sallyport
The Python MCP-server half of Sallyport — a security-first bridge between Claude Code (or any MCP client) and your Chrome, with explicit trust boundaries instead of implicit ones.
Claude Code ── MCP/stdio ──▶ daemon (this package) ── WS+HMAC ──▶ extension (MV3) ── CDP ──▶ Chrome
The daemon speaks MCP on stdio and hosts an HMAC-authenticated WebSocket server
on 127.0.0.1:10086 that the companion Chrome extension connects into. Every
frame is signed (HMAC-SHA256 + timestamp + nonce); the extension enforces a
per-domain allowlist and a per-domain opt-in for arbitrary JS.
Install
pip install sallyport
The package installs the sallyport-daemon console command.
Quickstart
sallyport-daemon doctor # check Python, secret file + perms, port; print the pairing block
claude mcp add sallyport sallyport-daemon # register with Claude Code
Then load the unpacked extension (or the release zip) from the main repository and paste the pairing block into its popup.
sallyport-daemon list-tools— print the tool catalogue (no daemon start)sallyport-daemon serve— WS-only mode (no MCP) for wire testingsallyport-daemon exec <tool> k=v …— fire one tool from the shell
Security
The full threat model, the load-bearing invariants, and known limitations live
in SECURITY.md.
In short: loopback-only bind, HMAC on every frame, a domain allowlist enforced
in the extension, per-domain evaluate opt-in, password-field gates, and
daemon-side filesystem sandboxes for upload/save_to_file.
License
MIT — see LICENSE.
1 maintainer
Metadata
1 maintainer
Release files for sallyport 0.23.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| sallyport-0.23.0.tar.gz | 97.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| sallyport-0.23.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 201.9 kB
Release files / sallyport-0.23.0.tar.gz
| Download URL | sallyport-0.23.0.tar.gz |
|---|---|
| Size | 97.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f3610931d22ade964851060da4a3048efec8e2a7339501968fe890f6a87aada5
|
|
BLAKE2b-256 checksum How to use checksums |
a53439eed55e5da6ef6fc29eef672ac16b132f8321587ed9d70543e3b274534f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 1, 2026.
Transparency logRelease files / sallyport-0.23.0-py3-none-any.whl
| Download URL | sallyport-0.23.0-py3-none-any.whl |
|---|---|
| Size | 104.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
01b4e6ae6c00dbf893698e27a1e504e3cb4dd185b63ddd77dfd8bfbdbb783527
|
|
BLAKE2b-256 checksum How to use checksums |
c2c536a05d63a6a5fc85c9ba0bcf3734e8efcae958ec3cd2ff52fc2fe3989ce5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 1, 2026.
Transparency log
