# Bridgerator

> Bridgerator connects ChatGPT (and Claude, Codex, Cursor, VS Code and other MCP apps) to your own Windows 10/11 PC. Added to ChatGPT as a custom plugin (an MCP server), it lets ChatGPT read, search, create and edit local files, organize folders and run PowerShell/cmd commands on your computer — in any folder by default (only Bridgerator's own folders are always closed), or only in the folders you list. The bridge on the PC makes an outbound connection only; no inbound ports, no admin rights.

## Key facts

- What it does: ChatGPT gets tools on your PC — files (read, write, edit, move, rename, list), search by name and content, terminal (PowerShell, cmd, long-running processes), processes (list, stop), file previews in the chat. Also: instant search (Everything if installed → the Windows Search index → a plain scan; excluded folders never show up in results); new Word / Excel / PDF reports without Office installed (an existing file is never overwritten — the new one gets " (2)"); photos (date and camera taken, smaller copies, renaming by the date taken; originals are not changed; GPS location only when asked); programs through winget — search, install, update (license agreements accepted only with your OK; off while the terminal is off); a one-command PC check (disks and their health, recent event-log errors, startup programs, drivers with problems, Windows updates, load and memory; read only); screenshots of the screen or a window and text recognition with the OCR built into Windows (a notification on the PC for every screenshot, can be turned off; screenshots can be switched off; a locked screen can't be captured); `bridgerator doctor` (CLI, and a tool ChatGPT can run) checks the install and the link and says in plain words what to do — every check is ok / warning / failed / not checked.
- Platform: Windows 10 and Windows 11. Works with ChatGPT custom MCP plugins (chatgpt.com/plugins → Add → Add custom MCP server; availability depends on the ChatGPT plan) and with other MCP clients (see below).
- Setup: (1) add Bridgerator in ChatGPT — https://chatgpt.com/plugins → Add → Add custom MCP server; name Bridgerator; URL https://mcp.bridgerator.recondeck.com/mcp; sign-in OAuth (OAuth 2.1 with PKCE); (2) sign in with Google on the Bridgerator sign-in page — the account is created automatically (e-mail + password sign-up at https://bridgerator.com/signup also works); (3) on the PC run one PowerShell line, shown under "Add a computer" on https://bridgerator.com/app: `& ([scriptblock]::Create((irm https://bridgerator.com/install.ps1)))`; (4) a browser tab opens with a code — confirm the computer. No key to copy, no admin rights; the installer downloads the signed Bridgerator app for Windows (bridgerator.exe and its files, x64 or ARM64 — no Node.js or npm needed) from https://bridgerator.com over https, checks the SHA256 of the download and of every file, and starts the bridge at Windows sign-in; an older npm install is replaced with its key and settings kept; developers can add -UseNpm to install the npm package instead. Headless servers can use a device key instead (account page → Add a computer → Advanced).
- Other AI apps (same server URL https://mcp.bridgerator.recondeck.com/mcp, sign in with the Bridgerator account; tool calls count the same for every app): Claude web/Desktop — Customize → Connectors → Add custom connector (Free plan: one custom connector); Claude Code — `claude mcp add --transport http --scope user bridgerator https://mcp.bridgerator.recondeck.com/mcp`, then /mcp → bridgerator → Authenticate; Codex (CLI, IDE extension and app share ~/.codex/config.toml) — `codex mcp add bridgerator --url https://mcp.bridgerator.recondeck.com/mcp`, then `codex mcp login bridgerator`; Cursor — ~/.cursor/mcp.json `{"mcpServers":{"bridgerator":{"url":"https://mcp.bridgerator.recondeck.com/mcp"}}}`, then sign in when Cursor asks; VS Code (Copilot agent mode) — Command Palette → MCP: Add Server → HTTP → URL → name bridgerator; also Google Antigravity, Gemini CLI, Zed, JetBrains Junie and AI Assistant, LM Studio, Microsoft Copilot Studio, Perplexity (https://bridgerator.com/ai-apps). Apps without OAuth sign-in can use a personal access key (`brg_…`, Account → Settings on https://bridgerator.com/app/settings; no expiry, revoke or regenerate there) sent as the header `Authorization: Bearer brg_…`; the key gives full access to your PCs, like signing in — keep it like a password.
- Pricing: Free — 10,000 tool calls per month per account, any number of PCs. Pro — $10 per month, unlimited calls, paid by card (monthly subscription, cancel any time), or with a Russian card: 30 days of Pro paid in rubles via YooKassa (no auto-renewal).
- Security: outbound-only connection from the PC; folders: the defaults restrict nothing, like similar tools — with no folder list (the default on a fresh install) ChatGPT may work in every folder; only Bridgerator itself is always closed (%APPDATA%\Bridgerator, %LOCALAPPDATA%\Bridgerator and the program files — this can't be switched off, otherwise the AI could quietly switch off any protection); with a list (allowedDirectories) only in those folders; changes by the AI apply at once, no question on the PC (only if the person turned on "Ask before the AI changes settings", off by default, do changes that widen access wait for Apply there); minus deniedDirectories (Bridgerator's own folders always; the switch "Protect sensitive folders" — config protectSensitive, off by default — adds the Startup folder, PowerShell profiles, .ssh .aws .azure .kube .docker .gnupg .config .claude, the files .npmrc .git-credentials .gitconfig and the whole AppData; the OneDrive root is open by default); network/UNC paths refused; ChatGPT changes settings only through the bridgerator_settings tool (changes apply at once; with askSettings on, lowering protection needs Apply on the PC); blockedCommands is a safety net (first-word filter), not a security boundary; with the terminal on, a command runs with the user's rights; terminal can be turned off with disabledTools; reading URLs is off (PDF reports are built locally); ChatGPT asks before actions that change things (unless allowed for the whole chat); deletes ChatGPT runs with a simple command (del, rd, Remove-Item, rm) go to the Recycle Bin (on by default; scripts, pipelines and other programs that delete are not caught; where there is no Recycle Bin the PC asks before deleting for good); before ChatGPT changes, moves or deletes a file a copy is kept on the PC (on by default, 7 days, up to 500 MB, files over 50 MB get no copy) and "Undo AI changes" (window or bridgerator_undo) puts files back, never over a file someone changed afterwards; optional pause on mass deletes or moves (off by default; more than 20 in a minute → Bridgerator pauses and asks on the PC); access presets Read only / Files / Full (Full by default; Read only and Files turn the terminal off); the PC is kept awake while ChatGPT works or the queue has work (on by default, mains power only, can be turned off); plan card: with confirmations on, a big job (e.g. moving 214 files) with steps that would ask is shown as one plan and asks once on the PC — Allow all / Review… (tick items in the window) / Deny; the approval covers only the listed actions for 30 minutes; every safety switch is in the Bridgerator window (Safety) and can be set by asking ChatGPT; optional confirmations on the PC (off by default, `bridgerator.cmd confirm on|off`): a native Windows notification in the bottom-right with Allow / Allow 10 min / Deny ("Allow always" in its "..." menu), closing it or no answer in 2 minutes = Deny (also when Do Not Disturb/Focus hides it — nothing runs), a small window if Bridgerator notifications are off in Windows; when on it asks only for risky actions by category: delete and dangerous_commands on, write_files, move and any_command off; settings in %APPDATA%\Bridgerator\confirm.ini, which the assistant cannot edit; pattern matching, so a disguised command can slip through — a safety net against mistakes, not a boundary and not protection against code already running on the PC (such a program could click the buttons of a Windows notification; the small fallback window accepts only real mouse and keyboard input and its buttons work only after a short moment); confirm.ini can't lower protection by itself — if it changes to turn something off, or is deleted or broken, Bridgerator keeps the last settings and asks on the PC "Bridgerator settings file changed: turn off …? Apply / Keep" (the same for `bridgerator.cmd confirm off`), turning protection up applies at once, every turn-off shows a notification; the assistant can only ask to turn it off via request_confirm_off and the person approves; terminal commands that mention Bridgerator itself or its folders (even via %APPDATA% or $env:APPDATA) are refused as a courtesy, the terminal starts in the first allowed folder and sees no Bridgerator variables, and there is no disk log of tool calls (only the optional local history); the installer refuses to run in an Administrator window and always checks the SHA256 of the download and of every file, only over https; bridgerator.exe and Bridgerator's PowerShell scripts (install.ps1 included) are signed with the code-signing certificate of SoftInnovaticsPlus LLC, with a timestamp (file → Properties → Digital Signatures); guided setup: say "Set up Bridgerator" in ChatGPT, it shows the current setup and what can be changed — no questionnaire, the defaults stay and ChatGPT limits access only when the person explicitly asks; its changes apply at once, no question on the PC (Bridgerator's own folders, blockedCommands and telemetry can't be changed this way); `bridgerator.cmd status` first line: Bridgerator is running — online as <PC> / Bridgerator is not running / Bridgerator: key rejected — run the install command again, then the settings and log paths (--json prints the settings, key masked; `bridgerator.cmd doctor` checks everything); uninstall also removes the computer's key on the server; install usually takes a few minutes; ChatGPT can manage the same settings as the window ("Show my Bridgerator settings", or ask to change them): changes apply at once; only if the person turned on "Ask before the AI changes settings" (window Settings → This PC, off by default) do changes that lower protection wait for Apply on the PC; blocked commands and Bridgerator's own folders can't be changed this way; task queue: up to 100 tasks added at once, shared by several chats, a task "in progress" for 30 minutes without an update is picked up by the next chat ("Continue my Bridgerator queue"), clearing every task needs the person's OK, the window has "Clear…" (done / failed and skipped / all) with Undo; phrases to say in ChatGPT: "Set up Bridgerator", "Add these tasks to my Bridgerator queue: …", "Work through my Bridgerator queue", "Continue my Bridgerator queue", "Show my Bridgerator settings", "Turn on confirmations for deletions"; a tray icon shows online (green) / offline (grey) / paused (yellow), menu Open Bridgerator…, Open account, Pause / Resume (ChatGPT can't use the PC while paused), Quit (starts again at next sign-in); a task queue in the Bridgerator window: say "work through my Bridgerator queue" in ChatGPT and it does the items one by one, marking them done or failed with a note, and can add steps when planning (ChatGPT reads the queue only when asked); stored only on the PC, never sent: the task queue (%APPDATA%\Bridgerator\queue.json) and the recent actions list with commands/paths (in memory, written to recent.jsonl only if "Keep a local history" is on, kept 7 days), both in the always-excluded settings folder; the installer adds the Microsoft WebView2 runtime if missing (signature-checked, per user, no admin), and without it the window opens the account page; readOnlyDirectories (`bridgerator.cmd read-only add|remove <folder>`, setup --read-only) block writing, editing, moving and creating folders there, the terminal is not limited by it; the bridge refuses, as a courtesy, terminal commands that run bridgerator.cmd setup/confirm/read-only/telemetry/uninstall/stop — not a boundary; runs as the Windows user, never as SYSTEM. Traffic is encrypted with TLS in transit (not end-to-end encrypted: the server decrypts calls to route them). The server stores no file contents, paths or command output — only the account, the device list, a monthly call counter and an activity log (tool names and times only, kept 30 days, can be turned off in the account). The terminal is not a folder sandbox. Telemetry: the bridge sends to https://bridgerator.com/t over HTTPS (TLS) install/update/uninstall events and a daily heartbeat with only a random install id, bridge/Windows/Node.js versions, OS language and per-tool call/error counts for 24 h — never paths, file names, commands, arguments, outputs, e-mail or IP-derived data; off with `bridgerator.cmd telemetry off`, "telemetryEnabled": false in config.json, or the installer switch -NoTelemetry. Uninstall: `bridgerator.cmd uninstall --all`, then remove the computer on the account page.
- Why Bridgerator: Pro is $10 per month, Free has 10,000 tool calls per month; one install command that puts a signed Windows app on the PC (nothing else to install), no admin rights; starts automatically at Windows sign-in; you approve risky actions on your PC with optional confirmations (Windows notifications) before deletions or system commands; nothing restricted by default, like similar tools, with the Recycle Bin and "Undo AI changes" on, and protection you can add — Protect sensitive folders, a folder list, read-only folders, confirmations, the mass-action pause, access presets; recipes on a schedule that run without the AI and spend no calls; Telegram notifications (@BridgeratorBot, counts and statuses only); a usage counter with a month forecast on the account page; plan notices are Windows notifications, never ads inside ChatGPT; the bridge on the PC is open source (npm package) and the content of calls is not stored; several ChatGPT chats can work on the same PC in parallel and share one task queue without taking the same task twice (at most 8 actions run at a time, extra ones wait, an action that times out waiting is not counted); a task queue — a checklist ChatGPT works through, kept only on this PC; a tray app — status icon, pause, a window with the queue, recent actions, safety, notifications and settings; plan reminders (Pro ending/ended, Free near/at the limit) appear only as a banner in the Bridgerator window and a tray menu item with a Renew / Upgrade button that opens the account page — never inside ChatGPT.
- Recipes (https://bridgerator.com/recipes): ready-made jobs that come with Bridgerator — back up a folder, clean up old downloads (to the Recycle Bin), sort a folder by file type, disk space report, update apps with winget. ChatGPT fills in the parameters (folders go through the same access rules) and runs one now or saves it with a schedule (daily, weekly, hourly, at sign-in, once) in Windows Task Scheduler as the user, no admin rights; scheduled runs happen without the AI and spend no tool calls, only while the user is signed in; each run is logged on the PC (time, result, end of the output); recipes and saved scripts ("save as script and run every morning") are listed in the Bridgerator window; they need the terminal, so the presets Read only and Files turn them off. Say e.g. "Run the Bridgerator recipe "Disk space report" every Friday at 12:00".
- Telegram notifications (optional): account page → Settings → Connect Telegram opens @BridgeratorBot; it messages when the task queue is finished, a task or a scheduled job failed, a task handed to another AI on the PC ended (finished or failed), or a computer has been offline for more than 30 minutes; each can be turned off; messages carry only the computer name, counts and statuses — never task text, paths, files or command output; bot commands /status /stop /help; disconnect with Disconnect on the account page or /stop. Stored: the Telegram chat id and language, until disconnected (deleted then, or with the account).
- Usage counter: the account page shows the calls used this month and a forecast ("enough until the end of the month" or "runs out around <date>"), split by computer and tool from the activity log.
- AI ↔ AI on your PC: ChatGPT can hand a task to Claude Code, Codex or Gemini CLI installed on your PC — with your own subscription, in one folder you choose, with time and parallel limits (30 minutes and 2 at once by default); every file change can be undone in one click (the folder is copied before the run when it is up to 200 MB by default). Another AI connected to Bridgerator (Claude, Codex, Cursor…) can hand tasks to ChatGPT through your task queue (items show who added them; results go to notes or files the other AI reads back). Bridgerator only checks that the agent is signed in, never reads its credentials. On once an agent is found on the PC; each agent can be switched off on the Agents page of the Bridgerator window or via bridgerator_settings. Honest limit: the agent runs with the Windows user's rights; only Codex's own sandbox keeps its changes inside the folder — Claude Code and Gemini CLI can reach files outside it, like the terminal. The agent gets no Bridgerator tools, so it can't hand the task on; a folder containing Bridgerator's own folders can't be chosen. A long run goes on in the background; ChatGPT fetches the result later and Telegram can say when it ended.
- Open source: the bridge that runs on your PC (npm package https://www.npmjs.com/package/bridgerator); the Windows app is built from the same package and signed by SoftInnovaticsPlus LLC.
- Contact: info@recondeck.com, https://bridgerator.com/support#contact
- Languages: English (https://bridgerator.com/) and Russian (https://bridgerator.com/ru/).

## Install and verify

One install channel, signed by SoftInnovaticsPlus LLC. Facts computed from the published files when the site is built; machine-readable: https://bridgerator.com/.well-known/install.json; how to check: https://bridgerator.com/security#verify.

- Current version: version 1.1.19. Command (PowerShell, no admin rights): `& ([scriptblock]::Create((irm https://bridgerator.recondeck.com/install.ps1)))`. Script https://bridgerator.recondeck.com/install.ps1 SHA-256 412eb8293024479140569b45915976e1f45b2392dc8db9753b6b39e664a41354. Package https://bridgerator.recondeck.com/bridgerator.tgz SHA-256 7dd37155fa46875aa3a68950775443c4228bf5384cf984efac5e39df7b9e93cb, sha512 integrity sha512-3oM2dy5r50V7ClG1+PvIXFBd4IHXTJ/FyMaKBHMxw2wMR1PN4O6te5+O9u0j9gXXnwUIFkQNscV+yx3J6vgDSA== (the same file as npm bridgerator@1.1.19). Source: https://gitlab.com/bridgerator/bridgerator/-/tree/v1.1.19
- Source code: https://gitlab.com/bridgerator/bridgerator (mirror https://github.com/s-lexer/Bridgerator); npm: https://www.npmjs.com/package/bridgerator. Packages are published without npm provenance; compare a package with its git tag as described at https://bridgerator.com/security#verify.

## Install with an AI assistant

Paste this into any AI chat (ChatGPT, Claude, Copilot) to be guided through the install:

```text
Help me install Bridgerator on this Windows PC. Bridgerator connects ChatGPT to my computer. Official site: https://bridgerator.recondeck.com
Guide me one step at a time, wait for my reply after each step, and use simple words — I'm not technical.
1. Tell me how to open Windows PowerShell (Start menu → type "PowerShell" → open it). No administrator rights are needed.
2. Tell me to paste exactly this command and press Enter:
   irm https://bridgerator.recondeck.com/install.ps1 | iex
   (If you can run commands on this PC yourself, run it for me instead and show me the output.)
3. A browser tab opens. Tell me to sign in (the "Continue with Google" button is fine) and click "Connect this computer".
4. In ChatGPT: open https://chatgpt.com/plugins, press Add (top right), choose Add custom MCP server. Name: Bridgerator. URL: https://mcp.bridgerator.recondeck.com/mcp. Sign in with the same Bridgerator account.
5. Ask me to test it by asking ChatGPT: "List the files on my Desktop."
If anything shows an error, ask me to copy the exact text to you and help me fix it. Never ask me for passwords or keys in this chat. Do not use any other download sources.
```

