so the page you are on stays in front. Your tabs, and tabs other agents opened, are read-only to the agent: it can read them, but it cannot click, type, scroll, navigate or close them. If you start typing in one of the agent's own tabs, it waits.
• You stay in charge. When the agent needs one of your tabs, it asks, and you answer in Kitsune's toolbar popup. You can take the tab back at any time. The popup also shows whether the agent is connected, and closes all of the agent's tabs with one click. Tabs the agent leaves idle close by themselves after five minutes (you can change this in the popup).
• The tools are familiar. The agent starts with Playwright MCP's 25 core tools, under the same names, plus browser_ask_user and browser_resume for when it needs you. Prompts written for Playwright MCP work unchanged. More tools (page text, forms, batches, downloads, …) stay off until you allow them.
• You decide how much to hand over. KITSUNE_MODE=read, draft or act limits what the agent can do. In draft mode it can fill in forms but cannot click or submit.

Get started

1. Install uv.

2. Install the browser extension in Firefox, Zen or LibreWolf.

3. Add Kitsune to your agent. For Claude Code:

   bash

   claude mcp add --scope user kitsune -- uvx --from kitsune-browser-mcp kitsune

   Codex, Pi, OpenCode, Claude Desktop and Cursor are in Installation.

4. Keep the browser open and ask in plain language:

   Research these three products in background tabs and compare them with links. Leave my current tab alone.

   Fill in a draft of this form. Don't submit it.

Kitsune starts its local bridge on its own. If the agent cannot connect, ask it to check the connection: the error's hint says what to fix.

Use a separate browser profile for agent work and sign in only to the accounts it needs. Ask the agent to check with you before it sends, buys or deletes anything. Nothing in Kitsune stops prompt injection, so read the security guide before using sensitive accounts.

Documentation

The full documentation is at junyeong-nero.github.io/kitsune:

• Installation: every MCP client, version pinning, upgrades
• Your tabs and approvals: what the agent may do to your tabs, and how you approve
• Tools, capabilities and modes: KITSUNE_CAPS, KITSUNE_PUBLISH and KITSUNE_MODE
• Python API: drive the browser from your own scripts with pip install kitsune-browser
• Troubleshooting · FAQ · Benchmark and comparison · API reference