foxmate — a personal agent in your browser Pooria מאת

foxmate is an AI agent in its own Firefox tab, or in the sidebar. You type a goal, for example "sign me up for the Pro plan with my work email". A planner model reads the tab you pick, clicks and types like a person, and checks the result.

Who it is for: people who want an agent that uses their own browser and logins, and who want to see and approve what it does.

What it does

• Shows each plan, tool call and result in plain words.
• Asks you before a risky step. The approval shows the exact action and the form fields it sends.
• Remembers "Always allow" for one tool on one site when you pick it. Settings lists these rules, and you can remove each one.
• Lends one site to one task in its own container, with a time limit and an allow list. You can take it back at any time.
• Removes hidden text from a page before the planner reads it.
• Keeps memories that you can read, edit and delete.
• Runs the planner's Python in a sandbox page with no network.
• Push to talk: hold a button and speak the goal. Whisper runs in your browser, so the audio stays on your computer.
• Keeps a tamper-evident log of each action in your browser.
• Fills a saved login at a sign-in step, after you approve the site and the field. The planner never gets the password.

What leaves your computer, and when

• The planner is always a model on your computer: a local server such as llama-server or Ollama, or a small model in the browser. Page text goes only to that model. foxmate has no cloud model option.
• Share a tab with Claude Code (off by default): while you share one tab, Claude Code on your computer reads it through the foxbridge host. Claude Code sends what it reads to its own model. Firefox's data consent asks first.
• Gmail and Calendar (off by default): with your own Google OAuth client id, foxmate reads mail and events from Google and gives them to your planner.
• Phone approvals (off by default): approvals go to a device that you pair, over an encrypted peer-to-peer link.
• Notice webhook (off by default): a short notice (its kind and a fixed sentence) goes to the web address that you type, for example your own ntfy topic. Your goal goes with it only if you tick that box and Firefox's consent for website activity says yes.
• Model files download from Hugging Face once. These requests hold no page text.
• foxmate has no server and sends nothing to its authors.

Permissions

• Access to all websites, scripting and tabs: read and act on the tab you give a goal to.
• Cookies, containers, browsing data, proxy, privacy, web requests: lend a login in its own container, block other sites in a lent tab, and clear the container when the loan ends.
• Storage and unlimited storage: settings, memories, the log and model files stay in your browser.
• Alarms and notifications: scheduled goals, and a notice when a goal needs you or ends while no foxmate page is in view.
• Identity: the optional Google sign-in.

foxmate is an early version. Small local models fail many tasks. The source code is MIT licensed.