Searxly Agentic Tools.
We don't ship a chatbot. Searxly turns the browser into a private tool server your own local AI can call. Bring Ollama, LM Studio, or any client that speaks the Model Context Protocol; Searxly gives it private web search, page reading and real browser actions. Everything runs on your Mac, and nothing is sent to any AI company.
Your model · your machine · your data
We're not shipping another black box.
Most browsers now bolt on their own AI and ask you to trust their model and their data pipeline at the same time. We went the other way. Searxly doesn't run the intelligence — you do. The model you already trust, running on your own machine, gains a private, auditable set of tools to search and act on the web through Searxly. The AI is yours. The privacy is the point.
The whole thing, running on one machine.
A local model connected to Searxly over MCP — searching, reading pages, and driving the browser from one end to the other. No chatbot of ours, no cloud in the loop, nothing sent to any AI company. Here's one session, call by call.
One open standard. Any local model.
Searxly runs a small tool server on your own machine, speaking the Model Context Protocol — the same open standard Claude Desktop, Cursor and a growing list of clients already use. Point your client at the endpoint, paste the access token, and your model can call Searxly's tools.
Your model, your choice
Ollama, LM Studio, or any MCP client. Searxly never picks the model and never runs one; it simply answers the tools your model decides to call.
Loopback only
The server binds 127.0.0.1 and nothing else. No other machine on your network, and no server on the internet, can reach it.
Off by default
It ships switched off. You turn it on, it's protected by a token, and every tool has its own on and off switch.
What your AI can actually do.
Every tool is a thin, private wrapper over something Searxly already does well — routed through your own search and guarded the same way the browser is.
Private web search
Your model searches through your own SearXNG instance and reads the results. Never a public index, never an ad network, never your intent for sale.
Read a page
Fetch the readable text of any page — SSRF-guarded and Tor-aware — so the model can quote and cite from the real source instead of guessing.
Knowledge lookup
Pull structured facts about a person, place or thing straight from Searxly's own knowledge panel.
Open the right site
Resolve and open the real, official destination from a curated, auditable entity database — not a lucky guess from a search result.
Privacy status
Let the model read the live privacy posture of the session — which mode is on, whether Tor or the VPN is routing, and what's protected — so it can reason about how private the current context is.
Let it act on your real tab.
Turn on browser control and your model gains an action suite over the tab you're actually looking at: snapshot the page's interactive elements, read and fill an entire form in one shot, find text on the page, click, type, select, scroll, navigate back and forward, reload, wait for content or an element to appear, even capture a screenshot. It's modeled on the accessibility-snapshot pattern from Microsoft's open-source Playwright MCP, so it works with any local model — no vision required — and it stays hidden and refused until you switch it on. The private, local answer to Comet and Atlas.
- ✓Acts on your own session — no headless browser, no second account
- ✓Reads a form and fills every field in a single call — no slow field-by-field crawl
- ✓A snapshot-and-reference model any small local model can drive
- ✓A second opt-in, separate from the read-only web tools
Worried about the speed of filling forms?
A model driving a browser can fill a form the careful way — one field at a time, a separate call for each. Reliable, but slow. The fill_form tool collapses that into a single call: it reads the whole form, maps your values to the right fields, and sets them in one pass. Watch all twelve land at once.
fill_formEvery tool, by name.
Grouped by what they touch. The read-only web tools work the moment you connect; the rest stay hidden and refused until you switch on their tier.
Web · read-only
web_search read_page read_current_page knowledge_lookup open_website privacy_status
Browser control · opt-in
page_snapshot describe_form fill_form click type select_option press_key scroll find_text navigate go_back go_forward reload wait_for screenshot
Tabs · with browser control
list_tabs read_tab switch_tab open_tab close_tab
Personal data · opt-in
search_history search_bookmarks add_bookmark
The first test passed.
In our first live test, a local Qwen 2.5 7B model running in Ollama connected to Searxly through an MCP client and put the tools to work. It completed the handshake, discovered every available tool, read the live privacy status, and drove the browser — opening a page, reading its structure, and clicking an element on it. Every step ran on the machine, with nothing sent to any AI provider. Early, but the foundation is real.
Typical browser AI
- ✕Their model, running on their servers
- ✕Your prompts can train it by default
- ✕Tied to an ad identity and a behavioral profile
- ✕One opaque vendor, one set of terms, no way out
- ✕You can't see or swap what's under the hood
Searxly Agentic Tools
- ✓Your model, running on your own machine
- ✓Nothing sent to any AI company
- ✓Built on an open standard — any MCP client works
- ✓Loopback-only, token-gated, off by default
- ✓Every tool auditable, every call logged
Safe by construction.
The tool server listens only on loopback, demands a token on every request, and refuses anything carrying an Origin header — the classic defense that stops a malicious web page from reaching a server on your own machine. It's off until you turn it on, and the tools that can act on your tab are a second, separate opt-in.
- ✓Binds 127.0.0.1 only — never exposed to the network
- ✓Bearer token on every request, stored in your Keychain
- ✓Rejects cross-origin requests — anti DNS-rebinding
“Your AI, your machine, your data.”
That's the whole idea. The most private assistant isn't the one we host — it's the one you already run, given honest tools and nothing to phone home about. We made the intelligence yours, the tools auditable, and the privacy non-negotiable.
Bring your own AI.
Agentic Tools ships in both editions of Searxly, switched off until you want it. Follow along for the announcement, or download the app free.