Open source · free cloud browser included

Let Codex get things done on real websites.

Log in, fill forms, compare and buy, book, download invoices. Codex works in a real browser, types your passwords and cards from a vault it can never read, and stops at checkout until you approve the exact order.

$curl -fsSL https://inskit.justmade.page/install.sh | sh
Needs Codex on macOS or Linux. Or by hand: codex plugin marketplace add brunoqgalvao/inskit
YOU, IN CODEX@inskit reorder the coffee capsules I bought last month
inskit approval page: Buy from Nespresso? Three items, total BRL 177.93, Visa ending 4242, with Approve and Don't buy buttons
What you get

A browser Codex can use, without handing it your secrets.

A browser that stays logged in

Codex gets its own browser, in the cloud or on your machine, and stays signed in to the sites you use. Bring logins over from Chrome, Arc, Brave or Edge site by site, or sign in once.

A vault Codex never reads

Cards, passwords and ID numbers go into an encrypted vault on your computer through a one-time page. Codex can type a value into a field, but the value never shows up in anything it reads.

Nothing bought without you

Codex fills the cart and stops. You approve the exact items, total, address and card. The pay button only works for that order, at that store, while that total is on screen.

The vault

You type the secret. Codex only gets to use it.

inskit vault page asking for card number, expiry, CVV and name, with a Save to vault button
  • Stays on your computerEncrypted with AES-256-GCM and a key that never leaves your machine. The cloud browser never stores it.
  • Hidden from the modelSnapshots, page text and screenshots are redacted on vault pages and in filled fields.
  • Logins that check themselvesAfter you save a password, Codex tries it and reports verified only when the site shows you are signed in. Two-factor codes go through the same page.
  • Pasted a card in chat?Codex ignores it and sends you the vault link instead.
Try asking

Errands you would rather not click through yourself.

@inskit download my last 3 invoices from my phone carrier
@inskit find a hotel in Lisbon next weekend under $200 a night
@inskit buy the cheapest 65W USB-C charger that arrives by Friday
@inskit cancel the streaming subscription I stopped using
How it works

The browser can run anywhere. The secrets stay home.

A small service on your computer holds the vault and the approval gate. The browser runs in the cloud by default, so no window opens on your machine, and Codex drives it through that service.

In Codex

The chat

  • Plans the task
  • Reads pages as text
  • Asks before buying
On your computer

inskit service

  • Encrypted vault
  • Purchase gate
  • Vault and approval pages
Cloud or local

The browser

  • Free hosted cloud browser
  • Or your own Browser Use key
  • Or Chrome on your machine
Free cloud browser

Works the moment it is installed. No account, no API key.

The first time Codex needs a browser, inskit opens one on our hosted Browser Use account. It is free while we learn what it costs to run.

Browser time per day60 minutes
Longest session30 minutes
Closes when idleafter 5 minutes
RecordingOff
PriceFree for now

What we keep. An anonymous install ID and how long your browser ran. Cookies for the sites you sign in to stay in a cloud browser profile on our Browser Use account, so you stay logged in. Your vault and your purchase approvals never leave your computer.

Delete it any time. inskit cloud forget deletes your cloud profile and its cookies.

Rather not? Use your own Browser Use key, or run Chrome on your machine with logins copied from your everyday browser. It is one line in ~/.instinct/config.json.

Questions

Before you install

What do I need?

Codex, the app or the CLI, on macOS or Linux. Node and Playwright ship with the plugin, so there is nothing else to install.

Does it work outside Codex?

The tools are a standard MCP server, so other agents can call them. The setup and the instructions are written for Codex today.

Can Codex buy something on its own?

No. The gate checks the store, your approval and the total on screen in code, not in the prompt. A web page telling Codex to buy something is treated as text.

What does it not protect against?

Software running as you on your own computer. The vault keeps secrets away from the model and from prompt injection; it is not a sandbox. See the security notes.

Where do downloads go?

To an inskit folder inside Downloads. Codex can also attach your local files to forms when you ask.

Is it really open source?

Yes, Apache-2.0. The plugin, the hosted service and this page are all in one repository.

Give Codex a browser in one line.

$curl -fsSL https://inskit.justmade.page/install.sh | sh