Purroxy is an MCP server that gives Claude secure access to websites behind your login by replaying recorded browser automation actions. Credentials never leave your local machine, and sensitive data is redacted before being exposed to AI.
purroxy_status: Verify whether the Purroxy desktop app is running and reachable, and see how many automation capabilities are available.
purroxy_list_capabilities: Discover all recorded browser automations, including each capability's name, description, target website, and required input parameters.
purroxy_run_capability: Execute a recorded browser automation by name — Purroxy replays the saved steps in a headless browser using stored session credentials, accepts dynamic input parameters, and returns structured data extracted from the resulting page.
Deploys backend functionality to Cloudflare Workers, enabling serverless execution of Purroxy's automation capabilities in a distributed edge computing environment.
Record what you do on any website. Securely automate it forever.
Pre-release software. Purroxy is under active development. Functionality may be incomplete or break between updates — no guarantees are provided. If you run into issues or have feedback, please open an issue on GitHub.
Purroxy gives Claude secure access to websites behind your login. You walk through a site in Purroxy's built-in browser, and every action you take is recorded as a capability. At runtime, Purroxy replays those exact steps on your behalf. Your credentials never leave your machine.
Latest release — macOS, Windows, Linux.
Related MCP server: Self-hosted MCP server for Claude
Log in once — Enter a URL and log in through the secure embedded browser. Credentials never touch any AI.
Record what you want done — Walk through the site. Every click, search, and navigation is recorded as a reusable capability with parameters.
Ask Claude — Claude replays the recorded steps, fills in variable inputs, and extracts results. Your password is never stored or shared.
Zero-knowledge login — Purroxy never sees your password, only session cookies
Encrypted vault — Sensitive data stored in your OS keychain, typed into forms by Purroxy, never sent to Claude
Data scrubbing — Vault values removed from page content before Claude sees it
Local extraction — Data extracted on your machine, sensitive results redacted
Purroxy connects to Claude Desktop via MCP. One-click setup in Settings. Your capabilities become tools Claude can call.
Free during pre-release. Early accounts will be grandfathered when paid plans launch ($3.89/month). Or contribute a capability to the community library and use Purroxy free forever.
npm install
npm run dev # Vite dev server + Electron
npm test # Run tests
npm run package # Build distributableBackend (Cloudflare Worker):
cd backend
npm install
npm test # Run backend tests
npm run dev # Local dev server
npm run deploy # Deploy to CloudflareApache 2.0
List all browser automation capabilities recorded in Purroxy. Returns each capability's name, description, target website, and required parameters. Call this first to discover what automations are available before executing one with purroxy_run_capability. Requires the Purroxy desktop app to be running.
Inputs: no named parameters.
Execute a recorded browser automation capability by name. Purroxy replays the recorded actions in a headless browser with saved session credentials, then extracts and returns structured data from the resulting page. Call purroxy_list_capabilities first to discover available capability names and their parameters. Requires the Purroxy desktop app to be running.
Inputs: capability_name (required), parameters.
Check whether the Purroxy desktop app is running and reachable. Returns the connection status and the number of available capabilities. Use this to verify Purroxy is ready before attempting to run automations.
Inputs: no named parameters.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 3 tools
Each tool has a clearly distinct purpose: list_capabilities for discovery, run_capability for execution, and status for health checking. There is no overlap in functionality, making it easy for an agent to select the right tool for each task without confusion.
All tools follow a consistent verb_noun pattern with the prefix 'purroxy_' (e.g., purroxy_list_capabilities, purroxy_run_capability, purroxy_status). This predictable naming scheme enhances readability and usability across the tool set.
With only 3 tools, the set feels thin for a browser automation server, potentially lacking operations like managing capabilities (e.g., create, update, delete) or handling errors. However, it covers basic discovery, execution, and status checks, which is borderline but functional for its stated purpose.
The tools provide core functionality for listing and running capabilities, with a status check, but there are notable gaps: no tools for creating, updating, or deleting capabilities, and no error handling or session management tools. This limits the server's ability to fully manage browser automations, though basic workflows are supported.
Read-only access to your own bank, card and brokerage accounts for Claude, ChatGPT and other AI agents: balances, transactions, spending, subscriptions, cashflow and investment holdings. It can never move money.
Connect authorized ad accounts to AI assistants for audits, reporting, and approval-gated changes.
Connect Claude to your Platform7n workspaces: chat, links, work and decks. One-click OAuth.
Connect Claude to your Platform7n workspaces: chat, links, work and decks. One-click OAuth.
