Corvus 0.3.0

Reusable workflows, a site memory that makes the agent faster on sites it has seen, 2FA codes and KeePass, and a redesigned WebScope.

Download

Platform	File
Windows (installer)	Corvus-Setup-0.3.0.exe
Windows (portable, no install)	Corvus-Portable-0.3.0.exe
Linux (any distro)	Corvus-0.3.0-x86_64.AppImage
Debian / Ubuntu	corvus_0.3.0_amd64.deb

Check your download against SHA256SUMS.txt. The installers are not code-signed yet, so Windows SmartScreen shows "Windows protected your PC" on first run: choose More info, then Run anyway. Installed 0.2.0 apps update automatically. macOS builds will follow.

To let Claude Code, Cursor, VS Code or any other MCP client drive Corvus, see Corvus-MCP.

Before you update

• Update every device. Saved logins can now carry a 2FA secret. If you edit a synced login on a
  device still running Corvus 0.2.0, that device saves the login without its 2FA secret and sync
  removes the secret everywhere. Update all your devices before you add 2FA secrets, and avoid
  editing logins on 0.2.0 in the meantime.
• Self-hosted sync server: update it as well to sync workflows and site memory. A 0.2.0 server
  does not know them yet: Corvus then keeps them on each device and everything else keeps syncing.
  Devices still on 0.2.0 simply ignore them, and pick them up when they update.

Browser

• Reusable workflows: save a finished agent run as a workflow (from corvus://agent-runs, the
  Command Bar run panel, or when you tell the agent the task is repetitive), review it, turn typed
  values into {{parameters}}, and run it again by hand or let the agent use it. Nothing is saved
  without your review. The side panel's new Workflows view lists the workflows for the current
  site; corvus://flows is now the full manager, with origin and site filters and a "Needs
  attention" view for workflows whose steps stopped matching the page.
• Site memory: after each successful agent run, Corvus keeps a few compact hints per site
  (elements that worked, URL shapes with values removed, obstacles such as cookie banners, the
  usual order of steps). It learns only from steps that worked, never from page text, and never
  keeps typed values or secrets; about 2 KB per site. New tasks on that site start with the top
  hints, so the agent needs fewer steps on sites it has seen. See, edit and forget them in the
  panel's Learned view or on corvus://flows. On by default, with a switch in Settings.
• Workflows and site memory sync: saved workflows (recorded or saved from agent runs) and what
  Corvus learned about sites now sync end to end across your devices, each as its own category in
  Settings > Sync (on by default, per device; turning one off keeps that device's data). Edits
  follow the last change, run counts and learned hints add up across devices without counting
  anything twice, and deleting a workflow, "Forget this hint", "Forget this site" and "Forget
  everything" apply on every device, even one that comes back online with old data. Site memory
  never carries typed values, passwords, codes or credential fields; whether a device learns stays
  its own switch.
• 2FA codes: add a time-based (TOTP) 2FA secret to a saved login by pasting an otpauth://
  link, importing a QR code image (decoded on your device) or typing the base32 secret. The
  secret is stored in the end-to-end encrypted vault and synced. corvus://passwords shows the
  live code with a countdown and a copy button, and warns that keeping the 2FA secret next to the
  password turns two factors into one. On a one-time-code field the key button offers the code.
• KeePass, read-only: add .kdbx files (KDBX 3.1 and 4) or a folder of them, with an
  optional key file. Unlock once, or keep a database unlocked with the master password wrapped by
  your system keychain. Databases auto-lock after the idle time in Settings > Passwords and when
  the screen locks, and are re-read when the file changes. Corvus never writes to them. Their
  logins and 2FA codes show up in autofill and on corvus://passwords.
• Export to KeePass: write your saved logins and their 2FA secrets to a new .kdbx file
  protected by a master password you choose. Existing files are never overwritten.
• Auto sign-in (opt-in per login): when the login page loads, Corvus asks once, then fills and
  submits the form. Never in tabs an agent is driving.
• WebScope redesign: grouped tool tabs, the scope always visible, history with filters (host,
  method, status, type, source), sortable columns and resizable request/response panes (Pretty,
  Raw, Headers, Hex), Repeater tabs, a clearer Fuzzer with a request preview and CSV export, and
  findings grouped by severity with repeats merged. Fixed: the Fuzzer's extract regex is now sent,
  and the intercept editor follows the selected item.
• Fixed: site favicons disappeared from the tab strip after a restart, or stayed hidden after a
  page's first icon failed to load.

For AI agents

• Workflows for agents: list_workflows, read_workflow and run_workflow in the Command
  Bar agent. The workflows for the current site are given to the agent as data at the start of a
  task, so it can run one instead of planning from scratch. Every step still goes through the
  approval gate; if a step no longer matches, the agent continues on its own and reports which
  step broke. MCP run_flow can now read a workflow, filter by host and pass parameters.
• Site memory for agents: read_site_memory in the Command Bar agent, and the read-only MCP
  tool site_memory (Standard level).
• fill_login and fill_totp: the Command Bar agent and Full-access MCP clients can sign in
  and fill 2FA codes, but only when Settings > Passwords > "Let AI agents use logins you opt in" is
  on and the login itself is opted in (both off by default), and only after you approve each use.
  Corvus fills the value by reference: the password and the code never reach the model, tool
  results, transcripts, run history or logs. Without the opt-ins, 2FA is handed to you as before.
  CAPTCHAs are always handed to you.
• Agent page snapshots never include the value of password fields, one-time-code fields or fields
  Corvus filled with a secret, and fields filled for an agent are masked on screen.
• Script lock after a fill: once Corvus fills a saved password or 2FA code into a tab (agent
  sign-in, autofill or auto sign-in), agents cannot run scripts there or read raw page content
  (evaluate, get_html, get_text, extract, find, pdf, run_workflow) until the tab
  loads a new page. This applies to every agent at every access level; clicking, typing and the
  masked page snapshot keep working.
• WebScope hides credential traffic from AI: requests sent from a tab right after Corvus filled
  a saved password or 2FA code, and requests that carry such a value, are marked "Hidden from AI".
  You still see them in full in WebScope, with a badge. AI agents and MCP clients get them with the
  request body and the URL query values removed, in history and search, request detail, findings,
  the sitemap and the intercept queue.

