MCP Auth Bridge — Let your AI shop for you. Config-driven Chrome extension that gives MCP servers access to your accounts.
概览
Give your LLM access to your accounts. One click in Chrome, and your MCP servers can shop, browse, and manage services on your behalf. Most useful sites don't have APIs. They have login sessions. MCP Auth Bridge is a Chrome extension that captures your session credentials (cookies, bearer tokens) and writes them to disk so MCP servers can pick them up. Log into a site in Chrome, click Save, and your AI can use that session to search products, manage wishlists, place grocery orders, and more. MCP servers are great at automating tasks, but they hit a wall the moment a site requires authentication. You can't just paste a session cookie into a config file; most auth cookies are httpOnly (invisible to JavaScript) and bearer tokens rotate constantly. This started with a specific problem: getting Amazon's httpOnly auth cookies into an MCP server so Claude could search and shop. A Chrome extension can read those cookies where bookmarklets and scripts can't.
README
以下为原文 README 节选，完整内容请查看原文。
MCP Auth Bridge — Let Your AI Shop For You
Give your LLM access to your accounts. One click in Chrome, and your MCP servers can shop, browse, and manage services on your behalf.
Most useful sites don’t have APIs. They have login sessions. MCP Auth Bridge is a Chrome extension that captures your session credentials (cookies, bearer tokens) and writes them to disk so MCP servers can pick them up. Log into a site in Chrome, click Save, and your AI can use that session to search products, manage wishlists, place grocery orders, and more.
Why This Exists
MCP servers are great at automating tasks, but they hit a wall the moment a site requires authentication. You can’t just paste a session cookie into a config file; most auth cookies are httpOnly (invisible to JavaScript) and bearer tokens rotate constantly.
This started with a specific problem: getting Amazon’s httpOnly auth cookies into an MCP server so Claude could search and shop. A Chrome extension can read those cookies where bookmarklets and scripts can’t. That approach worked well enough that it made sense to generalize it. Now adding a new site is just a JSON entry.
What It’s Been Used For
| Site | What the MCP server does | Auth method |
|---|---|---|
| Deku Deals | Nintendo eShop deal tracking. Search games, check prices, manage wishlists, find sales. | Session cookie |
| Amazon | Product search, order history, wishlist management on Amazon.ca. | httpOnly auth cookies |
| PC Express | Grocery shopping at Real Canadian Superstore. Search products, add to cart, reorder past purchases. Originally built by FireBall1725. | Bearer token + cart ID from API calls |
| Roll20 | Read a D&D character sheet and campaign data (handouts, chat) directly from Roll20’s Firebase Realtime Database. | Firebase ID token (minted on-demand) |
| front-rich | Pull per-message repeat-open history from Front’s undocumented /seens endpoint (the documented /seen only gives first-seen per recipient). Multi-workspace via user-typed labels. |
Session cookies + page-context (cell, company) |
| bird (X / Twitter) | Read X lists, home timeline, mentions, and search from the terminal via X’s internal GraphQL — no paid API. Powers a nightly list digest. Consumer wrapper: consumers/bird-x. |
httpOnly session cookies (auth_token + ct0) |
The pattern works for any site where you log in through a browser. If the site uses cookies, bearer tokens, or a Firebase-style ID token (which covers nearly all of them), you can add it.
How It Works
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →