[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_138":139},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":49,"_84":-5,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96},"apiUrl","https://odel.app/api","creator","leonting1010","moduleId","tap","@leonting1010/tap","displayName","Tap","tagline","Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.","iconKey","https://taprun.dev/logo-400.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.taprun.dev/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1783335388000,"updatedAt",1788328743000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.LeonTing1010%2Ftap","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",17,"upstreamUpdatedAt",1786261264000,"detectedTransport","streamable-http","detectedAuthType","none","probeStatus","ok","lastProbedAt",1787632690000,"githubRepoUrl","https://github.com/LeonTing1010/tap","githubRepoFullName","LeonTing1010/tap","releaseId","ext-leonting1010-tap","version","0.29.2","descriptionMarkdown","

\n $\"Taprun\"$ \n

\n\n

Taprun

\n\n

\n The action layer your agent drives in your own logged-in browser — for the exception-heavy, compliance-critical last 20% that clean APIs can't reach. Compiled once, replayed forever at zero LLM tokens.\n

\n\n

\n Homepage | \n Blog | \n Verified Claims | \n 📬 Drift Alerts | \n 中文\n

\n\n

\n $\"CI\"$ \n $\"Release\"$ \n $\"Stars\"$ \n $\"License\"$ \n $\"Chrome$ \n

\n\n

\n $\"Taprun:$ \n

\n\n---\n\n**Your agent's closed-loop action layer for the browser — the login-gated, exception-heavy, compliance-critical last 20% that clean APIs and cloud agents can't reach. Driven in your own Chrome, captured once, replayed forever at zero LLM tokens.**\n\nAs APIs get walled off and metered, the work that survives lives behind logins, OTP walls, and human-gesture gates — the exceptions, approvals, and compliance steps a cloud agent architecturally can't touch. Taprun is the action layer for exactly that: your agent drives your real, already-logged-in Chrome, closes the loop (act → verify the effect → re-run on drift), and hands you a deterministic replay you own.\n\nEvery other browser agent re-runs a live LLM — and re-burns tokens — on every execution. Taprun's AI agent inspects the page **once** and emits a deterministic `.flow.json` program; every replay after that is pure data dispatch — same result every call, **$0 in tokens, no agent in the loop**. It runs in your real Chrome, so cookies and login sessions stay on your machine by architecture. `tap verify` catches breakage before your data goes stale.\n\nWorks with Claude Code, CodeBuddy, Cursor, Cline, Windsurf, and any MCP host — install straight from the chat window. Forge a tap from any URL on demand — no catalog needed.\n\n```\nCapture: AI inspects the site → compiles a .flow.json program (one-time cost)\nRun: The program executes instantly, same result every time ($0, zero AI)\nVerify: tap verify checks the snapshot equivalence predicate (catches drift)\nRepair: re-run capture against the same site/name; the next (only when needed)\n verify rebaselines after human review\n```\n\n## How Taprun Compares\n\n| | Taprun | AI Browser Agents | Traditional Scrapers |\n|--|-----|-------------------|---------------------|\n| **AI cost per