sallyport
The Python MCP-server half of Sallyport — a security-first bridge between Claude Code (or any MCP client) and your Chrome, with explicit trust boundaries instead of implicit ones.
Claude Code ── MCP/stdio ──▶ daemon (this package) ── WS+HMAC ──▶ extension (MV3) ── CDP ──▶ Chrome
The daemon speaks MCP on stdio and hosts an HMAC-authenticated WebSocket server
on 127.0.0.1:10086 that the companion Chrome extension connects into. Every
frame is signed (HMAC-SHA256 + timestamp + nonce); the extension enforces a
per-domain allowlist and a per-domain opt-in for arbitrary JS.
Install
pip install sallyport
The package installs the sallyport-daemon console command.
Quickstart
sallyport-daemon doctor # check Python, secret file + perms, port; print the pairing block
claude mcp add sallyport sallyport-daemon # register with Claude Code
Then load the unpacked extension (or the release zip) from the main repository and paste the pairing block into its popup.
sallyport-daemon list-tools— print the tool catalogue (no daemon start)sallyport-daemon serve— WS-only mode (no MCP) for wire testingsallyport-daemon exec <tool> k=v …— fire one tool from the shell
Security
The full threat model, the load-bearing invariants, and known limitations live
in SECURITY.md.
In short: loopback-only bind, HMAC on every frame, a domain allowlist enforced
in the extension, per-domain evaluate opt-in, password-field gates, and
daemon-side filesystem sandboxes for upload/save_to_file.
License
MIT — see LICENSE.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sallyport-0.19.0.tar.gz.
File metadata
- Download URL: sallyport-0.19.0.tar.gz
- Upload date:
- Size: 87.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
af5cad4922083999855eade4c99a8f840d088d548d9abff4068be1d9ef55a494
|
|
| MD5 |
2bdb7951346c47130167a87e2b261459
|
|
| BLAKE2b-256 |
b46fda8fa50293a5b6c57f03596492567a67df58d7c641665c66b01d0d391dba
|
Provenance
The following attestation bundles were made for sallyport-0.19.0.tar.gz:
Publisher:
publish.yml on ginkida/sallyport
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sallyport-0.19.0.tar.gz -
Subject digest:
af5cad4922083999855eade4c99a8f840d088d548d9abff4068be1d9ef55a494 - Sigstore transparency entry: 2302756879
- Sigstore integration time:
-
Permalink:
ginkida/sallyport@acae0605c2b6af5cf9e741b792a90c8b1a3eeea3 -
Branch / Tag:
refs/tags/v0.19.0 - Owner: https://github.com/ginkida
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@acae0605c2b6af5cf9e741b792a90c8b1a3eeea3 -
Trigger Event:
release
-
Statement type:
File details
Details for the file sallyport-0.19.0-py3-none-any.whl.
File metadata
- Download URL: sallyport-0.19.0-py3-none-any.whl
- Upload date:
- Size: 94.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
73e1a84627d5249b51fb6bf8d14f83358a373c4639f1b72570373de3a9304a98
|
|
| MD5 |
0f00178fc25eab1e87c78cb1946f6706
|
|
| BLAKE2b-256 |
e468336f852641941502a79efb4d34a936df92f40d2c6635f4a9a6c0893bb791
|
Provenance
The following attestation bundles were made for sallyport-0.19.0-py3-none-any.whl:
Publisher:
publish.yml on ginkida/sallyport
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sallyport-0.19.0-py3-none-any.whl -
Subject digest:
73e1a84627d5249b51fb6bf8d14f83358a373c4639f1b72570373de3a9304a98 - Sigstore transparency entry: 2302757023
- Sigstore integration time:
-
Permalink:
ginkida/sallyport@acae0605c2b6af5cf9e741b792a90c8b1a3eeea3 -
Branch / Tag:
refs/tags/v0.19.0 - Owner: https://github.com/ginkida
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@acae0605c2b6af5cf9e741b792a90c8b1a3eeea3 -
Trigger Event:
release
-
Statement type:
