Minting APIs out of websites that never offered one

What it does

Pomerado builds MCP integrations for websites, including ones with no public API. You describe the task in natural language — no HAR files, no recorded sessions — and it drives a real Chromium browser to explore the site, complete your example, and generalize the result into source code you own. The finished integration runs as its own MCP server, so your agent calls it like any other tool. It works behind logins and two-factor authentication, and it’s deterministic rather than the flailing of computer-use approaches.

The interesting bit

The minting pipeline is the story: a “Guardian” component reviews each browser action and the finished source while the integration is being built, and write authority is treated as a deliberate, gated decision — a write mint performs the action once during the build, then reviews the code without repeating it. Sign-in credentials are typed only on the site itself (or origins you explicitly allow), and a form that submits elsewhere is refused before anything is typed.

Key highlights

• MIT-licensed core with no account required: minter, prompts, Guardian, and the standalone host are all in the repo
• Integrations are saved as plain source folders with schemas (pomerado.json, deployment.json) — you own them
• Running a finished integration makes zero model calls; only minting needs an OpenAI key
• Failed calls return structured job info including possible_commit, so agents know to re-read the site before retrying
• Pomerado Cloud exists as a managed layer (OAuth brokerage, bot-protection fleet, automatic breakage repair) but isn’t required

Caveats

• Minting requires OpenAI models specifically, and a fairly narrow Node version (24.21+, under 25) on macOS or Linux
• Each mint gets 20 minutes of active work, and a run doesn’t re-check authority or review edits you make to src/ yourself
• The README is candid that it doesn’t audit where a page’s own scripts send what you typed — the origin check covers form targets, not third-party JS

Verdict

Worth a look if you have agents that need to act on websites with no API and you’d rather own the glue than rent it. Skip it if you need Windows support or want to avoid OpenAI in the build loop.