- Use at Your Own Risk: This tool connects unpredictable LLMs to your local filesystem. You are solely responsible for any file loss or system damage.
- Account Safety: Automated interaction may violate ToS of AI providers (e.g., OpenAI, DeepSeek). Use test accounts and avoid high-frequency requests.
- Data Privacy: Do NOT upload sensitive data (API Keys, secrets). Your local code is sent to third-party AI servers.
Universal Bridge connecting Web AI to Local Development Environments.
🛑 No More Copy-Paste: Stop manually copying code between Gemini/ChatGPT/DeepSeek and VS Code. 🚀 Zero-Config: No complex configuration required, just click and use. 🔐 Secure: Uses dynamic Token authentication to ensure only your VS Code can connect.
- ⚡️ Zero-Config: VS Code manages ports and tokens automatically, one-click handshake.
- 🌍 Cross-Platform: Fully supports Gemini, ChatGPT, DeepSeek, and other web-based AIs.
- 🔌 Standardized: Based on Model Context Protocol (MCP), supports mounting local filesystems, Git, and other tools.
- 🛡️ Dynamic Security:
- Random Token generated per session, eliminating the need for fixed Extension ID whitelists.
- Supports Origin Isolation to prevent malicious pages from accessing the local gateway.
- 🧠 Smart Routing:
- Automatically selects the browser based on the URL (e.g., Gemini -> Edge, ChatGPT -> Chrome).
- Supports multiple VS Code windows and multiple concurrent connections.
We prioritize your safety with a "Human-in-the-Loop" design:
- 👮 Human-in-the-Loop (HITL):
- Approval Required: Sensitive operations (e.g.,
write_file,execute_command) are blocked by default. - Explicit Consent: You must click "Approve" in the popup for every new tool call.
- Approval Required: Sensitive operations (e.g.,
- 🔒 Local Execution: All logic runs locally in your browser and VS Code. No intermediate servers.
- 🛡️ Sandbox Mode: Commands are executed in the current workspace root. Access to system directories is restricted.
- VS Code: Search for
WebMCP Gatewayin the Extension Marketplace and install. - Browser (Manual Install):
- Download the latest
mcp-bridge-browser.zipfrom Releases. - Unzip the file.
- Go to Chrome/Edge Extensions (
chrome://extensions), enable Developer mode. - Click Load unpacked and select the unzipped folder.
- Download the latest
- Open VS Code. Click the
WebMCP: OFFbutton in the status bar (bottom right) to start the service. When it showsWebMCP: <Port>(e.g.,34567), it is ready. - Click the status bar icon and select the AI platform you want to use (e.g.,
Open Gemini). - The browser will open a bridge page, perform an Automatic Handshake, and then redirect to the AI page.
- Connected! The browser extension icon will turn green (
ON).
Before starting the conversation, you must let the AI know how to use the local tools:
- Click the WebMCP Bridge extension icon in the browser toolbar.
- Click the Copy System Prompt button in the popup.
- Paste the content to the AI and send it.
- Once the AI confirms it has received the tool definitions, initialization is complete.
Now you can ask the Web AI to operate on your local project:
- "Read
src/utils.tsand write a unit test for it." - "Check the file structure of the current directory."
- "Generate project documentation in the
docsfolder."
Tips:
- Click the status bar and select
Custom Launch...to manually choose which browser to open.- Search for
Browser Rulesin VS Code Settings to configure default "Domain-Browser" mapping rules.
If you want to compile or contribute, follow these steps:
- Node.js (v18+)
- VS Code
git clone [https://github.com/three-water666/WebMCP.git](https://github.com/three-water666/WebMCP.git)
cd WebMCPThe project includes a cross-platform build script to generate both the VS Code extension (.vsix) and the Browser extension (.zip).
Mac / Linux:
chmod +x build_release.sh
./build_release.shWindows (PowerShell):
.\build_release.ps1The artifacts will be in the release/ folder.
- VS Code: Sidebar ->
...->Install from VSIX...-> Select the.vsixfile. - Browser: Extensions page -> Enable "Developer mode" -> "Load unpacked" -> Select the unzipped folder in
release/(or themcp-bridge-browsersource folder).
Contributions are welcome! Whether it's reporting bugs or submitting Pull Requests, we appreciate your help.