foxpass — the agent pauses, you sign in — Pooria

foxpass is the reference add-on for the foxpass library. It shows how an AI agent can stop at a sign-in step and let you do it.

Who it is for: developers who build browser agents, and want the agent to pause at a password, a code, a passkey, a CAPTCHA, or an OAuth consent screen instead of typing secrets.

What it does

• Runs a small agent with fixed rules (no AI model) on the tab you were on. Its goal is to read a balance on a sample bank site.
• Finds the sign-in step on the page and says why: a password field, a one-time code field, a passkey request, a CAPTCHA, or a consent screen.
• Brings the tab to the front, outlines the field, and shows what to do. The toolbar button shows a badge while the agent waits.
• Goes on when you finish: when the page leaves the sign-in page, the form goes away, or the step ends.
• Never gives the agent your password or code. Those values show as [redacted] in what the agent reads.

Try it: run the sample site from the foxpass repository with pnpm site, open http://localhost:8790/login.html, and click Run in the popup.

What leaves your computer: nothing. The add-on has no server and no analytics. The agent has fixed rules and sends page text nowhere.

Permissions

• Access to a site, only when you click Allow for it: read the sign-in step and show the banner there.
• Active tab: see the address of the tab when you open the popup.
• Scripting and web navigation: read the page and show the banner.
• Cookies: notice the sign-in cookie that a site sets.

The source code is MIT licensed.