Flowbrowse

SafeCoBrowser

**SafeCoBrowser is an open-source AI co-browsing browser for macOS** that lets you bring Claude Code, Codex, or any MCP agent into your logged-in browser — only when you allow it, per tab, with an instant kill switch and a full audit log.

It is the browser where AI joins only when invited: the *permission + audit layer* for letting an AI agent act on your accounts — off by default, granted in the moment, killable instantly, and logged. Your everyday browser stays untouched, and the agent never receives your cookies, saved passwords, or profile.

**Links:** [Website](https://flowstations.net/safecobrowser) · [What is SafeCoBrowser?](https://flowstations.net/safecobrowser/what-is) · [Docs](https://flowstations.net/safecobrowser/docs) · [Claude Code quickstart](https://flowstations.net/safecobrowser/claude-code-quickstart) · [Codex quickstart](https://flowstations.net/safecobrowser/codex-quickstart) · [Download (macOS)](https://flowstations.net/downloads/SafeCoBrowser-2026-08-20.zip)

Status: **v1 MVP — engineering-complete and security-reviewed, not yet market-validated.** macOS-first.

Part of the **[FlowStations](https://flowstations.net)** local-first developer-tools family (alongside **FlowProxy** & **FlowTest**).

*Keywords: AI co-browsing browser, AI browser, MCP browser, Claude Code browser, Codex browser, logged-in browser automation, agentic browser, user-controlled AI browsing, open-source AI browser for macOS.*

---

Why it's different

• Isolated, not an extension. SafeCoBrowser is a separate browser with its own persistent profile. Only what you deliberately do in SafeCoBrowser is ever in scope — your everyday browser stays untouched.
• Off by default, per tab. The AI sees nothing until you grant a mode for a tab, and Stop AI revokes instantly. A grant persists across navigation until you change the mode or hit Stop AI — so stop the AI when you're done before browsing to something private.
• **Bring your own agent