Ghostlight
Ghostlight is a browser automation MCP server that lets AI agents control a real Chromium browser (with your existing session/cookies) in a visible, local, and governed manner. It provides:
Tab & Session Management: Create, list, focus, reload, close tabs in a dedicated group; resize window; get tab context.
Navigation: Navigate URLs, forward/back history.
Interaction & Input: Mouse (click, drag, hover, scroll, zoom), keyboard (type, key presses), and form filling (by ref or label, with submit); file/image uploads.
Page Analysis: Extract accessibility tree (with diffs), raw text, find elements by natural language, read console/network logs.
JavaScript Execution: Run arbitrary code in page context.
Workflow Automation: Execute scripted sequences of tool calls with batching, inter-step data flow, and dry-run; wait for conditions or settlement.
Monitoring & Debugging: Inspect/dismiss JavaScript dialogs, record sessions as animated GIFs.
User Feedback & Governance: Present plans for approval, show narration ribbons; apply capability policies, audit actions, protect sacred domains; no telemetry/subscription.
Provides browser automation and an agent workspace inside the Brave browser, enabling agents to navigate, read pages, fill forms, upload files, and interact with the signed-in session in a dedicated tab group.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@GhostlightFill out the expense report on our HR portal and submit it"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Ghostlight gives compatible AI agents a dedicated workspace inside the Chromium profile you already use. Your signed-in sessions are there. The work stays visible. You can pause, take over, or stop it at any time.
Ask an agent to read a page, complete a form, handle a file, follow a popup, or investigate a failed web workflow. Ghostlight carries the task across tabs and browser changes while keeping the browser work and its controls on your machine.
Your first five minutes
You need Chrome, Edge, Brave, or Chromium 116+, an MCP client, and Node.js for the installer. The service you run afterward is native Rust.
Install Ghostlight and register the MCP clients it finds:
npx -y ghostlight installAdd Ghostlight in Browser from the Chrome Web Store.
Restart an MCP client if it does not hot-reload tools.
Give it one small, read-only task:
Open https://example.com/ in a new Ghostlight tab, summarize the page, and tell me which tab you used. Do not click, type, submit, or change the page.
A sky-blue Ghostlight group should appear in your browser. The agent opens the page, reads it, and names the exact tab it used. That one prompt proves the whole connection without authorizing a click or write.
If a step needs attention, run:
npx -y ghostlight doctordoctor checks the client entry, local service, browser connection, and extension, then names the
next action. The installation guide covers targeted clients,
Homebrew, source builds, updates, uninstall, and symptom-led recovery.
Related MCP server: Scout
From one page to a whole workflow
Ghostlight is at its best when browser work has a thread to follow:
Pick up where you are signed in. Open an application in the Chromium profile you chose and work with the session already there. Credentials stay with the browser.
Finish the interaction. Navigate, fill forms, upload files, resolve dialogs, wait for page state, and carry results from one step into the next.
Follow the browser. Keep working when a site opens a supported child tab or when a known workspace changes underneath the task.
See what failed. Bring page state, console messages, and network requests together so the next debugging step comes from evidence instead of guesswork.
Use the same browser capability from Codex, Claude Code, Claude Desktop, Cursor, VS Code, Windsurf,
Zed, OpenCode, Crush, or another compatible stdio MCP client. Agents receive structured page
reads, exact element references, bounded action receipts, and specific recovery guidance. They can
call explain for the live action and capability directory whenever a task needs it.
The browser stays a shared space
Ghostlight works in a dedicated sky-blue tab group inside the browser window you chose. Page scans, clicks, typing, drags, and longer phases share one visual language, so the movement on screen has an explanation.
Pause the workspace, take over for a delicate step, or stop it. Move its tabs where you want them; Ghostlight follows the workspace instead of snapping it back. Ordinary tabs remain outside the agent's owned set.
Personal use is complete without a policy manifest. Start with the full browser engine and get
useful work done. When a workflow needs stronger boundaries, grant read, action, write, and
execute capabilities by MCP identity and domain. Add sacred domains, dry-run preflight, and
structured audit while the browser experience stays the same.
The governance guide shows the operating model. The Trust Center carries the security, privacy, continuity, deployment, and procurement evidence. The decision aid covers other browser operating models when that is the question.
Platform state. Windows and Linux are verified end to end against live browsers. macOS builds and passes the full test suite in CI; its live-browser verification is still owed.
Extension state. The Chrome Web Store serves Chrome adapter v0.8.0. Chrome adapter v0.8.0 covers Ghostlight service versions v0.8.x. Install the extension from the public listing. See the full adapter compatibility map.
The service and Chrome adapter version independently. The compatibility map is authoritative, and the public status file owns current release, platform, and store state.
The 0.8 source candidate implements exact local stdio MCP revisions 2025-11-25 and
2026-07-28. See the changelog for release changes and upgrade consequences.
MCP Client <--stdio--> ghostlight-mcp-connector <--typed local IPC--> ghostlight service
<--browser IPC--> ghostlight-browser-connector <--native messaging--> Extension <--CDP--> BrowserThe connector owns MCP protocol state. The persistent service owns workspaces, browser coordination, optional governance, and audit. The browser connector passes native messages, while the extension owns Chrome mechanism. Each role can reconnect independently.
ADR-0096 explains the boundary. docs/SPEC.md gives the deeper governance model. The installation guide includes the source-development path.
Choose your next step
I want to... | Start here |
Install, verify, update, recover, or uninstall | |
Let an AI client perform setup | |
Try a complete visible workflow | |
Build from source and test locally | |
Understand which browser operating model fits | |
Add boundaries or review trust evidence | |
Contribute code, docs, testing, or ideas | |
Read the architecture decisions |
License and continuity
The browser automation engine outside crates/core/src/governance/ is Apache-2.0 OR MIT. The
governance module is source-available under the Ghostlight Commercial License and is free for
individuals, teams of up to five, evaluation, development, all-open operation, and qualifying
noncommercial use. LICENSING.md maps the exact boundary.
License state never changes runtime behavior. An installed copy does not call a Ghostlight service for telemetry, activation, or updates, and it keeps working without the vendor. The Continuity Promise and PRICING.md carry the durable terms.
Questions and contributing
Use GitHub Issues for reproducible defects and GitHub Discussions for questions and ideas. Use hello@sylin.org for security, licensing, or information that cannot be public.
CONTRIBUTING.md explains the project's boundaries, test expectations, and ways to participate.
Maintenance
Related MCP Servers
- AlicenseAqualityCmaintenanceMCP server + Chrome extension that gives AI coding agents control of your real browser with existing sessions, logins, and cookies. Works with Cursor, Claude, Windsurf.188847MIT
- AlicenseBqualityCmaintenanceBrowser MCP server that connects to your existing browser, preserving sessions, passwords, and extensions, enabling AI agents to interact with web pages without bot detection.3171MIT
- FlicenseNot gradedqualityBmaintenanceMCP server that enables AI agents to automate browser testing via Chromium, providing tools for navigation, interaction, and inspection.
- AlicenseAqualityDmaintenanceSelf-hosted MCP server for AI browser automation. Connects to your own Chromium instance via CDP, providing tools for browser control, navigation, interaction, and content extraction.191MIT
Related MCP Connectors
Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.
Live browser debugging for AI assistants — DOM, console, network via MCP.
AI-powered browser automation — navigate, click, fill forms, and extract data from any website.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sylin-org/ghostlight'
If you have feedback or need assistance with the MCP directory API, please join our Discord server