v0.3.1 — 12 downloaders, local & read-only, with a GUI

PaperPull is a family of small, local, read-only tools that download your receipts and statements as PDFs from sites you're already signed into. You log in yourself in a normal browser; the tools attach to that session and only read — they never pay, transfer, or change anything.

12 providers

Amazon · American Express · Target · Walmart · Wealthfront · Robinhood · USAA · Navy Federal · Dominion Energy · Verizon · T-Mobile · Target RedCard (TD Bank)

Highlights

• 100% local — nothing leaves your machine; no cloud, no API.
• You sign in, not the tool — it never handles your password or 2FA (attaches to your own signed-in browser over Chrome DevTools Protocol).
• Read-only by design — an allowlist + blocklist guard means no code path pays, transfers, redeems, or changes a setting.
• Delete-safe / paperless-ngx friendly — once a document downloads it's remembered; import it elsewhere and delete the PDF, and it won't re-download.
• Multi-account — separate browser profiles and folders per person, and every document is tagged with whose account it came from.
• GUI control panel plus a per-app CLI.

What's new since v0.1.0

• Added Verizon (Fios), T-Mobile, and Target RedCard / Circle Card — now 12 providers.
• Security (v0.3.1): the GUI now rejects non-localhost Origin/Referer requests (CSRF hardening), and SECURITY.md documents the localhost/CDP posture.

Getting started

Windows + Python. Clone or download, run setup-all.bat, then gui\run_gui.bat (or per app: login.bat → run_pilot.bat). See the README.

Full details in CHANGELOG.md.