
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
UX review for apps built with AI, inside the agent you already use. Connects Codex, Claude Code, Cursor, Windsurf or Gemini CLI to the Phyll engine; the AI work stays on your own plan.
UX review for apps built with AI, inside the agent you already use.
Phyll plugs into Codex, Claude Code or any agent that speaks MCP. Your agent opens your app the way a first-time user would, walks the core jobs in a real browser, and writes a report of what gets in the way: forms that ask for more than the job needs, sign-up walls, dead buttons, text too faint to read. The fixes keep your design.
The AI work runs in your agent, on your own plan. This package adds the browser, the page probe, the source scanner and the link to Phyll's engine, which sends the review method, checks the report and keeps it with a link.
npx phyll signup you@example.com
npx phyll setup codex # or claude, cursor, windsurf, gemini
Then ask your agent: "review my app at http://localhost:3000".
setup registers the connector in Codex's config.toml, with claude mcp add, or in the mcpServers of Cursor's ~/.cursor/mcp.json, Windsurf's ~/.codeium/windsurf/mcp_config.json or Gemini CLI's ~/.gemini/settings.json, keeping everything else in the file. It also installs the Chromium build the connector uses. For any other agent that takes MCP servers, npx phyll setup other prints the entry to paste. You need Node 20 or newer.
Your reports, keys and plan are also on the site: npx phyll account opens your account there, already signed in. If you lose the key, sign in at agentphyll.com/login with your email and create a new one.
| Command | What it does |
|---|---|
signup <email> | Create a free account, with 5 full reviews. The key is saved in ~/.phyll |
login <key> | Use an account you already have on this computer |
setup <agent> | Connect Phyll to codex, claude, cursor, windsurf or gemini and install the browser; setup other prints the settings for any other agent |
status | Your plan and the reviews left |
account | Open your account on agentphyll.com, already signed in: reports, usage, keys and plan |
pro | Subscribe to Phyll Pro, R$ 9 a month, with unlimited reviews |
billing | Change the card or cancel Phyll Pro |
scan [folder] | Scan the source for AI tells, with no account and no AI. --format json for scripts, --format badge for a README badge |
mcp | Run the connector for your agent; setup registers it for you |
logout | Forget the key on this computer |
start_review scans the project, creates the report folder and returns the method. capture saves a screenshot and the page probe of each route at laptop and phone size. open, snapshot, click, fill, select, check, press, back, screenshot, probe and resize drive the browser, which stays on your app. guide returns a part of the method, finish_review sends the report to the engine and writes report.md, and scan, account and upgrade do what their names say.
Your source code, your screenshots and your agent's conversation stay on your computer. When a review starts, the connector sends the app's address, the project name and a summary of the scan: which tells it found, how many times, and the paths of routes and forms. When it ends, it sends the report your agent wrote, which the engine keeps so the link works.
The scanner, the plugin and four example apps are in the repository. MIT license.
FAQs
UX review for apps built with AI, inside the agent you already use. Connects Codex, Claude Code, Cursor, Windsurf or Gemini CLI to the Phyll engine; the AI work stays on your own plan.
We found that phyll demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.