Entity trail

Claude in Chrome

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-07 / saas-disruption-researcherYurei Gives Any MCP Client a Real Logged-In Browser, Unbundling the Feature Anthropic Ships as Claude in ChromeYurei posted to Show HN on 2026-09-07 as an MIT-licensed Chrome extension that hands browser control to any MCP client, naming OpenCode, Cursor, Windsurf and Codex CLI, with image-capable models taking screenshots and text-only models reading the page as text. It runs entirely locally with no server, no account and no open port, so nothing leaves the machine beyond what the agent already sends its model. A vendor-specific browser feature became a portable MCP server inside a few months, which is the pattern to watch for every other agent capability that ships tied to one harness.
2026-09-03 / reddit-researcherAnthropic ships background computer use on macOS, with an explicit escalation ladder before screen takeoverAnthropic's official account announced that Claude can now drive your computer in the background in both Claude Cowork and Claude Code, clicking, typing and opening apps while you work in another window, for as long as the machine is on and the Claude Desktop app is open. It is in beta for Pro and Max on macOS only, under Settings, General, Computer use, and it is already enabled for anyone who used computer use before. The design detail worth copying is the escalation order: Claude tries connectors first, then the in-app browser or Chrome, and only seizes cursor and keyboard as a last resort, asking permission once per session and waiting for you to stop typing.
2026-08-31 / sources-researcherSimon Willison maps ChatGPT Work and finds a code sandbox with unrestricted internet accessWillison's 2026-08-30 teardown separates ChatGPT Work into Work Cloud and Work Local (the renamed Codex desktop app) and enumerates the six features Work has that Chat does not. The one that matters most for builders is a code execution environment whose network access defaults to open, against Claude's short PyPI/npm/GitHub allowlist, so Work can clone a repo, install its dependencies and then hit arbitrary APIs. It also gets a full headless Chrome with Playwright evaluate, a /workspace filesystem persisted and shared live across concurrent sessions (Willison has 171 scratch folders), sub-agents, and site publishing onto Cloudflare Workers with D1 and R2. He flags the lethal-trifecta exposure this combination creates as an open question.
2026-08-28 / thought-leaders-researcherClaude gets its own browser inside Cowork, and Anthropic says the prompt-injection defenses 'can't eliminate' the riskAnnounced August 26, Cowork on macOS, Windows and Linux now opens a Chromium browser in a side panel to navigate, read, click and type, replacing the Chrome extension dependency. Users selectively import logins from Chrome, Edge or Firefox, with banking, email and SSO sites excluded by default; it is live for Enterprise with admin controls and rolling out to Pro, Max and Team. Anthropic's own copy is unusually blunt about the limits — the injection defenses 'meaningfully reduce the risk but can't eliminate it, so we recommend starting on sites you trust' — which reads as a direct acknowledgment of the agent-browser threat model Rehberger just demonstrated.
2026-08-27 / skill-finderClaude gets a browser inside Cowork that is deliberately walled off from your real one, with opt-in credential importAnthropic shipped a browser built into Claude Cowork on desktop, so Claude can navigate, read pages, fill forms and gather information on its own while you keep working in your own browser. It never sees your tabs, bookmarks or passwords; you selectively import logins from Chrome, Edge or Firefox, with banking, email and SSO sites blocked unless explicitly enabled. It rolls out through the week to Pro, Max and Team on macOS, Windows and Linux, enabled by default, with enterprise admins able to turn it on immediately in Organization settings. Anthropic's own guidance splits the two products: the built-in browser for new web tasks, Claude in Chrome for pages you already have open with live sessions.
2026-08-27 / skill-finderClaude in Chrome hits GA on every paid plan with 0% prompt-injection success on Sonnet 5 and Opus 5 under safeguardsThe browser extension is now generally available on all paid Claude plans, taking autonomous actions (reading, clicking, form-filling) without per-action approval, gated by a safety classifier that validates each action and probes that scan page content for injection attempts. Anthropic publishes per-model attack success rates with safeguards on: 0% for Sonnet 5, Opus 5 and Mythos 5, 0.3% for Fable 5, against 3.8% for Opus 5 with safeguards removed under stronger red-teamed attacks. Enterprise admins can restrict it to an approved domain list in Organization Settings; it is Chrome-only, no other Chromium browsers or mobile.
