An ice cream AI agent that lives in your browser.

SLICC runs entirely client-side — it uses your browser sessions to automate web apps, run shell commands, and coordinate parallel agents. No server, no API keys, nothing to approve.

Get SLICC

See it work

npm

Install globally

Add SLICC to your system.

Run slicc from any directory

macos

Sliccstart for macOS

Native launcher. Download .dmg, drag to Applications, double-click

no terminal needed

ios

Control Sliccy from iPhone or iPad

Join the public TestFlight

public beta

chrome

Chrome side panel

Browser extension. No server, no approval. Uses your logged-in sessions

zero-install

github

View source on GitHub

Browse code, file issues, read docs, contribute. Apache-2.0 licensed

open source

Automate the apps you already use
SLICC works with any web app you're logged into. Your browser sessions, its hands.
GitHub: read and write issues, comments, create PRs, check out code
github.com, invert
Gmail: read, search, send, and reply to email
Slack: read and write messages, let SLICC handle new incoming messages
Jira: search by JQL, read, comment on, and create issues
atlassian.com
Outlook: read mail, check your calendar, and send email
Microsoft Teams: read and follow up on forgotten Teams threads
teams.microsoft.com
ServiceNow: list and manage tickets, read and post updates
Concur: list expense reports and manage travel
LinkedIn: publish posts to a company page
TikTok: upload and publish videos
Apple Music: create, curate, and update playlists
music.apple.com, invert
Suno: submit lyrics, styles, and instructions to the song generator
Strava: view activities, your feed, PRs, and athlete stats
Garmin: list activities, health stats, and devices
garmin.com, invert
Signal: read and send messages
signal.org
iCloud: read your calendar and Apple Notes, create events
Adobe Experience Manager: migrate, create, and author websites
adobe.ly
"I can't believe it's not
a UNIX system."
— Claude, after seeing the WASM shell for the first time
What people do with SLICC
Nine use cases, each with a working demo and a page that walks through how it is done. Start with whichever looks most like your week.
Web dev
Web development, but native
Scaffold, code, test and ship in a real shell with git, node and esbuild. The browser is the dev box.
web-loop
AEM
The agent for AEM development
Read, write, preview and publish Edge Delivery pages, and deploy edge functions, from the tab you already have open.
eds-pipeline
Marketing
The operator for product and growth
Research a market with parallel agents, then turn what they find into a PRD, a post, or a campaign.
research-swarm
Busywork
Just another day out of the office
Expense reports in Concur, travel booked in Navan, the Monday deck built while you do something better.
expense-report
Triage
The agent that helps you stay on top of things
Ranks everything competing for your attention across mail, Slack, Teams and Jira, then clears the small stuff.
monday-triage
Creative
Your partner in creative endeavors
Generate images, video and voice, score a song, or cut a story into shorts, composed in code rather than clicked.
generative-studio
Everyday
Explore the world
Reads your rides and runs, maps where you have been, and builds the playlist for the trip.
mixtape-cover
Extend
An agent you can make yours
Point it at an app you are logged into and it works out that app's own API, then keeps the skill.
reverse-engineer
Sandbox
Wait — it runs that in a browser tab?
A real Alpine userland on RISC-V, x86 guests, even a phone over ADB, all inside the tab.
vpod-alpine
"You can make an engineer ~fill out~ an expense report only so many times until they start writing a slicc skill."
████ Slack thread, █████ redacted

Under the waffle hood.

A cone orchestrates. Scoops do the work. Sprinkles are the UI.

chmod +x everything.
Your agent loves shell scripts, so we give it a full blown shell. In the browser. With some extras.
Unix
afplay, agent, alias, awk, base64, basename, case, cat, cd, chmod, column, comm, convert, cp, curl, curlwright, cut, date, df, diff, dig, dirname, do, du, echo, env, eval, exec, export, false, ffmpeg, ffprobe, fi, file, find, fold, for, getopts, git, grep, gunzip, gzip, head, hear, hostname, if, imgcat, jq, kill, ln, ls, magick, man, mcp, md5sum, mkdir, mv, nl, node, npm, npx, od, open, paste, pbcopy, pbpaste, pdftk, pdftotext, playwright-cli, printf, ps, pwd, python, python3, read, rev, rg, rm, rmdir, rsync, say, screencapture, sed, seq, set, sha256sum, shift, sleep, sort, source, split, sqlite3, ssh, stat, strings, sudo, tac, tail, tar, tee, test, theme, then, time, timeout, touch, tr, tree, true, unalias, uname, uniq, unset, until, uv, wait, wc, websocat, which, while, whoami, workflow, xargs, xxd, zcat, zip
SLICC custom
commands, crontask, nuke, oauth-token, sprinkle, upskill, webhook
custom
If that's not enough: ask SLICC to create your own commands as .sh, .jsh (rhymes with GIF), or .bsh.
You're still scrolling. Good.

2026-03-02

days since the last prompt injection incident

Read our security model →
Here's where it gets weird.
It sees your tabs, your sessions, your logged-in apps. Close the tab and it stops. That's the whole security model.
Each scoop gets its own sandbox, shell, and conversation.
No code changes. No deploys. Install a skill and the agent learns a new workflow.
If you've read this far, you should probably just try it.
Install
One command. Every platform.

Quick start

npx sliccy

Downloads SLICC, launches Chrome, and opens the workspace. Requires Node 22+.

Global install

npm install -g sliccy

Installs SLICC globally. Run slicc from any directory.

Desktop & Extension

macOS app: download, drag to Applications, double-click. Chrome extension: side panel agent with access to your logged-in sessions.

Open source, Apache-2.0 licensed. View on GitHub
Bring your own tokens
We use the most excellent pi APIs under the hood, so all relevant providers are supported
Adobe
Amazon Web Services
aws.amazon.com
Anthropic
Cerebras
cerebras.ai
GitHub Copilot
github.com
Google
Groq
Hugging Face
huggingface.co
Microsoft Azure
azure.microsoft.com
MiniMax
minimaxi.com
Mistral AI
mistral.ai
Moonshot AI
kimi.moonshot.cn
OpenAI
openai.com
OpenCode
opencode.ai
OpenRouter
openrouter.ai
Vercel
xAI
x.ai
Zhipu AI
zhipuai.cn
Get Brain Freeze!
See SLICC live or in person in these conferences, meetups, or late-night Zooms. Bring napkins.
2026-04-23 17:00:00, Lehi, UT
Brain Freeze in the yurt
Hacking SLICC, admiring Stardust
2026-04-29 16:00:00, Berlin, Germany
pi.dev community meetup
Short five minute lightning talk on agents in the browser
2026-05-07 16:00:00, Youtube Live
Thursday Frequency: The Self-Licking Ice Cream Cone
In-depth demo and discussion of SLICC with Lars and Karl
2026-06-01 11:45, London, UK and virtual
AI DevCon by Tessl
Building AI agents in the browser, for the browser, of the browser