macOS Chromium research browser

Pause the request before it leaves.

Refract holds the request a page just built. Inspect its headers and body, edit what matters, then release the bytes you chose.

Coming soon · macOS Apple Silicon

See how it works

Free browser and manual interception · BYOK agent with a license

Real app capture · manual workflow

The page builds it. You decide what goes out.

Arm interception, trigger a request from the page, and inspect it while Refract holds it. Edit the JSON before it reaches the server, or release it unchanged.

A real Refract run: a POST built by the page is held in the inspector, its JSON body is edited from 67 to 91 bytes, and the test server reports the edited amount after release — FIG. 01Captured from a real run of the app against its local test server. The server received the edited bytes.

01 · Pause

Refract holds the request after the page builds it and before it reaches the network.

02 · Edit

Inspect the method, URL, headers, and body, then change what you need.

03 · Release

Nothing goes out until you press Release.

Bring your own key · human approval

An agent can propose. You confirm each action.

Add an Anthropic or OpenAI API key and pick a model. The agent can read the tab, the network log, held requests, and app state. Each page action, state edit, or change to a held request appears on its own approval sheet, and Refract applies it only after you click Allow.

Refract encrypts the key in your local macOS profile and sends it straight to your provider when a turn starts. There is no Refract-hosted model and no bundled model credit.

Set up the agent

A real Refract run: the agent proposes filling a login form and pausing its POST, and each step waits on an approval sheet for the human to allow or deny — FIG. 02A real agent-driven login test, with a separate approval for each action.

One live Chromium runtime

Keep the page, the request, and the decision together.

Refract puts the browser tab, network log, request inspector, React and Redux state panel, and agent in one macOS window. The agent sees a redacted view of the same runtime you control.

Capability boundary

What it will not do.

No MITM: Refract does not break TLS. There is no certificate authority to install and no proxy.
No scanner: There are no payload packs, fuzzer, or exploit library. Refract holds what the page builds. It does not generate attacks.
No stealth: A held request keeps its renderer waiting, and an attached debugger changes timing. A watchful target can notice.
Memory only: The network log and held frames live in memory. A restart clears them.

Coming soon

Hold the next request.

Refract is not available yet. It will ship for Apple Silicon Macs as a free browser, with an optional paid BYOK agent.

Ask about launch