Skip to content

Your AI copilot, right inside your browser.

Chat with any page, run browser_* tools, and connect remote MCP servers — all from a private panel that keeps your API keys AES-GCM encrypted on-device.

Add to Chrome Explore features
  • Zero telemetry
  • · BYOK
  • · AES-GCM 256
  • · No debugger permission
technologyreview.com ×
+
browsepal.ai
technologyreview.com/10-ai-things-that-matter-2026
side panel
BrowsePal analysing a page inside the browser

400+ models · one OpenRouter key · any provider

  • Claude
  • GPT
  • Gemini
  • Llama
  • DeepSeek
  • Grok
  • Mistral
  • Qwen
Native and local providers coming soon
  • Anthropic soon
  • OpenAI soon
  • Google soon
  • Groq soon
  • Together soon

Features

A real copilot. Not a chat widget.

Everything in BrowsePal runs locally in your browser. The only bytes that leave the machine are the ones you send to the model — and the keys that authorise those calls never do.

Any model, one key

Bring your own OpenRouter key today — Claude, GPT, Gemini, Llama, DeepSeek, Grok, Qwen, and hundreds more. Native Anthropic, OpenAI, Google and other direct-provider integrations coming soon.

Agentic browser control

10 browser_* tools let the model click, type, scroll, navigate, and take screenshots in your active tab. No debug banner, no permission scare.

MCP servers, native

Connect remote Model Context Protocol servers over Streamable HTTP or legacy SSE. Per-chat toggle strip; auth headers.

Rich page context

Attach the current page (Readability), a text selection, viewport/full-page/region screenshots, open tabs, or PDFs. Paste images directly.

YouTube video summaries

Pin a YouTube tab and BrowsePal pulls the transcript and metadata — ask for a bullet summary, timestamps, or cross-video comparison.

Optional sync

Sign in with a magic link if you want your chats and preferences to follow you across devices — or keep everything local forever.

Yours to style

IDE and Studio variations, 5 accent colors, system/dark/light theme. Every token is a CSS variable — the whole UI retints instantly.

Attach anything

One menu. Every kind of context.

Hit Attach and the composer opens a quick-pick for everything you can pin to a turn — including YouTube transcripts for automatic video summaries.

  • Current page Readability-parsed article text, without chrome
  • Selected text whatever is highlighted on the active tab
  • Viewport & full-page screenshots DPR-aware, no debug banner
  • Region capture drag a rectangle over the page
  • All open tabs titles + URLs for cross-tab reasoning
  • YouTube videos transcript + metadata, ready to summarise
  • Files md, txt, csv, json, PDF, and images
  • Paste image straight from the clipboard into the composer
BrowsePal attach menu listing every context source: current page, selection, screenshots, tabs, files, paste image

Browser tools

The model drives the page. Not just chat.

Turn on Allow browser use on active tab and 10 provider-neutral tools (names mirror Playwright MCP) show up on top of your MCP servers. Every action runs through standard browser scripting.

  • Refs stay fresh — every mutating action re-snapshots automatically.
  • Screenshots feed back as vision input at detail: high.
  • Restricted URLs (chrome://, Web Store) fail loudly — never silently.
  • No debugger permission — no “started debugging this browser” banner ever.
agentic · amazon headphones search live tool loop
BrowsePal driving an Amazon search, with the panel showing tool calls
Tool surface
  • browser_snapshot Indexed tree of interactive elements
  • browser_click Click by ref
  • browser_type Type into inputs, textareas, contenteditable
  • browser_select_option Pick <select> options by value or label
  • browser_press_key Dispatch Enter, Tab, Escape, arrows…
  • browser_scroll Scroll by pixels or jump to top/bottom
  • browser_navigate goto / back / forward / refresh
  • browser_wait_for Wait for text or sleep up to 10s
  • browser_take_screenshot Viewport or full-page, attached to the next turn
  • browser_tabs list / new / close / select

Privacy

Your keys. Your chats. Your device.

BYOK done right: the only party that ever sees your API key is the provider you paste it for. No backend of ours could leak it, because no backend of ours sees it.

Crypto pipeline

How your API key is protected

  1. 1
    You paste the key
    It stays in memory while we test it against the provider.
  2. 2
    PBKDF2 · 150k iter
    A 32-byte salt is generated on first run and stored locally.
  3. 3
    AES-GCM 256 encrypt
    12-byte random IV prepended to the ciphertext.
  4. 4
    Local-only storage
    Persisted in your browser’s local storage. Only your device can decrypt it.

  • Keys never leave your device

    API keys are encrypted with PBKDF2 → AES-GCM 256 before they touch storage. Even when you turn sync on, keys stay on-device — only chats and settings travel.

  • Zero intermediary server for AI

    Prompts go to your model provider directly. MCP calls go to your MCP server directly. No proxy, no middle-man, no body inspection.

  • No debugger. No trackers.

    Actions run through standard browser scripting — no debugger permission, no scary "started debugging this browser" banner. No analytics, no telemetry, no ads.

Sync — optional

One login. Every browser. Or none.

Sign in with a magic link and your chats and preferences follow you across devices. Prefer to keep everything local forever? Don’t sign in — nothing leaves your browser.

Passwordless Optional Keys stay local
  1. 01
    Enter your email

    No password. We send a one-time magic link that expires in minutes.

  2. 02
    Click the link

    A short-lived session lands in the extension. That’s it — no cookies to leak.

  3. 03
    Sync begins

    Settings (theme, accent, MCP servers, model choice) and chat history replicate across your devices. API keys stay local.

How it works

Three steps from install to agent.

01

Install the extension

One click from the Web Store and BrowsePal is ready.

02

Paste your OpenRouter key

Open Settings → Providers → OpenRouter. Keys are encrypted (AES-GCM) before they touch storage. Click test to verify.

03

Chat about the page

Talk to any site. Pin the page, a selection, screenshots, tabs, or a PDF. Turn on browser use to let the model drive.

Appearance

Tune it until it feels like home.

Two layout variations — IDE and Studio — five accent colors, and a system/dark/light theme. Click any swatch to preview on this page.

Accent

Theme

ready · live preview
browser_take_screenshot
user
Summarise this page in 3 bullets.
assistant
  • • The accent colour drives the whole UI via CSS variables.
  • • Theme toggles in one attribute on the <html>.
  • • Zero-JS styling tokens. No rebuild needed.
gpt-5.4 1.9k / 1050k tok compact

FAQ

Answers before you install.

Is my data private?
Yes. API keys are AES-GCM encrypted on-device and never leave your browser. Chat history lives locally by default. If you turn sync on, chats and settings replicate across your devices — keys still do not. There is no analytics, no telemetry, no third-party scripts.
What is BYOK, and why does it matter?
Bring Your Own Key. You pay OpenRouter directly — we never proxy your prompts. No usage inflation, no retention on our side, and no one between you and the provider whose key you pasted.
Which AI models are supported?
Anything OpenRouter exposes: Claude, GPT, Gemini, Llama, DeepSeek, Grok, Qwen, Mistral, and many more. The catalog is fetched live, so new models appear without an extension update.
Does it work on Firefox?
A Firefox build is available. Firefox does not fully match the Chromium panel API, so some interactions feel different, but the core experience runs.
How much does it cost?
BrowsePal itself is free. You pay your model provider (OpenRouter) for tokens you actually use. Sync is a free utility.

Free · Privacy-first · BYOK

Install BrowsePal. Keep your keys. Keep your data.

Under a minute to install. No account needed to start chatting — sync is optional.

Add to Chrome