GhostStack Pilot

GhostStack Pilot pairs your browser with the GhostStack pilot service (`apparatus.ghoststack.app/mcp/pilot`), so an AI agent you authorize can act on the web pages you choose, using your real browser sessions. What it does: - Navigate, read pages as clean text, click, fill forms, submit, scroll, wait for content, screenshot, manage tabs, all driven by an MCP client you connect. - Works with your logged-in sessions: the agent acts where you are signed in, without ever seeing your credentials. What you control (the point of the product): - Session grant: nothing runs until you turn on the agent session. - Domain allowlist: the agent can only touch domains you add. - Per-action approvals: sensitive actions (running JavaScript, reading cookies, requesting a new domain) always need your click. A red badge on the toolbar icon means something is waiting for you. - Activity log: every command and every decision, on record in the popup. - Kill switch: one click ends everything immediately and survives restarts. Pair once: pairing uses OAuth 2.1 with PKCE against your GhostStack account (identity.ghoststack.app) and persists for the token lifetime; you do not re-authorize on every use. No telemetry: the extension sends nothing anywhere except the GhostStack pilot broker you paired with, and only when you have granted a session. Requires a GhostStack account (free). Pilot is the browser-actuation service in the GhostStack suite.