beSaif/zenpilot

Claude Code, kind of like Claude in Chrome but for Zen.
There's no browser extension. zenpilot opens Zen with its remote control turned on and
talks to it directly.
> Alpha. Only tested on macOS with Zen 1.23.
## Install
You need a Mac with Zen in /Applications.
Claude Desktop: download zenpilot- .mcpb from the
latest release and open it. That's it.
Claude Code (or both): with uv installed, run:
sh
uv tool install zenpilot
zenpilot setup
Setup asks which Zen profile to use and which sites Claude may visit. Then it connects
zenpilot to Claude Code (and Claude Desktop, if you have it) and opens Zen. Restart Claude
Desktop afterwards.
## Use it
Just ask Claude: "order a large pizza with bacon on httpbin.org/forms/post for Sam, then submit it".
The first time, a few popups may show up. Only you see them, not Claude:
Which profile? zenpilot is a fresh profile that isn't logged in to anything. Pick
your own profile if you want Claude to use sites you're logged into.
Reopen Zen? If Zen is already open without remote control, zenpilot offers to restart
it. Your tabs come back.
Allow this site? Claude only works on sites you allow. Choose Don't Allow, Allow
This Session or Always Allow.
Pressing Enter always picks the safe answer.
Claude can open, switch and close tabs, go to a URL, read the page, click, type, scroll and
take screenshots. It can't touch cookies, passwords or downloads, and it can't run its own
JavaScript.
## When it gets stuck
zenpilot is far from perfect, and every site is different. When Claude can't do something
(say, upload a file), it notes what it tried. zenpilot also notes tool calls that failed or
took over 5 seconds. If anything went wrong, a notification at the end of the session points
you to a report in ~/.local/state/zenpilot/reports/.
sh
zenpilot report # show the latest report
zenpilot report --issue # open a GitHub issue with it filled in
What you typed and the pages' text stay out of it, Claude is asked to leave out personal data,
and URLs lose their ?query part. Still, read it before you submit.
## Staying safe
Allowlist. Claude only works on sites you've allowed. Add one with
zenpilot allow github.com.
Stick to the zenpilot profile if you can. It's logged out of everything. On your main
profile, a shady page could try to trick Claude into doing stuff in your accounts, so only
allow sites you trust.
Read-only mode. Set readonly = true and Claude can look but not click or type.
Log. Everything Claude does is written to ~/.local/state/zenpilot/audit.jsonl.
Remote control is open while Zen runs this way. Other apps on your Mac could connect
to it too, and some sites (banks, Cloudflare checks) may think you're a bot. When you're
done, quit Zen and open it normally.
zenpilot also stops Zen from switching off its own protections (Safe Browsing, the popup
blocker and so on), which would otherwise happen when remote control is on.
## Commands
| Command | What it does |
| zenpilot setup | Set everything up (see above) |