Keep client secrets in add-on storage; host only verifies and serves the local API.

2026-09-22 07:42:10 -04:00
parent de0814f3ed
commit 41c83dabac
13 changed files with 185 additions and 290 deletions
@@ -8,7 +8,12 @@
 <body class="page">
  <header>
    <h1>Bookmarks API for Scripting and AI</h1>
-    <p class="muted">Issue a secret to each client. Store it with your secrets. This add-on keeps only a hash.</p>
+    <p class="lead">An API add-on for Firefox to allow agentic and script-based management of user bookmarks.</p>
+    <ol class="process">
+      <li>Issue a secret for each agent or script that should be allowed to work with your bookmarks.</li>
+      <li>Store that secret with your secrets. This add-on keeps only a hash.</li>
+      <li>While Firefox is open, those tools call the local bookmarks API. A separately installed native host is what listens for those calls — this page does not need it.</li>
+    </ol>
    <p id="status" class="muted"></p>
  </header>

@@ -43,6 +48,7 @@
    </div>
  </dialog>

+  <script src="clients.js"></script>
  <script src="options.js"></script>
 </body>
 </html>