SeekBridge

简体中文 · Architecture · Security · Roadmap

Open-source browser control for DeepSeek-powered agents.

SeekBridge lets Reasonix, CodeWhale, and other MCP-capable DeepSeek agents operate task-owned tabs in your real Chrome profile. It combines semantic page snapshots, stable element references, CDP actions, task tab groups, and local safety controls in one small bridge.

[!IMPORTANT] This repository is a v0.1 developer preview. It is ready for local development and early testing, but not yet for unattended high-stakes workflows.

Why this project

DeepSeek-native agents are strong at code, shell, Git, and long-running reasoning, but browser automation is still assembled from generic tools that often open a clean browser or lose the user's signed-in state. This project focuses on one thing: making real-browser operation accurate and fast for DeepSeek agents.

• Real Chrome state — use the user's existing profile, cookies, sessions, and extensions.
• DeepSeek-oriented tools — flat schemas, semantic refs, explicit recovery errors, and compact post-action deltas.
• Task isolation — every task owns a labeled Chrome Tab Group and cannot control unrelated tabs.
• Effect and speed first — Accessibility Tree observation, direct CDP input, event/state-based settling, no fixed multi-second sleeps.
• Local and open — authenticated loopback bridge, redacted local traces, no cloud relay or hosted telemetry.

How it works

Reasonix / CodeWhale / another DeepSeek MCP host
                         │ MCP over stdio
                         ▼
             Local MCP server + trace writer
                         │ authenticated WebSocket
                         ▼
                Chrome MV3 extension
                         │ CDP + tab ownership
                         ▼
                 Task-owned Tab Groups

The MCP server validates tools and correlates requests. The extension owns browser policy, task tabs, semantic observation, and CDP execution. Arbitrary JavaScript and unrestricted CDP are not part of protocol v1.

Quick start from source

Requirements: Node.js 22+, Chrome 116+, and an MCP-capable agent.

git clone https://github.com/Chang-Hai/seekbridge.git
cd seekbridge
npm install
npm run build
node packages/mcp-server/dist/index.js setup

The last command prints a local bridge URL and pairing token.

1. Open chrome://extensions.
2. Enable Developer mode.
3. Click Load unpacked and select packages/extension/dist.
4. Paste the bridge URL and pairing token into the extension Settings page.
5. Add the MCP server to your Agent using an absolute repository path.

{
  "mcpServers": {
    "seekbridge": {
      "command": "node",
      "args": [
        "/absolute/path/to/seekbridge/packages/mcp-server/dist/index.js",
        "mcp"
      ]
    }
  }
}

• Reasonix: save this as .mcp.json in the project root, then inspect /mcp.
• CodeWhale: merge it into ~/.codewhale/mcp.json, restart the TUI, then inspect /mcp.
• Ready-to-copy templates are in examples/.

Install the seekbridge-browser Skill in your Agent's supported skills directory for the recommended observe-act-verify workflow.

Tools in v0.1

Area	MCP tools
Connection and lifecycle	browser_status, browser_start_task, browser_end_task
Observation	browser_snapshot, browser_screenshot, browser_wait
Navigation and actions	browser_open, browser_click, browser_type, browser_select, browser_press, browser_hover, browser_scroll
Tabs	browser_list_tabs, browser_switch_tab, browser_close_tab

A snapshot returns elements such as [e17] button "Continue" plus a pageRevision. Ref-based actions accept that revision, recover a stale target only when the semantic match is unique, wait for the page to settle, and return a compact delta.

See MCP tool reference for complete inputs, behavior, and errors.

Safety defaults

• Only task-owned tabs can be controlled.
• Only HTTP and HTTPS navigation is accepted.
• New websites require a local allowlist grant.
• Likely send, publish, purchase, delete, account, permission, and security actions require extension confirmation.
• Password, one-time-code, and payment-card inputs are blocked in v0.1.
• Default traces exclude typed text, screenshots, page bodies, cookies, and headers.

Browser automation has the authority of the signed-in user. Read the full security model before using real accounts.

Develop

npm run typecheck
npm test
npm run build
npm run fixture

The last command serves a small local interaction fixture at http://127.0.0.1:4173 for manual browser testing.

Repository layout:

packages/shared       protocol, schemas, result and error types
packages/mcp-server   stdio MCP server, WebSocket bridge, redacted traces
packages/extension    Manifest V3 extension, CDP observer and actions, UI
skills/seekbridge-browser
fixtures/basic
docs

See CONTRIBUTING.md for the contribution workflow. Reliability issues with a minimal reproduction and a redacted trace are especially valuable.

Status and roadmap

v0.1 deliberately keeps one active extension connection, one agent session, and a fixed safe command set. Native Messaging, broader frame support, human takeover, multi-session concurrency, trace replay, and repeated-trial benchmarks are planned in later milestones.

SeekBridge is an independent community project. It is not affiliated with or endorsed by DeepSeek.

License

MIT