{"repo":"noelschwarz/coral","free":true,"listed":false,"github":"https://github.com/noelschwarz/coral","clone":"git clone https://github.com/noelschwarz/coral.git","description":"Coral is an open-source, local-first session bridge that lets AI agents borrow a user's already-authenticated browser sessions on a per-site, per-action, fully audited basis.","language":"Python","stars":39,"topics":["agents","ai","browser-automation","chrome-extension","local-first","mcp","playwright","security","ai-agents","model-context"],"license":"Apache-2.0","category":"ai-agents","readme_excerpt":"Coral — sudo for browser agents Alpha — pre-audit. Coral has not yet undergone an external security review. The design (THREAT MODEL.md) is transparent about what's defended and what isn't, but until a v1.0 release ships with a third-party review, treat Coral as experimental. Don't use it to broker sessions for accounts you can't afford to have compromised. Coral is a local-first session bridge that lets AI agents borrow your already-authenticated browser sessions on a per-site, per-action, fully audited basis. You log in once in your real Chrome — passing 2FA, captchas, whatever — and Coral persists the resulting authenticated state in a passphrase-encrypted vault. When an agent needs to act on that site, Coral spins up a fresh isolated Chromium with your session restored and hands the agent a CDP URL it can drive. The agent never sees your password. How it fits together - Python daemon + CLI (this repo) — vault, HTTP API, MCP server, Playwright session manager, policy engine. - Chrome extension ( extension/ ) — captures sessions from your normal browsing. Submitted to the Chrome Web Store; while the listing is under review, load it unpacked as shown below. - MCP — any MCP-speaking agent (Claude Desktop, Cursor, Claude Code, browser-use, Stagehand, …) drives Coral over stdio or local HTTP. What it looks like in your code The dominant use case is embedding Coral as a session manager inside your own agent code . You log in to a site once in your real Chrome, Coral persists the","default_branch":null,"files":null,"tree":[],"storefront":"/r/noelschwarz","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/noelschwarz/coral/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}