[teravor]

it's more useful when you don't need permissions from anyone.

1) get firefox MCP

2) visit target site

3) point GLM 5.2 to MCP (maybe grok 4.5 will also work here? haven't tested their guardrails yet)

4) instruct model to create userscript that augments/breaks whatever you want, or just break it with devtools for the one session.

between 3 and 4 you may want to coax the model into instrumenting the client to understand it, write a report/skill for future sessions etc

you can also use the above to create a custom client or just a bot using web API. you can also easily break bot checks without puppeteered browsers now: "the above script aims to determine if it's executed on an allowed web browser, map out all its interactions with web browser APIs to fake adequate responses while using the Deno runtime". it's generally better to augment Deno to pass for Chrome and fool all the checks and their future versions then to just break a single check that may change soon.

[pancomplex]

This works for non-authenticated sites but wouldn't work for anything behind a login wall that requires a JWT or similar - right?

[teravor]

are you asking if it will magically allow you to bypass authentication? only if the service is vulnerable to auth bypass and you don't mind breaking multiple laws.

[hahahaa]

Or solve by allowing mcp to drive already authed session (using a legit user)?