run** | $0 (compile once) | Tokens every run | Free |\n| **Accuracy** | Deterministic | Varies per run | Deterministic |\n| **Silent failure detection** | Per-tap CEL `snapshot_equivalent` predicate + 4-arm verdict | None | None |\n| **Breakage diagnostics** | `tap verify` — exact diff of what changed | None | Manual spot checks |\n| **Detection risk** | Low (real browser sessions) | High | High |\n| **Runtimes** | 2 (Chrome extension + Playwright) | 1 | 1 |\n| **Code inspectable** | .flow.json — bare JSON, 18-op closed vocabulary, git diff | Black box / ephemeral | Fragile scripts |\n| **MCP native** | Yes (authoring layer only — execution is zero tokens) | No | No |\n\n## Get Started\n\n### 1. Attach to your agent — from the chat window\n\n**Claude Code / CodeBuddy** — paste two lines into the chat, nothing else:\n\n```\n/plugin marketplace add LeonTing1010/taprun\n/plugin install tap@taprun\n```\n\nThat installs the Taprun MCP server **plus** the skills that teach your agent when to use it and the hook that routes walled fetches to Taprun — no terminal, no config file. (CodeBuddy wires plugin MCP servers at startup only, so **fully restart it once** after installing; Claude Code picks them up with `/reload-plugins`.)\n\n**Any other MCP host** (Cursor · VS Code · Claude Desktop) — one command writes the config for you:\n\n```bash\nnpx -y @taprun/cli embed cursor # or: vscode | claude-desktop | claude-code | codebuddy | qwen\n```\n\nThe binary self-copies to `~/.tap/bin` and your agent's MCP config is written. Re-check anytime with `tap embed --verify`.\n\n> **Using a coding agent that isn't in that list?** `tap embed` targets are *data, not code*: drop a row into `~/.tap/embed-targets.json` and the new agent works immediately — no engine release. Each row names one of four install *kinds* (`cc-plugin` for Claude-Code-plugin hosts, `cli-mcp-add` for CLIs with a ` mcp add`, `ide-deeplink`, `desktop-bundle`), e.g. `[{\"id\":\"kode\",\"kind\":\"cc-plugin\",\"display\":\"Kode CLI\",\"tier\":1,\"cli\":\"kode\"}]`. Same doctrine as the rest of Taprun — the engine stays closed and mechanical; you extend it in local data.\n\nNow pick your runtime — **the extension is only needed to reuse your *live* logged-in Chrome:**\n\n- **Public pages / open APIs / CI — nothing more to install.** The MCP server runs over `npx`; you're done. Append `--no-extension` for a fully in-chat Playwright runtime with its own isolated profile (no browser gesture, no click).\n- **Logged-in sites** (your bank / internal dashboard / Xiaohongshu / Zhihu) — just tell your agent **\"set up tap for logged-in sites\"** right in the chat. The **tap-setup** skill drives the whole bridge from the chat: it materializes the stable binary (from the engine `npx` already downloaded — no second download) and registers the native-messaging manifest, then opens the extension page. The single **[Add to Chrome](https://chromewebstore.google.com/detail/tap/llcidejeoobdegbkolbjhfoeckphldce)** click is the only step that isn't a chat action — it *is* the trust gate that lets Taprun reuse your existing login, and the in-flight call resumes automatically once it lands.\n- **Claude Desktop**: download [`tap.mcpb`](https://github.com/LeonTing1010/tap/releases/latest) and double-click.\n\n

Other install paths (brew · curl · manual MCP JSON · raw binaries)

\n\n```bash\nbrew install LeonTing1010/tap/taprun # Homebrew (macOS / Linux)\ncurl -fsSL https://taprun.dev/install.sh | sh # permanent binary\nnpx -y @taprun/cli --version # zero-install (any Node host)\n```\n\nManual MCP config, if you'd rather write it yourself:\n\n```json\n{ \"mcpServers\": { \"tap\": { \"command\": \"npx\", \"args\": [\"-y\", \"@taprun/cli\", \"mcp\", \"stdio\"] } } }\n```\n\n| Platform | Download |\n|----------|----------|\n| macOS (Apple Silicon) | [tap-macos-arm64](https://github.com/LeonTing1010/tap/releases/latest) |\n| macOS (Intel) | [tap-macos-x64](https://github.com/LeonTing1010/tap/releases/latest) |\n| Linux | [tap-linux-x64](https://github.com/LeonTing1010/tap/releases/latest) |\n| Windows | [tap-windows-x64.exe](https://github.com/LeonTing1010/tap/releases/latest) |\n\n

\n\n### 2. Prove it works (~2 minutes, no login)\n\nRun the first entry of the [claims ledger](https://github.com/LeonTing1010/tap-skills) — the exact verification its nightly CI runs:\n\n```bash\nmkdir -p ~/.tap/flows/github\ncurl -fsSL https://raw.githubusercontent.com/LeonTing1010/tap-skills/main/claims/2026-07-11-github-trending-has-no-api/plan.json \\\n -o ~/.tap/flows/github/trending-no-api.flow.json\ntap github/trending-no-api\n```\n\n`\"state\": \"committed\"` plus today's trending repos at zero tokens = your install works **and** the claim holds.\n\n### 3. Forge your own\n\n```bash\ntap capture https://news.ycombinator.com hn/front --intent \"front-page stories with points\"\ntap hn/front # replay forever, $0\n```\n\nOr just ask your AI agent:\n\n```\nYou: What's trending on GitHub today?\nAgent: Here are today's top repos — React compiler hit 734 stars...\n\nYou: Capture a tap for Douban top 250 movies\nAgent: Done. Run `tap douban/top250` anytime — $0 per run.\n```\n\n### Optional: Drive the binary from your own code (TypeScript / Python)\n\nSkip MCP — call the `tap` binary from your own loop:\n\n```bash\ntap capture hackernews/top --intent \"front-page top stories\"\ntap hackernews/top --args '{}' # JSON-on-stdout, exit 0 on success\ntap verify hackernews/top # 3-arm verdict (live / drifted / unreachable)\n```\n\nThe CLI emits `ToolResult` envelopes as JSON — same shape the MCP surface returns — so any language with a subprocess library can drive it. See `tap --help` for the full verb list.\n\n### Have an existing Playwright / Puppeteer / Stagehand script?\n\nDon't rewrite. Convert with one of the open-source adapters — drop your existing source in, get a Taprun-compatible `.flow.json` plan out:\n\n```bash\n# Existing Playwright script (47M weekly npm downloads — most likely the one you have)\nnpm install @taprun/from-playwright @taprun/spec\nnode -e \"import('@taprun/from-playwright').then(m => console.log(m.playwrightToTap(require('fs').readFileSync('tests/login.spec.ts','utf8'), {site:'example', name:'login'})))\"\n\n# Or scaffold a new starter from scratch\nnpx create-tap-script github/trending https://github.com/trending\n```\n\n| Adapter | Source format | Coverage |\n|---|---|---|\n| [`@taprun/from-playwright`](https://www.npmjs.com/package/@taprun/from-playwright) | `.ts/.js` Playwright tests | 8 page.* APIs (goto/click/fill/type/press/waitForSelector/waitForTimeout/screenshot) |\n| [`@taprun/from-puppeteer`](https://www.npmjs.com/package/@taprun/from-puppeteer) | `.ts/.js` Puppeteer scripts | 7 page.* APIs + page.keyboard.press |\n| [`@taprun/from-stagehand`](https://www.npmjs.com/package/@taprun/from-stagehand) | `.ts/.js` Stagehand scripts | Hybrid: deterministic page.