Claude for Safari

Operate the user's real Safari session with macOS-native tools. Preserve the user's tabs, login state, page data, and approval boundaries.

Safety invariants

• Resolve and verify the exact Safari window and tab before every page-changing action.
• Stop on a missing, stale, or ambiguous target. Never guess by window title alone.
• Treat Safari AppleScript objects, Accessibility windows, and CoreGraphics window IDs as separate identity systems.
• Require explicit authorization before submitting forms, confirming destructive actions, navigating away from unsaved work, or closing tabs/windows.
• Never override confirm() to return true, suppress beforeunload, or silently answer a native dialog.
• Never include passwords, file uploads, one-time codes, payment-card data, tokens, or secrets in scripts, shell commands, transcripts, or returned JSON.
• Prefer DOM actions. Use System Events or coordinate interaction only after verifying focus, permissions, and the target.

For permission failures or native dialogs, read references/troubleshooting.md. For frames, private windows, or coordinate fallback, read references/advanced.md before acting.

Preflight

Fail fast outside macOS: