IFMPC — a Chrome extension that lets an AI assistant manage your InfinityFree site via MCP

Informal
1

Hi all,

I’m working on a side project called IFMPC (InfinityFree MCP) and I want to run it past the community — and ideally get a staff read on the ToS implications — before releasing it.

What it is

A Chrome extension that exposes parts of your own InfinityFree account to an AI assistant (Claude Desktop, Cursor, or anything that speaks the Model Context Protocol). The extension acts entirely inside your already-logged-in browser session — there are no stored credentials, no scraping from a server, and no third-party proxy.

In practice, that means you could ask an AI:

  • “Show me which files in htdocs were modified this week.”
  • “My site is throwing a 500 — pull the latest error log and explain it.”
  • “Create a staging subdomain pointing at /htdocs/staging.”
  • “Dump the schema of my wp_users table.”

…and it would carry the request out through the same VistaPanel / client area pages you’d use by hand.

How it works (high level)

  1. The extension runs as a content script on *.infinityfree.com / *.epizy.com / cpanel.infinityfree.com pages.
  2. A local MCP server (Node-based native messaging host) bridges Claude Desktop ↔ the extension over a Chrome nativeMessaging channel.
  3. Each MCP “tool” maps to a small, well-defined DOM interaction on the corresponding panel page.
  4. Write actions (file edits, DB writes, DNS changes) require an in-extension confirmation popup before they fire.

Nothing leaves your machine. The AI only sees what you explicitly let a tool return.

Why I’m posting before publishing

I want to make sure this is welcome here. A few specific questions for staff / experienced users:

  1. ToS: Section on “automated tools” is broad. Does a user-initiated, locally-running extension that drives the user’s own panel session count as prohibited automation, or is this in the same bucket as a browser autofill / accessibility tool?
  2. Rate limits: Are there documented or unwritten rate limits on VistaPanel actions I should respect (e.g., max file ops per minute)? I’d like to bake the limits into the extension rather than have it trip them.
  3. Preferred entry points: Is there any chance of an official read-only API in the future, even something minimal like account stats? If so I’d rather wait and build against that than scrape the panel HTML.

Where it lives

Happy to answer questions, hear “please don’t” if that’s the verdict, or pivot the design based on what staff prefers. Thanks for taking a look.

— SinceTwentyFive

2

If it’s just controlling a browser tab, that’s fine.

2 Likes
3

First of all, please don’t call it “InfinityFree MCP”. That suggests that this projected is official or supported, which it isn’t.

The solution is clever, but also fundamentally composed of workarounds on top of workarounds on top of workarounds. It’s a browser extension that injects foreign code into our website to hijack your browser session and autonomously read or write any data from your account or website, which it then exfiltrates through a native host bridge.

The confirmation safeguards before making writes is useful, but only as good as the extension code.

Given your apparent love for AI (offering this as MCP, this post and most of your other posts seem AI generated), and seeing how even this post makes various claims that range from dubious to objectively false, I have my doubts about the code quality.

Is this a fun project to try and figure out? Absolutely. Should people actually use this? I say no.

What section is that exactly? Because we don’t have any section like that.

If I’d write them here, they wouldn’t be unwritten anymore, would they?

But to answer your question: I don’t know the limits.

Historically, the stance has been “no” because APIs would be most useful for automated bulk operation, and there is no legitimate reason for someone to be managing accounts in bulk.

MCPs are a bit of a different use case, but I still wonder what legitimate use cases it enables. So I’m not going to say “never”, but I don’t see a reason to build this if the only reason is “AI is cool” or “everybody else does it”.

6 Likes