* mapped to plan ops; NL `act/extract/observe` flagged for honest verify verdicts |\n| [`create-tap-script`](https://www.npmjs.com/package/create-tap-script) | (none — scaffolder) | Generates a starter `.flow.json` envelope from `/ ` |\n\nThe format itself is documented at [`@taprun/spec`](https://www.npmjs.com/package/@taprun/spec) — the public protocol surface package: TypeScript types for the v2 Plan (18-op closed union + discriminated read/write Plan union) + JSON Schema 2020-12 with `$id` resolvable at `taprun.dev/spec/plan-v1/schema.json`, bidirectionally drift-guarded against the TS types. Third-party tooling (IDE `$schema` autocomplete, ajv-equivalent validators in Python/Ruby/Go, governance layers, alternative runtimes, MCP hosts with plan-aware permission scoping) builds against this package without depending on the proprietary Taprun engine. Plan-v1 reference: [taprun.dev/spec/plan-v1](https://taprun.dev/spec/plan-v1/). Source for all five packages: [`packages/`](https://github.com/LeonTing1010/tap/blob/main/packages/) (see [`packages/README.md`](https://github.com/LeonTing1010/tap/blob/main/packages/README.md) for the workspace overview).\n\n## What Can You Do?\n\n**Read** — Extract data from any website\n\n```bash\ntap reddit/hot # Reddit front page\ntap bilibili/trending # Bilibili trending\ntap arxiv/search --keyword \"LLM\" # arXiv papers\n```\n\n**Write** — Operate any website\n\n```bash\ntap xiaohongshu/publish --title \"My Note\" --images photo.jpg\ntap zhihu/publish --title \"My Article\" --content \"...\"\n```\n\n**Watch** — Monitor changes\n\n```bash\ntap verify github/trending # spot drift; schedule via cron / launchd\n```\n\n**Compose** — Chain like Unix pipes\n\n```bash\ntap github/trending | tap filter --field stars --gt 500 | tap table\n```\n\n**Forge** — Create new automations with AI\n\n```bash\ntap capture https://news.ycombinator.com hackernews/hot --intent \"top stories\" # API detected — compiled without AI\ntap capture https://example.com mysite/home --intent \"...\" # BYOK Claude / GPT for the long tail\n```\n\nBring your own model — works with Claude, OpenAI, DeepSeek, or any\nOpenAI-compatible endpoint including **local Ollama / LM Studio** for\nfully offline forge:\n\n```bash\ntap config set ai.baseUrl http://localhost:11434/v1\ntap config set ai.key ollama\ntap config set ai.model llama3.1\ntap capture https://arxiv.org/list/cs.AI/recent arxiv/recent --intent \"recent papers\" # 0 bytes leave your machine\n```\n\n## How It Works\n\n```\n ┌─ Chrome extension (your real browser sessions)\nYou → AI → Taprun ──────┤\n capture └─ Playwright (headless, server, CI/CD)\n```\n\n1. **You describe** what you want (URL × natural-language intent)\n2. **AI compiles** it into a `.flow.json` program — bare JSON, 18-op closed vocabulary, version-controlled\n3. **Taprun runs** the program on either runtime — forever, at $0\n\nEvery successful compilation makes the next one faster. Need a tap for a new site? Your agent forges one on demand with `capture` — no catalog required.\n\n## Verified Claims\n\n**[tap-skills](https://github.com/LeonTing1010/tap-skills)** is no longer a skills catalog — it's a **claims ledger**: dated, falsifiable claims about the live web, each vendoring its own deterministic plan, re-verified **nightly by CI at zero LLM tokens**. A claim that drifts flips to 🟡 publicly, the same night.\n\nVerify the first claim yourself (~2 minutes, no login, no browser):\n\n```bash\nmkdir -p ~/.tap/flows/github\ncurl -fsSL https://raw.githubusercontent.com/LeonTing1010/tap-skills/main/claims/2026-07-11-github-trending-has-no-api/plan.json \\\n -o ~/.tap/flows/github/trending-no-api.flow.json\nnpx -y @taprun/cli github/trending-no-api\n```\n\nYou get the exact verification the nightly CI gets — deterministic replay, same result. The 140-skill v1 catalog is preserved untouched on the [`v1-archive`](https://github.com/LeonTing1010/tap-skills/tree/v1-archive) branch; pre-built catalogs only rot, so plans are forged on demand with `capture` instead.