ChatGPT's local bridge ships with the safety off

What it does

Chat On Steroids is an Electron desktop app plus Chrome extension that turns your local machine into an MCP server for ChatGPT. You keep using ChatGPT in the browser; the app sits in your system tray and executes file operations, shell commands, and session management on your behalf. The companion Chrome extension adds session capture, Compact & Resume, and experimental multi-agent coordination by observing ChatGPT’s web UI.

The interesting bit

The project is deliberately not a chat UI—it is purely a permission boundary and executor, which is a rarer architectural choice in the MCP tooling space. It also bundles OpenAI’s tunnel client and verifies its checksum, treating the transport as part of the trusted install surface rather than an external dependency. The experimental “worker chats” open additional ChatGPT tabs and route tasks between them deterministically, though this is done by manipulating the web UI rather than calling a public API.

Key highlights

• Cross-platform desktop app (Windows, macOS, Linux on x64/ARM64) with a bundled, checksum-verified OpenAI Secure MCP Tunnel client.
• File read/search/write confined to approved folders, plus shell command execution and interactive terminal sessions when enabled.
• Windows-only desktop automation: screenshots, window inspection, mouse, keyboard, and clipboard access.
• Durable local session history with Compact & Resume, plus an optional Goal loop that uses a second model to iterate until a target is met.
• Experimental prime/worker multi-agent chats coordinated through the Chrome extension.

Caveats

• Release binaries are unsigned and unnotarized, so expect OS and browser warnings; the authors recommend verifying SHA-256 hashes before running.
• Desktop automation is strictly Windows-only; macOS and Linux builds disable it at runtime.
• The experimental browser augmentation (session capture, worker chats) manipulates ChatGPT’s web UI directly and is not a documented OpenAI API—the README explicitly warns this may brush against OpenAI’s terms of service.
• Fresh installs enable the full Core capability set and disable read-only mode by default, meaning file write and command execution are on until you manually restrict them.
• File path containment is application-level, not an OS or VM sandbox.

Verdict

Worth a look if you want ChatGPT to actually manipulate code and run commands in your local project folders and accept the risk of a permissive-by-default local bridge. Skip it if you need publisher-signed binaries, a fully sandboxed environment, or a drop-in replacement for ChatGPT’s interface.