Claudein Chrome7 browser workflows for DevOps + securityTUTORIALlocalhost:3000/dashboardClaudeTHA-SHED.COM(Illustration with example data)
the shed // CLAUDE TUTORIAL

Your browser is the last place automation doesn’t reach. Claude in Chrome puts an agent in your real logged-in session, and Claude Code can drive it too. Here is how to use it without handing over the keys.

See the workflow in action, tap through the tabs below:




claude-in-chrome.sh

// connect Claude Code to your browser

claude --chrome

# then, inside the session:
/chrome        # check status, reconnect, pick a browser

// workflow: live console debugging

Open localhost:3000/dashboard, reload it, and check the console
for errors matching "TypeError|401|CORS". Tell me which file
probably causes each one, then propose a fix. Do not edit anything yet.

// workflow: read-only settings review

Open the settings page of our staging admin console. READ ONLY.
List every setting that looks risky (public access, weak session
timeouts, disabled MFA prompts). Do not click Save or change anything.
Give me a table: setting, current value, why it matters.

Treat page content as untrusted. Text on a web page is data, not instructions. Use a dedicated Chrome profile, keep the mode on approvals for anything sensitive, and never use Skip All Approvals on sites you do not fully trust.

Stuck? Dismiss any JavaScript dialog by hand, then run /chrome and choose Reconnect extension.

What Claude in Chrome actually is

Claude in Chrome is a browser extension that lets Claude see, click, type, and navigate inside your real Chrome window, using the sessions you are already logged into. It works on all paid plans: Pro, Max, Team, and Enterprise. The part DevOps and security people should care about: Claude Code can drive it too, so the same agent that edits your repo can open localhost, poke the form, and read the console. No API connector required.

If you have not wired up tools yet, start with our MCP connectors guide. Connectors are for systems with an API. The browser is for everything else.

The safe rollout loop1Installextension + sign in2Pick a modeask before acting3Scope sitesone task, one site4Run taskread-only first5Verifycheck the evidenceTHA-SHED.COM(Illustration with example data)

Quick setup

Install the extension from the Chrome Web Store, sign in with your Claude account, and pin it. For Claude Code you need extension version 1.0.36 or later and a login through /login (API keys and setup-token logins keep Chrome integration off). Then launch with the flag:

claude --chrome

Run /chrome any time to check status, reconnect, or pick a browser. Heads up: it is not supported in WSL. The official getting started guide covers the side panel flow.

The mindset: a fast intern with your cookies

The browser agent inherits your logins. That is the power and the risk. Think of it as a very fast intern who is already signed in as you. You would not hand that intern the production console on day one, so start read-only, one site, one task, and check the evidence before you trust it with writes.

Claude in Chrome has three permission modes: Manually Approve, Automatically Approve, and Skip All Approvals. Automatic mode runs safety checks and pauses when something needs you, but it burns more of your usage. Skip All Approvals turns the checks off. Save it for sandboxes you own.

7 workflows worth stealing

1. Console-first debugging

Filter, do not dump. Console logs are noisy, so tell Claude what patterns to look for.

Open localhost:3000, reload, and read console errors matching
"TypeError|401|CORS". Group by root cause and point me at the file.

2. Test the change you just made

I changed the login validation. Submit the form with an empty
email, a bad email, and a 300 character password. Report which
error messages appear and which do not.

3. Read-only settings audit

Open the staging admin console settings. READ ONLY. List risky
settings (public sharing, long sessions, MFA off) in a table.

4. Evidence capture

Ask for a screenshot saved to disk, or a recorded GIF of a flow for a ticket. Review it first: recordings capture everything visible, including account details.

5. Data extraction

On the status page, extract each service name, current state, and
last incident date. Save as services.csv.

6. Form filling from a file

For each row in contacts.csv, add a contact in our staging CRM.
Stop and ask if any field looks wrong.

7. Shortcuts for the boring stuff

The extension supports saved shortcuts and scheduled tasks. Turn your weekly "check these five dashboards" routine into one. Keep scheduled runs read-only.

claude // console report for example-app> check console on /dashboardERROR TypeError: cannot read 'items' of undefined likely cause: widgets.js line 42 (example)WARN 401 Unauthorized on /api/example/summary likely cause: expired token in test fixtureERROR CORS blocked: example.test to api.example.test likely cause: missing allowed origin3 issues found. No files edited. Approve fixes?THA-SHED.COM(Illustration with example data)

Safety and gotchas

Web pages can contain text that tries to boss your agent around. Anthropic's own permissions guide says Claude will not complete instructions found in emails or web content, but you are still the last line of defense. Keep these habits:

Use a dedicated Chrome profile for agent work, logged into as few things as possible. Keep approvals on for downloads, sensitive data, and anything that grants access. Watch the pause points: Claude stops at login pages and CAPTCHAs, and that is your cue to step in, not to hand over a password. Dismiss JavaScript dialogs by hand, since they freeze the browser channel. And if tools go quiet mid-session, the extension's service worker probably went idle, so run /chrome and choose Reconnect extension. Team and Enterprise admins can also set site allowlists and blocklists, which is worth doing before rolling this out to a whole team.

Approval needed (example)Agent wants to act on: staging.example.testAction: click "Save settings"Your task said READ ONLY. Approve anyway?DeclineAllow onceTHA-SHED.COM(Illustration with example data)

Usage and cost tips

Automatic approval mode uses more of your usage limit than manual, so match the mode to the risk. In Claude Code, enabling Chrome by default loads the browser tools into every session and increases context use, so use --chrome only when you need it. Uploads are capped at 10 MB per call. Finally, ask narrow questions ("errors matching 401") instead of "read everything on this page."

FAQ

Does Claude in Chrome work in other browsers?

The extension is for Google Chrome. Claude Code's integration also works with Microsoft Edge and detects other Chromium browsers such as Brave, Arc, Vivaldi, and Opera.

Can it make purchases or create accounts?

No. Anthropic's permissions guide lists purchases, account creation, and permanent deletions as things it will not do, and it asks before downloads or entering sensitive data.

Is it safe to leave running unattended?

Only for read-only tasks on sites you trust. Anything that writes, deletes, or touches production deserves a human in the loop.

Your next move

Pick one boring, read-only browser chore this week and hand it to the agent with a tight prompt. Want the full playbook for building safe AI workflows on your team? Check out our courses.

Tha-Shed

Type a brief, get a finished film. Characters, voices and music included.

Start creating