Secure bridge between Claude Code (MCP) and Chrome

A security-first bridge between Claude Code (MCP) and Chrome, featuring HMAC pairing and domain allowlisting.

Sallyport: Secure Bridge for Claude Code (MCP) and Chrome

Sallyport provides a robust and security-focused connection between Claude Code (MCP) agents and your Chrome browser. Designed for developers leveraging MCP, this tool ensures that your interactions with AI agents are protected through advanced security measures. It addresses the need for secure communication channels, allowing for seamless integration of AI capabilities directly into your browser environment without compromising data integrity or privacy.

What it Does

Sallyport acts as a secure intermediary, facilitating communication between your Claude Code (MCP) agents and the Chrome browser. It implements critical security protocols to prevent unauthorized access and ensure that only trusted agents can interact with your browser. This is achieved through a combination of HMAC pairing for authentication and domain allowlisting to restrict communication to pre-approved websites.

Key Features

HMAC Pairing: Implements keyed-hash message authentication code (HMAC) for secure agent authentication, ensuring that only authorized MCP agents can communicate.
Domain Allowlisting: Allows you to specify and restrict which websites your MCP agents can interact with, enhancing security and preventing unintended data exposure.
Security-First Design: Built with a primary focus on safeguarding your data and interactions with AI agents.
Developer-Centric: Tailored for developers who need reliable and secure integration of AI into their workflow.

Who it's For

Sallyport is an essential tool for AI developers, researchers, and anyone building or deploying Claude Code (MCP) agents that require browser interaction. If you are concerned about the security of your AI agent communications and need to ensure that your agents only interact with trusted domains, Sallyport is designed for you. It's particularly useful for projects involving web scraping, automated browser testing, or any application where secure AI-browser integration is paramount.