Install Ghostlight

Two pieces: a single binary (the brain) and a thin browser extension (the hands). Two minutes, no admin rights, uninstalls cleanly.

Extension installed -- one step left. Run the command in step 1 below and you are done: it registers the binary the extension talks to and configures your MCP clients automatically.

Get the binary (one command)

macOS / Linux

curl -fsSL https://raw.githubusercontent.com/sylin-org/ghostlight/main/scripts/get.sh | sh

Windows (PowerShell)

irm https://raw.githubusercontent.com/sylin-org/ghostlight/main/scripts/get.ps1 | iex

This downloads the latest release, registers the browser connection (native messaging), and adds Ghostlight to every MCP client it can find on your machine -- idempotently, by merging config values, never overwriting your file. Prefer to preview first? Append GHOSTLIGHT_NO_REGISTER=1 and run ghostlight install --dry-run.

Other ways: npx, cargo, manual download

Any MCP client can launch Ghostlight with no install at all:

{ "command": "npx", "args": ["-y", "ghostlight"] }

then run npx ghostlight install once to connect the extension. Rust users: cargo binstall --git https://github.com/sylin-org/ghostlight ghostlight. Or grab a binary from the latest release and run ghostlight install yourself.

Add the browser extension

Add "Ghostlight in Browser" to Chrome / Edge

Store listing not available yet, or want the zip?

Download ghostlight-extension-*.zip from the latest release, unzip it, open chrome://extensions, enable Developer mode, and choose "Load unpacked" on the unzipped folder.

Point your agent at it

If step 1 found your client, you are already done -- restart the client and look for the ghostlight server. One-click and manual options:

Add to Cursor Add to VS Code

Claude Code

claude mcp add ghostlight -- npx -y ghostlight

Any other MCP client (stdio)

{ "command": "npx", "args": ["-y", "ghostlight"] }

Installed the binary in step 1? Use "command": "ghostlight" (or its full path) instead of npx.

Verify

ghostlight doctor

One read-only command that checks the whole chain -- registration, IPC, extension link -- and tells you exactly what to fix if anything is off. Then ask your agent to open a page: watch for the sky-blue ripple when it clicks.

What you just installed

One Rust binary (MCP server + native messaging host + optional background service) and one policy-free extension. By default everything is open: your agent can browse as you. When you want guardrails, a single policy file adds capability grants per domain, never-touch domains, and an audit log -- see the governance quickstart. Uninstall: ghostlight uninstall, then remove the extension.