\n\n```bash\ntap verify / # Snapshot equivalence — catches silent failures before your data goes stale\ntap list # See everything available\ntap show / # Print the saved tap's plan as JSON\n```\n\n## Local-first by architecture\n\nZero-token replay is the headline; local-first is the guarantee underneath it. Taprun runs in **your** browser — the Chrome extension reuses your live login sessions, so cookies, auth tokens, and credentials never leave your machine. A structural choice, not a marketing claim:\n\n| Concern | Cloud-first browser SDKs | Taprun (local-first) |\n|---|---|---|\n| Where do logged-in cookies live? | On the cloud vendor's servers | Only in your local browser |\n| What does the AI see? | The full session + your data | Only the page DOM during forge time |\n| Compliance with `noindex` / robots.txt / TOS | Vendor signs ToS for you | Your account, your terms |\n| Internal / intranet sites | Need VPN tunneling | Just open the page |\n| Decommission risk | Vendor goes down → your scrapers stop | Local code keeps running |\n\n| Layer | Protection |\n|-------|-----------|\n| **Sandbox** | Programs run with zero permissions — no file, network, or system access |\n| **Static Analysis** | CI blocks dangerous patterns before they reach users |\n| **Local-only** | Your data, sessions, and API keys never leave your machine — architecturally |\n\nSee [SECURITY.md](https://github.com/LeonTing1010/tap/blob/main/SECURITY.md) for the full threat model.\n\n## Contributing\n\nThe easiest way to contribute: **forge a new tap.** One `.flow.json` file is all it takes.\n\nSee [CONTRIBUTING.md](https://github.com/LeonTing1010/tap/blob/main/CONTRIBUTING.md) for details.\n\n## Roadmap\n\n- [x] Community skills catalog — retired 2026-07 in favor of the [claims ledger](https://github.com/LeonTing1010/tap-skills) (v1 catalog archived)\n- [x] 2 runtimes — Chrome extension + Playwright (headless / CI)\n- [x] Unix pipes — `tap A | tap B`\n- [x] Watch mode — monitor changes over time\n- [x] Verify — `tap verify` snapshot-equivalence check with a 4-arm drift verdict (equivalent / drifted / first_snapshot / unreachable)\n- [x] Single-command MCP server — `tap mcp stdio` (or `tap mcp http`) for any MCP host\n- [ ] Android runtime\n- [ ] iOS runtime\n- [ ] Concurrency control — deterministic coordination for M agents operating shared accounts in parallel\n\n## Support\n\n- [GitHub Discussions](https://github.com/LeonTing1010/tap/discussions) — Q&A, ideas, show & tell\n- [support@taprun.dev](mailto:support@taprun.dev) — licensing, private feedback, consulting\n- [Issues](https://github.com/LeonTing1010/tap/issues) — bug reports\n\n## Privacy\n\nTaprun is local-first by architecture. It drives **your own** browser on **your own** machine — credentials, cookies, and page data never leave it. The engine ships no telemetry and makes no outbound network calls except the ones your own saved taps explicitly direct (`op:fetch`). Saved taps, secrets, and traces live under `~/.tap/` on your machine only.\n\nFull policy: **[taprun.dev/privacy](https://taprun.dev/privacy)**.\n\n## License\n\nChrome Extension & docs: [MIT](https://github.com/LeonTing1010/tap/blob/main/LICENSE). Claims ledger: [MIT](https://github.com/LeonTing1010/tap-skills/blob/main/LICENSE).\n\n## Star History\n\n[![Star History Chart](https://api.star-history.com/svg?repos=LeonTing1010/tap&type=Date)](https://star-history.com/#LeonTing1010/tap&Date)\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"upstream",{"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125},"requiredSecrets",[],"tags",[99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],"assets",[],"stats",{"_97":86,"_98":86},"ratingAvg","reviewCount","ai-agent","automation","browser-automation","browser-use","chrome-extension","claude","claude-code","cli","cursor","data-extraction","deterministic","llm","local-first","playwright","puppeteer","topics",[99,100,101,102,103,104,105,106,107,108,109,110,111,134,135,112,113,136,137,131],"license","MIT","language","JavaScript","registryName","io.github.LeonTing1010/tap","homepage","https://taprun.dev/?utm_source=mcpregistry&utm_medium=listing&utm_campaign=v0.29","packages",[126,127],{"_128":132,"_130":133,"_76":77},{"_128":129,"_130":131,"_76":77},"registryType","pypi","identifier","taprun","npm","@taprun/cli","mcp","mcp-server","scraping","stagehand","ENV",{"_140":141,"_142":143,"_144":145},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]