# kitsune [Health: Active]

**Category:** 📂 Browser Automation  
**Repository:** https://github.com/junyeong-nero/kitsune  
**GitHub Stars:** 36  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/kitsune

## Description
MCP server that lets AI agents use your Firefox, Zen, or LibreWolf browser.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `uvx` (confidence: high):

```json
"mcpServers": {
  "kitsune": {
    "command": "uvx",
    "args": ["--from","kitsune-browser-mcp","kitsune"],
    "env": {
      "KITSUNE_MODE": "",
      "KITSUNE_USER_TABS": ""
    }
  }
}
```

**Requires environment variables:** `KITSUNE_MODE`, `KITSUNE_USER_TABS` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What kitsune does

kitsune lets MCP-compatible coding agents operate Firefox-family browsers that you already use: Firefox, Zen, and LibreWolf. The agent can open background tabs, inspect pages, navigate its own tabs, and perform browser tasks through a set of 25 core tools aligned with Playwright MCP's familiar tool names. Prompts written for Playwright MCP can therefore be reused.

The browser extension keeps the agent's work separate from the tab you are using. Tabs opened by the agent are available for agent actions, while your tabs and tabs created by other agents are read-only by default. When the agent needs to work in one of your tabs, it requests access through the extension's toolbar popup. You can approve, decline, or take the tab back.

## How it works

A local MCP process communicates with the browser extension through kitsune's local bridge. The bridge starts when the MCP server runs, so the browser only needs the extension installed and open. Agent tabs open in the background, allowing you to continue using the browser. If you begin typing in an agent-owned tab, the agent waits.

The extension popup shows the connection state, pending approval requests, and controls for reclaiming tabs or closing the agent's tabs. Idle agent tabs close automatically after five minutes by default; that interval can be changed from the popup.

Kitsune supports three operating modes. `read` restricts the agent to reading, `draft` permits form filling without clicking or submitting, and `act` allows the broader action set. Risk-sensitive operations such as form submission, payment pages, JavaScript, and cookie access can use an approval policy. For sign-ins, CAPTCHAs, or decisions that require the user, `browser_ask_user` pauses for input and `browser_resume` continues the task.

## Setup and configuration

Install `uv`, add the kitsune browser extension to Firefox, Zen, or LibreWolf, and register the local server with your MCP client. The server command is:

```bash
uvx --from kitsune-browser-mcp kitsune
```

For Claude Code, registration can be done with:

```bash
claude mcp add --scope user kitsune -- uvx --from kitsune-browser-mcp kitsune
```

Keep the browser running while the agent uses it. A separate browser profile is recommended for agent work, with only the accounts required for the task signed in.

Set `KITSUNE_MODE` to `read`, `draft`, or `act` to limit the agent's operating scope. Set `KITSUNE_USER_TABS=writable` if you explicitly want the agent to modify your tabs without requesting access first.

## Tools and capabilities

- Read open tabs and operate agent-created background tabs.
- Use the 25 core Playwright MCP-compatible browser tools.
- Ask the user for sign-in, CAPTCHA, or other human decisions.
- Pause and resume after user interaction.
- Request controlled access to a user-owned tab.
- Use additional page-text, form, batch, and download tools after they are enabled.
- Keep user tabs read-only by default.

## Limitations and notes

Kitsune targets Firefox, Zen, and LibreWolf rather than Chromium browsers. It does not require Playwright, Chromium, WebDriver, or Firefox startup flags, but it does require the browser extension and a running browser.

The agent cannot automatically write to protected user tabs. Approved access can be withdrawn with **Take back**, and the extension does not provide the agent with the user's physical mouse or keyboard. The `writable` setting removes the approval step, so it should be enabled only when that behavior is intended.

Prompt injection is not prevented by kitsune. Review its security guidance before using sensitive accounts, and ask the agent to confirm before sending messages, making purchases, or deleting data.

_Full upstream README: https://allmcps.com/mcp/kitsune/readme_