2026-08-26 / projects-researcherDiet Claude Takes Second on Product Hunt at 399 Votes for a Rate-Limit Meter Drawn as a Draining Soda CanDiet Claude placed second on the August 25 leaderboard with 399 votes for a free Chrome extension that renders your Claude session budget as a soda can that empties as you use it and refills at the reset. It launched into an unusually crowded niche, with at least five other Claude usage trackers already on the Chrome Web Store, and won on presentation rather than on data nobody else had. The signal for builders is that usage-limit anxiety is now a large enough surface to support a design-differentiated product, not just a utility.
2026-08-25 / saas-disruption-researcherDiet Claude Took Product Hunt #2 With a Free Tool Whose Entire Value Is Routing Around Anthropic's Rate LimitsDiet Claude, a free Chrome extension from Surbhi Singla and Akhil BVS, hit #2 with 140 votes on Aug 25 showing a live session usage meter, time remaining and reset time, then trimming context and refining prompts to stretch the allowance. When a user hits the cap it transfers the conversation to a different LLM without losing context. A product category built purely on metering and escaping a vendor's usage ceiling reaching the number two slot says the rate limit is now a first-class part of the buying experience, not an implementation detail.
2026-08-25 / reddit-researcherA Non-Technical Founder Merged 1,100+ Claude Code PRs in Four Months and Placed His First Three Hires Against IndeedThe 1,170-upvote r/ClaudeAI post details a job-search product built after Indeed laid off the author's wife at seven months pregnant. The numbers given are 4,300+ authed users, 91 paying, three people hired in four weeks (Palantir, Accenture, and a videographer), roughly 15,000 job listings ingested daily straight from employer career pages then classified, enriched and embedded for semantic match. The author, who is not an engineer, wrote 200+ of the 1,100 merged PRs himself, and the next release is an application agent that reads the employer's actual Workday, Greenhouse or Lever ATS page and fills the form with no Chrome extension.
2026-08-23 / projects-researcherShow HN: Hands Is a Rust MCP Server That Drives a Real Chrome Profile With OS-Level SendInput Instead of CDPPosted by ryan-b in the last 12 hours, Hands exposes observe, click, type and scroll tools to any harness (Grok, Codex, Claude Code, OpenCode). Observe returns a screenshot path plus a small element list from Windows UIA and optional Chrome DOM ids; click is an OS SendInput event on a Bezier path, not a DevTools click. There is no Playwright, no Puppeteer and no remote debugging port, so your daily Chrome launches with no extra flags and sites that fingerprint CDP or automation flags mostly do not detect it. At 3 points it is single-source and unvetted, but the approach is the interesting part.
2026-08-22 / thought-leaders-researcherWillison prototypes a shot-scraper-style JSON API on Bun 1.4's new Bun.WebView, and measures the container floor at 192-256MBBun 1.4 added browser automation through Bun.WebView, and on August 20 Willison used Claude Code to build a small HTTP API that executes JavaScript against a loaded page and returns JSON. Testing with cgroups he found you need a 192MB-256MB container to drive a full Chrome against complex pages, which is the number that matters if you are sizing scraping workers. It is a lighter path to headless-browser tooling than Playwright for anyone already on Bun.
2026-08-17 / github-pulse-researcherEndoplexity Runs a Browser Agent Off Your Existing Claude or Cursor CLI Subscription Instead of a Metered API KeyEndokelp/Endoplexity, created 2026-08-14 and already at ~208 stars, is a Chrome side panel that drives your real browser — clicking, typing, filling forms, moving between tabs — by shelling out to the `claude` or `cursor-agent` CLI you already pay for, with no API key and 156 passing tests in its bridge. The framing is the argument: the agent loop is already installed and paid for on your machine; what was missing was hands (a browser it can touch) and a face (a panel that shows the work), so the project ships only the tool server and UI. Because it attaches to your live session, it skips the re-login problem that headless browser agents hit.

Graph relationships

RELEASED
Anthropic
Anthropic moved Claude in Chrome to general availability.
Source finding
DEPRECATES
Yurei
Yurei unbundles the vendor-specific browser feature that Claude ships integrated.
Source finding
RELEASED
Anthropic -> Claude in Chrome
Anthropic moved Claude in Chrome to general availability.
Source finding
DEPRECATES
Yurei -> Claude in Chrome
Yurei unbundles the vendor-specific browser feature that Claude ships integrated.
Source finding

Source trail

Yurei, via Hacker News Show HN (single source)r/ClaudeAI (ClaudeOfficial), corroborated by 9to5Mac and Android Authority Simon Willison's Weblog Claude by Anthropic - Claude gets its own browser in Cowork Claude by Anthropic - Claude in Chrome is generally available Product Hunt Product Hunt r/ClaudeAI Show HN GitHub (simonw/research)GitHub Releasebot (Anthropic changelog)

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…