Zenpilot MCP server

<!-- mcp-name: io.github.beSaif/zenpilot -->

Let Claude use your Zen browser. Works with Claude Desktop and Claude Code, kind of like Claude in Chrome but for Zen.

There's no browser extension. zenpilot opens Zen with its remote control turned on and talks to it directly.

Alpha. Only tested on macOS with Zen 1.23.

Install

You need a Mac with Zen in /Applications.

Claude Desktop: download zenpilot-.mcpb from the latest release and open it. That's it.

Claude Code (or both): with uv installed, run:

uv tool install zenpilot
zenpilot setup

Setup asks which Zen profile to use and which sites Claude may visit. Then it connects zenpilot to Claude Code (and Claude Desktop, if you have it) and opens Zen. Restart Claude Desktop afterwards.

Use it

Just ask Claude: "order a large pizza with bacon on httpbin.org/forms/post for Sam, then submit it".

The first time, a few popups may show up. Only you see them, not Claude:

your own profile if you want Claude to use sites you're logged into.

• Which profile? zenpilot is a fresh profile that isn't logged in to anything. Pick

it. Your tabs come back.

• Reopen Zen? If Zen is already open without remote control, zenpilot offers to restart

This Session or Always Allow*.

• Allow this site? Claude only works on sites you allow. Choose Don't Allow, *Allow

Pressing Enter always picks the safe answer.

Claude can open, switch and close tabs, go to a URL, read the page, click, type, scroll and take screenshots. It can't touch cookies, passwords or downloads, and it can't run its own JavaScript.

Staying safe

zenpilot allow github.com.

• Allowlist. Claude only works on sites you've allowed. Add one with

profile, a shady page could try to trick Claude into doing stuff in your accounts, so only allow sites you trust.

• Stick to the zenpilot profile if you can. It's logged out of everything. On your main

to it too, and some sites (banks, Cloudflare checks) may think you're a bot. When you're done, quit Zen and open it normally.

• Read-only mode. Set read_only = true and Claude can look but not click or type.
• Log. Everything Claude does is written to ~/.local/state/zenpilot/audit.jsonl.
• Remote control is open while Zen runs this way. Other apps on your Mac could connect

zenpilot also stops Zen from switching off its own protections (Safe Browsing, the popup blocker and so on), which would otherwise happen when remote control is on.

Commands

Settings

They live in ~/.config/zenpilot/config.toml, and changes apply right away.

Shortened. The full README is on GitHub.