Claude in Safari: no extension, but three ways to let Claude control Safari on the Mac

Short answer: There is no official Claude extension for Safari. Claude in Chrome runs in Chrome (Claude Code also connects it in Edge and other Chromium browsers), and Claude Desktop's built-in computer use can only look at browsers, not click or type in them. To let Claude work in Safari on a Mac, connect an MCP server: Apple's Safari MCP server in Safari 27 for inspecting and debugging pages, or a computer use server such as ShadowCursor, which gives Claude its own Safari window with its own cursor and keyboard.

Your options at a glance

As documented by Anthropic, Apple and OpenAI in October 2026:

Sources: Claude in Chrome help article, Claude Code with Chrome, Claude Desktop docs, Apple's Safari MCP server post.

Is there a Claude extension for Safari?

No. Anthropic's help article says Claude in Chrome runs on Google Chrome for paid plans (Pro, Max, Team and Enterprise) and is not supported in other Chromium-based browsers. The Claude Code documentation is a little wider: Chrome integration works with Chrome and Microsoft Edge, and Claude Code also sets it up in Brave, Arc, Vivaldi and Opera. Safari and Firefox are not named in either. A feature request for official Safari support on the Claude Code issue tracker was closed as not planned after it went stale in April 2026.

Third-party Safari extensions that put a Claude chat in a sidebar exist. They are not from Anthropic; check who builds one before you let it read your pages.

Why Claude Desktop cannot click in Safari

Claude Desktop and the Claude Code CLI have built-in computer use on the Mac (research preview, Pro or Max). Anthropic fixes the level of control per app category, and you cannot change it:

• Browsers and trading platforms: view only. Claude sees them in screenshots.
• Terminals and IDEs: click only.
• Everything else: full control.

So Claude can read a Safari page but cannot fill a form or press a button there; for browser work, Anthropic points to Claude in Chrome. Claude Desktop also has a Browser pane with a clean profile, separate from your personal browser, for testing the app you are building. Neither is Safari.

Apple's Safari MCP server

Safari 27 and Safari Technology Preview 247 include an MCP server that is part of safaridriver, Safari's WebDriver tool. Apple built it for web developers: the agent can open your site, read the DOM, run JavaScript, list network requests and console messages, take screenshots, change the viewport and perform DOM interactions such as click, type, scroll and hover.

To set it up:

1. In Safari, open Settings > Advanced and turn on "Show features for web developers".
2. In Settings > Developer, turn on "Allow remote automation and external agents".
3. Add the server to Claude Code with the command from Apple's post:

claude mcp add safari-mcp -- "/usr/bin/safaridriver" --mcp

Apple gives the same command for Codex with codex mcp add. According to Apple, the server runs locally, makes no network calls of its own and has no access to your AutoFill data or other browsing activity.

What the post does not say is which window the agent gets and whether it can use your signed-in sessions. Apple's WebDriver documentation describes automation sessions as isolated windows with an orange Smart Search field that start from a clean slate, with a glass pane that blocks your clicks and keys, and one session at a time. Whether MCP sessions behave the same way is not documented. For debugging your own site that hardly matters; for tasks on sites where you are signed in, it does.

Claude in its own Safari window with ShadowCursor

ShadowCursor is a Mac app and MCP server that gives Claude Code, Claude Desktop, Codex, Cursor, VS Code and any other MCP client their own cursor, keyboard, clipboard and windows. Each agent gets a cursor drawn in its color with a name tag, keys that arrive only in its window, and a clipboard that never touches yours or another agent's. In Safari, it opens a window of its own and works there, also while your windows cover it; the guide to background computer use explains how that works.

Because it operates Safari through the screen and the accessibility interface rather than the page's code, it works the way a person would:

• Hover menus react. Hover without a click reaches Safari pages, so menus that open on hover work.
• Human input. The pointer moves in curved paths with natural speed, and typing has a human rhythm at about 200 words per minute, so sliders, date pickers and signature fields respond as they do to a person.
• Your normal Safari. A new window in your Safari profile normally shares your signed-in sessions, so the agent can continue where you are logged in without ever seeing a password.
• Beyond the browser. The same agent can take data from Numbers or Mail and enter it on a web page.
• Several agents. Two agents can work in two Safari windows at the same time without mixing up their input.

If you type in Safari yourself while the agent works in its window, it waits for your pauses, and your keys never reach its window.

To set it up, open the app, allow Accessibility and Screen Recording, and connect Claude with one click; the app finds Claude Code and Claude Desktop and adds itself. Then ask for a task, for example "Open example.com in your own Safari window, fill out the contact form with the data from contact.txt, and stop before you submit." Claude in the browser, on claude.ai, can connect too, through a custom connector; this guide explains how.

Its limits in Safari: an agent cannot use a background tab of your window, because Safari draws and sends input only to the selected tab, so it opens its own window. Minimized windows cannot be seen or operated. Dragging files, tabs or text between windows is cancelled rather than dropped. Safari can unload very heavy web apps in a window that was never on screen; the agent then reloads the page. After a 7-day free trial without a card it costs $12.99 per month or $69.99 per year.

Which one to use

• Debugging your own website in Safari: Apple's Safari MCP server. It reads the console, network requests and computed state directly, which no screenshot can.
• Tasks on real websites where you are signed in, with hover menus, sliders or uploads: a computer use server with its own Safari window. The guide to filling out web forms walks through a full example.
• Scripted, repeatable browser tests: Playwright or a browser MCP server; Playwright MCP vs computer use compares the two.
• You use Chrome anyway: Claude in Chrome.

Both MCP servers can be connected at once.

What about Codex?

OpenAI's computer use in the ChatGPT desktop app can do tasks in your web browser and connects to Chrome through an extension. Its documentation does not name Safari and suggests letting ChatGPT use a different browser if you want to keep using yours. Codex can use Apple's Safari MCP server or ShadowCursor like any MCP server.

FAQ

Does Claude in Chrome work in Safari?

No. Claude in Chrome runs in Chrome, and Claude Code also connects it in Edge and other Chromium browsers. Safari is not supported.

Can Claude control Safari on my Mac?

Not with the built-in computer use, which keeps browsers view-only. With an MCP server it can: Apple's Safari MCP server gives Claude page-level tools, and a computer use server such as ShadowCursor lets Claude work in a Safari window of its own.

Can Claude Code control Safari?

Yes, once you add an MCP server. Apple's post gives the command for its Safari MCP server, and ShadowCursor adds itself to Claude Code with one click.

Does Apple's Safari MCP server use my logins?

Apple says it has no access to AutoFill or your other browsing activity, but does not document whether it can use your signed-in sessions. Safari's WebDriver automation windows start from a clean slate.

Does Safari need to stay in front while Claude works?

With ShadowCursor, no. The agent works in its own Safari window, also while your windows cover it. It only needs the window to be open; minimized windows cannot be operated.

Can I use Claude in Safari on claude.ai to control my Mac?

Yes, through a custom connector to a computer use server. claude.ai cannot start local MCP servers, so ShadowCursor offers a web connection for it, and Claude then works in your Mac's apps like a local agent.