Can my desktop AI agent run a synthux UX audit without configuring a separate API key inside the Chrome extension?

Yes. With Agent-Brain Mode (prepare_external_audit + submit_external_audit), synthux captures the live DOM, axe-core WCAG 2.2 AA results, and full-page screenshot, builds the Sectoral Rule Pack prompt, and lets your host agent (Google Antigravity / Gemini 4 Argon, Claude Desktop, Cursor, or Codex) perform the reasoning and generate the v2.0 report.

How is the synthux MCP bridge secured against malicious websites?

synthux-mcp binds strictly to 127.0.0.1:17483 (loopback only), enforces strict Origin header validation that blocks all http:// and https:// web page origins from opening WebSocket or HTTP connections, never exposes browser-stored API keys over MCP, and supports an optional SYNTHUX_MCP_TOKEN pairing secret.

MCP Server & Agentic UX Audit for AI Coding Agents

How the MCP Bridge Works

100% of synthux Features, Orchestrated by Your AI Agent

synthux-mcp bridges desktop MCP hosts with the Chrome extension's MV3 Service Worker over a hardened local WebSocket channel.

01 · End-to-End Browser Control

Open Tabs, Scan DOM & Render Live Overlays

Agents call open_and_audit_url, scan_page_ux_context, run_wcag_audit, toggle_heatmap, and capture_annotated_screenshot to inspect real authenticated browser sessions and localhost dev servers.

02 · Dual Evaluation Modes

Agent-Brain Mode or Extension AI Engine

Run audits using the extension's configured provider (Ollama / BYOK) via run_ux_audit, or use prepare_external_audit + submit_external_audit so your host agent (Gemini 4 Argon, Claude, Cursor) evaluates the page directly.

03 · Hardened Loopback Security

Origin Firewall, Token Pairing & Key Redaction

Bound strictly to 127.0.0.1:17483. Blocks all http:// and https:// web origins from cross-site WebSocket hijacking, supports SYNTHUX_MCP_TOKEN pairing, and never exposes stored API keys.

Quick Setup — Add to mcp_config.json (Antigravity, Claude Desktop, Cursor, Windsurf, Codex) npx -y synthux-mcp

{
  "mcpServers": {
    "synthux": {
      "command": "npx",
      "args": ["-y", "synthux-mcp"]
    }
  }
}

Target Workflows & AI Agents

Built for Agentic IDEs, Autonomous QA & Design Systems

Close the loop between frontend code generation and live usability verification.

AI Agent Host · Google Antigravity

Google Antigravity (Gemini 4 Argon) Workflows

Pair Antigravity with synthux-mcp to automatically audit localhost builds, evaluate Sectoral Rule Packs with multimodal vision, and patch CSS/ARIA violations in one turn.

Zero extra API keys needed via Agent-Brain prepare/submit pipeline
Syncs completed v2.0 reports directly to the Chrome Side Panel UI

AI Agent Host · Claude Code, Cursor & Codex

Autonomous Frontend & Design-System Engineers

Give Claude Desktop, Claude Code, Cursor, Windsurf, or OpenAI Codex live eyes on the rendered DOM, computed contrast, and interactive overlays.

Run Nielsen 10, E-Commerce, SaaS, Fintech, or custom JSON rule packs
Highlight broken selectors on the live page and capture annotated PNGs

Synthetic AI Persona · Multi-Persona Simulation

Automated Persona & Multi-Page Flow Testing

Instruct your agent to create custom domain personas via manage_personas and run multi-page journey evaluations via start_flow_analysis.

Test onboarding → pricing → checkout flows across multiple URLs
Evaluate First-Time Visitor, Power User, and Accessibility User friction

Security & Privacy · Enterprise Ready

Zero-Egress Localhost & Authenticated Session Auditing

Because synthux runs inside your real Chrome profile, your agent can audit authenticated dashboards behind SSO/VPN without sharing credentials.

Loopback-only WebSocket (127.0.0.1:17483) with optional pairing token
Blocks chrome://, file://, and extension pages automatically

MCP Architecture & Security FAQ

Frequently Asked Questions

Do I need a separate API key in the Chrome extension if I already use Antigravity, Claude, or Cursor?

No. Using the prepare_external_audit and submit_external_audit MCP tools, synthux extracts the live DOM, WCAG violations, and screenshot, and lets your host AI agent perform the evaluation using its own model brain.

Can a random website I visit connect to the local synthux-mcp server?

No. synthux-mcp enforces a strict Origin firewall that rejects any HTTP or WebSocket request carrying an http:// or https:// web origin, binds exclusively to 127.0.0.1, and supports an optional SYNTHUX_MCP_TOKEN shared secret.

Autonomous Browser UX & Accessibility Auditing for AI Coding Agents

100% of synthux Features, Orchestrated by Your AI Agent

Open Tabs, Scan DOM & Render Live Overlays

Agent-Brain Mode or Extension AI Engine

Origin Firewall, Token Pairing & Key Redaction

Built for Agentic IDEs, Autonomous QA & Design Systems

Google Antigravity (Gemini 4 Argon) Workflows

Autonomous Frontend & Design-System Engineers

Automated Persona & Multi-Page Flow Testing

Zero-Egress Localhost & Authenticated Session Auditing

Frequently Asked Questions

Do I need a separate API key in the Chrome extension if I already use Antigravity, Claude, or Cursor?

Can a random website I visit connect to the local synthux-mcp server?

Other Solutions & Use Cases

Defense, Military & Banking Intranets

Fintech, Digital Banking & Payments

E-Commerce & Checkout Conversion

SaaS, B2B Dashboards & Web Apps

WCAG 2.2 Accessibility & Compliance

Multi-Page Flows & Synthetic Personas