List every open Safari tab, with the handle you use to address it.

Call this first. Every other tool takes a tab argument, and this shows you what is addressable: a 1-based index within window 1, or any distinctive substring of a tab's URL or title.

Returns one line per tab as [w<window>:t<index>] <title> — <url>.

Read the visible text of a tab, or of one element inside it.

This is the workhorse — prefer it over screenshots. It returns rendered text (innerText), so it reflects what a person would actually see rather than raw markup.

Args: tab: Tab index within window 1, or a substring of its URL or title. selector: Optional CSS selector. Omit it to read the whole page. max_chars: Truncate beyond this many characters. Default 8000.

Inspect the elements a CSS selector matches, before acting on them.

Use this to check that a selector hits what you think it does, and to read the index you will pass to click or fill. Returns JSON with each match's tag, id, class, visible text, href, name, type and current value.

Args: tab: Tab index within window 1, or a substring of its URL or title. selector: The CSS selector to inspect. limit: Most elements to describe. Default 20.

Open a URL in a new Safari tab and wait for it to finish loading.

Prefer this over navigate when starting a task: it leaves whatever the person was already reading untouched. Returns the new tab's handle and its final URL, which may differ from the one you asked for if the site redirected.

Args: url: The URL to open. Parentheses and spaces are encoded for you.

Point an existing tab at a URL and wait for the load to complete.

Returns the URL actually landed on, so you can see redirects. Parentheses, spaces and other characters Safari's URL setter silently refuses are percent-encoded for you.

Args: tab: Tab index within window 1, or a substring of its URL or title. url: Where to send it.

Click an element. Check it with find_elements first.

Passes through the denylist and then the local safety gate, either of which may refuse — the refusal explains itself and is worth relaying verbatim rather than retrying.

Args: tab: Tab index within window 1, or a substring of its URL or title. selector: CSS selector for the element. index: Which match to click when the selector hits several. Default 0.

Type a value into an input, textarea, or contenteditable element.

Sets the value through the element's native setter and then dispatches input and change with bubbles: true. That matters: Google Forms, React and other frameworks listen for those events and ignore a bare assignment to .value, so a naive fill looks correct on screen and submits empty.

Args: tab: Tab index within window 1, or a substring of its URL or title. selector: CSS selector for the field. value: The text to enter. index: Which match to fill when the selector hits several. Default 0.

Run arbitrary JavaScript in a tab. The escape hatch; prefer the others.

Your code runs as a function body, so return the value you want back. The result is JSON-encoded, so return plain data rather than DOM nodes.

Args: tab: Tab index within window 1, or a substring of its URL or title. code: JavaScript to execute. Use return to produce a result.