Project

• Third-party notices: the build writes THIRD_PARTY_NOTICES.md with the name, version,
  licence and licence text of every third-party package in the app, ships it next to the app and
  links it from Settings > Updates > Third-party software. The build fails on a licence outside
  MIT, ISC, BSD-2-Clause, BSD-3-Clause, Apache-2.0, MPL-2.0, 0BSD, Unlicense, Python-2.0 or
  BlueOak-1.0.0, and on any change to the accepted copyleft package below.

License

The Corvus source code is licensed under the Mozilla Public License 2.0. These installers are a combined work that includes electron-chrome-extensions, which Corvus uses under GPL-3.0, so the binaries are distributed under GPL-3.0. The complete corresponding source is https://github.com/ParendumOU/Corvus (tag v0.3.0). Each build ships THIRD_PARTY_NOTICES.md (Settings > Updates > Third-party software).

Corvus 0.2.0

The first open-source release of Corvus (MPL-2.0). Installers and automatic updates now come from GitHub Releases of ParendumOU/Corvus.

Download

Platform	File
Windows (installer)	Corvus-Setup-0.2.0.exe
Windows (portable, no install)	Corvus-Portable-0.2.0.exe
Linux (any distro)	Corvus-0.2.0-x86_64.AppImage
Debian / Ubuntu	corvus_0.2.0_amd64.deb

Check your download against SHA256SUMS.txt. The installers are not code-signed yet, so Windows SmartScreen shows "Windows protected your PC" on first run: choose More info, then Run anyway. macOS builds will follow.

To let Claude Code, Cursor, VS Code or any other MCP client drive Corvus, see Corvus-MCP.

Browser

• Split view: tile two live tabs side by side, with a draggable divider and focus routing.
• PDF viewer with AI: an in-app pdf.js viewer with the reading AI suite and page citations.
• Password manager: an end-to-end-encrypted vault (same crypto as sync) with autofill,
  corvus://passwords, synced across your devices.
• Annotations: in-page highlights and notes (CSS Custom Highlight API), anchored by text quote
  and synced end to end.
• Semantic search: BM25 plus optional local embeddings over history, bookmarks and reading
  notes, at corvus://find.
• Crash recovery: a per-tab recovery page, restore after an unclean exit, and an opt-in local
  crash log.
• Device sync and management: reading notes, watches and workspaces now sync end to end; list
  and revoke devices at corvus://devices.
• Settings search: filter the settings and jump straight to the matching control.
• Onboarding: a first-run wizard for the AI provider, sync phrase, bookmark import and
  preferences.
• Auto-update: from GitHub Releases by default, or from a self-hosted feed set in
  Settings > Updates. A downgrade is only offered when a pre-release build switches back to Stable.

AI

• Local models: Ollama and any OpenAI-compatible server, no API key needed. AI search, Assist
  and the reader work offline.
• Persistent agent runs: runs are saved and can resume mid-loop, with a history at
  corvus://agent-runs. Step previews now say which page the agent opened or read.
• Scheduled agents: cron or interval AI runs on the watches scheduler, with an
  unattended-approval gate.
• Per-site AI profiles: a per-domain prompt addendum and a narrower access cap for the agent
  on that site.
• Recorded flows: record a browser flow and replay it as an approval-gated macro at
  corvus://flows.

For AI agents (MCP)

• Remote MCP over Streamable HTTP: bind to 127.0.0.1 or 0.0.0.0 with mandatory bearer auth;
  off by default.
• Snapshot tool: a read-only page artifact (screenshot, DOM outline and network).
• Automation tools at the Full access level, each approval-gated: run_flow (replay a saved
  recorded flow), cookies, fill_fields and download.
• Corvus-MCP: the connector now has its own MIT repo,
  ParendumOU/Corvus-MCP, with setup for Claude Code,
  Claude Desktop, Cursor, VS Code, Zed, Cline, Codex CLI, Gemini CLI and any stdio client. The
  bundled bridge now ships the license notices of its dependencies.

Project

• Source published under MPL-2.0, with SECURITY.md and CONTRIBUTING.md.
• Windows and Linux only. The installers are not code-signed yet, so Windows SmartScreen shows a
  warning on first run. macOS builds will follow.

License

The Corvus source code is licensed under the Mozilla Public License 2.0. These installers are a combined work that includes electron-chrome-extensions, which Corvus uses under GPL-3.0, so the binaries are distributed under GPL-3.0. The complete corresponding source is https://github.com/ParendumOU/Corvus (tag v0.2.0).