better-browser-mcp

I read through my own agent sessions. Browser agents took 1,849 screenshots and read the page as text 7 times. Most of the tokens went into looking at pages, not into doing the work.

bopbop is an MCP server that gives any agent (Codex, Claude Code, or any other MCP client) your real Chrome, with your sign-ins: the kind of access Claude in Chrome gives Claude. In our benchmark it does that job better than Claude in Chrome: 72% fewer tokens, 3.5× faster, and it passed all 32 runs where Claude in Chrome passed 28.

The browser answers in text, in few calls. Open a page and you get the page. Do several things and you get back what happened.

> navigate /login-form/
  # Sign in
  textbox "Username" [e1]
  textbox "Password" [e2]
  checkbox "Keep me signed in" [e3]
  button "Sign in" [e4] disabled

> act  type e1 "bench_user" · type e2 "S3cure!pass#42" · click e4
  1. type e1 "bench_user" ✓
  2. type e2 "S3cure!pass#42" ✓
  3. click e4 ✓
  # Welcome back
  You are signed in as bench_user.

That is a login in two calls. The output above is real, from a test page in fixtures/.

The numbers

16 hard pages (iframes, shadow DOM, native dialogs, popups, uploads, and a prompt-injection trap). Claude Sonnet 5.5, 2 runs each. The server checks success, not the agent.

Medians of 3 runs. Each run is checked against ground truth (the HN API, the live product page, the cart), not against what the agent says it did.

All runs passed (3/3) on both sides. The samples are small: treat differences under ~15% as noise. Method, raw runs and failures are in bench/.

Related MCP server: huashu-chrome

Quick start

cd prototype && bun install        # or npm install
claude mcp add -s user bopbop -- bun "$PWD/src/server.ts"
# Codex: codex mcp add bopbop -- bun "$PWD/src/server.ts"

Then load the Chrome extension (2-minute guide) and ask:

Use bopbop. Open example.com and tell me the heading.

Demos

The extension pairs with the server by itself: no token to paste. Each video is 30–40 s.

Why it feels different

It stays out of your way. The agent works in its own tab group. It never takes your active tab and never steals focus. Up to 30 sessions share one Chrome, and each session sees only its own tabs. If you reload the extension or restart Chrome, the next call reconnects.

It does not lie about clicks. If a click changes nothing, bopbop tries once more with the keyboard. If that also fails, it reports ⚠ no effect, not ✓.

It keeps your wallet closed. BBM_GUARD=shop-social blocks Buy now, Place order, checkout and Post, at three levels. Hidden text never gets to the model, and lines that look like prompt injection are flagged.

Fewer calls, fewer tokens

• navigate returns the page. act runs a batch of steps and returns a diff.

• A compact snapshot (role "name" [e5] states) that sees into iframes and shadow DOM.

• In an open dialog or composer, snapshots cover only that dialog.

• extract gives tables and records as JSON. read gives the main content as Markdown.

• 13 tools, ~2.5k tokens of definitions (others use 5–7k).

Your Chrome, shared politely

• Extension mode drives your real profile. Agent tabs close when the session ends, except the tabs that you used.

• Fields in agent tabs opt out of password managers, so their pop-ups do not break the session.

Safety

• Cookie and credential header values are shortened. Downloads go into one folder, by name only.

• Local only: stdio and a paired local WebSocket. No cloud relay.

Developer tools

• network: timings, sizes, headers and cookies per request, filters, HAR export.

• emulate: device presets, dark mode, network and CPU throttling.

• perf: Web Vitals, long tasks, the heaviest resources, heap and DOM size.

License

MIT