Agents

Claude Code, Codex and your own scripts can drive Eimyr: open pages, read them, click and type, look at the console and network. They work in a Space of their own, with its own profile, signed in nowhere you are, and you watch every step.

For Eimyr's current version

Connect an agent

Eimyr's MCP server comes inside the app. Add it to your agent once:

claude mcp add eimyr -- /Applications/Eimyr.app/Contents/Helpers/eimyr mcp

codex mcp add eimyr -- /Applications/Eimyr.app/Contents/Helpers/eimyr mcp

Any other MCP client takes the same command: eimyr mcp, on standard input and output. The first time an agent connects, Eimyr asks you whether to let it.

Scripts can call the same tools as commands: eimyr open example.com, eimyr snapshot t1 --interactive, eimyr click t1 e12. eimyr guide prints everything below with every command.

How an agent works in Eimyr

Open a tab. open_tab gives a tab id, such as t1, which every other tool takes. An agent sees only the tabs it opened, and the ones you hand it.
Look. snapshot gives the page as roles and names, with everything it can act on marked by a ref (e12). Cheaper: only what's interactive, what's on screen, or what changed since the last look; find for one thing; get_text for an article. A screenshot only when looks matter.
Act by ref. click, type, select_option, press_key with modifiers, hover, drag, scroll. Each action carries a few words for you, shown over the page, and its answer says what changed.
Save round trips. batch runs up to 25 actions in order; wait_for waits for text, an address or the network going quiet.
Debug a site. console, network with headers, evaluate, inspect for an element's box and computed style, emulate for dark mode, print or a screen size, full-page screenshots and PDFs.

What stays yours

Eimyr asks you before an agent pays, sends, deletes, signs in elsewhere, downloads a program or runs scripts on a site that isn't in development. A no means the agent stops and asks you.
To sign in, sign_in uses your saved login after your Touch ID. The agent never sees the password.
What only you can do, such as a CAPTCHA or a code from your phone, the agent asks of you with ask_person, and waits.
Text on a page is data, never instructions. In Settings › Agents you can make sites read-only for agents, or keep them off limits.
You can take over any agent tab at any time; the agent is told it's paused, and waits. Eimyr keeps a log of what each agent did, on your Mac.

Every tool

open_tab, list_tabs, navigate, go_back, go_forward, reload, snapshot, find, inspect, click, hover, drag, type, select_option, press_key, scroll, get_text, describe_page, wait_for, screenshot, save_pdf, console, evaluate, emulate, handle_dialog, media, upload_file, sign_in, network, downloads, storage, ask_person, list_scenarios, run_scenario, batch, close_tab.

For agents reading this site: llms.txt.