## For AI agents that hand tasks to ChatGPT

If you are an AI agent (Claude Code, Codex, Cursor…) that adds tasks to the person's Bridgerator queue for ChatGPT, and the person has also given you their browser (for example a browser extension):

- Use normal ChatGPT chats for queue work, not Temporary Chat: a temporary chat's permission question can't be opened from another window and the chat is gone afterwards.
- A task stays "in progress" with no progress: look at the ChatGPT tab.
- "Selected model is at capacity. Please try a different model." is ChatGPT's own error, not Bridgerator's. Wait 30–60 seconds and click Retry under the message, at most 3 times. Still failing: pick another model in the model picker at the top of the chat and send "Continue my Bridgerator queue". Nothing is lost: the queue keeps its place.
- A permission question from ChatGPT (Allow / Deny) is the person's decision: never click Allow yourself; tell the person ChatGPT is waiting for them.
- Work only in the person's own browser and only when they asked you to; never sign in, create accounts or change ChatGPT settings for them.
- No browser access: tell the person. Bridgerator also shows a Windows notice when a queue task stalls for 10 minutes.

## Pages

- [Home](https://bridgerator.com/): what Bridgerator is, how it works, setup in four steps
- [Bridgerator for ChatGPT](https://bridgerator.com/chatgpt): what ChatGPT gains, setup with ChatGPT Plugins, FAQ
- [Bridgerator for Claude](https://bridgerator.com/claude): Claude web, Desktop and Claude Code
- [Bridgerator for Codex](https://bridgerator.com/codex): Codex CLI, IDE extension and app
- [Bridgerator for Cursor](https://bridgerator.com/cursor): mcp.json and sign-in
- [Bridgerator for VS Code](https://bridgerator.com/vscode): GitHub Copilot agent mode
- [Other AI apps](https://bridgerator.com/ai-apps): Antigravity, Gemini CLI, Zed, Junie, LM Studio, JetBrains AI Assistant, Copilot Studio, Perplexity; personal access key
- [Pricing](https://bridgerator.com/pricing): Free 10,000 calls/month, Pro $10/month
- [Security](https://bridgerator.com/security): connection, folder rules, terminal caveats, data; what is installed, where it writes, outbound hosts, how to verify a package (#verify)
- [Changelog](https://bridgerator.com/changelog): what changed in each version
- [Example prompts](https://bridgerator.com/prompts): 30 ready-made requests
- [Recipes](https://bridgerator.com/recipes): ready-made jobs ChatGPT runs now or puts on a schedule (Task Scheduler, no AI and no calls when scheduled)
- [Support](https://bridgerator.com/support): common problems and contact form
- [About](https://bridgerator.com/company): built and run by Siarhei Yatsuta, an independent developer
- [Privacy](https://bridgerator.com/privacy), [Terms](https://bridgerator.com/terms)

## Guides

- [How to connect ChatGPT to your Windows PC](https://bridgerator.com/guides/connect-chatgpt-to-windows-pc)
- [Connect Claude Desktop to files on your Windows PC](https://bridgerator.com/guides/connect-claude-to-windows-pc)
- [Let ChatGPT read and organize files on your computer](https://bridgerator.com/guides/chatgpt-organize-files)
- [Clean up your Downloads folder with ChatGPT, safely](https://bridgerator.com/guides/clean-downloads-folder-chatgpt)
- [Run PowerShell commands from ChatGPT safely](https://bridgerator.com/guides/run-powershell-from-chatgpt)
- [Why is your C: drive full? Find big files and free disk space with AI](https://bridgerator.com/guides/find-big-files-free-disk-space-chatgpt)
- [What is an MCP server, and how ChatGPT connectors work](https://bridgerator.com/guides/what-is-mcp-server)
- [A remote MCP server for your Windows PC](https://bridgerator.com/guides/windows-mcp-server): local vs remote MCP servers; Claude, Codex, Cursor, VS Code and ChatGPT on Windows
- [Bridgerator vs. uploading files vs. remote desktop](https://bridgerator.com/guides/compare-upload-remote-desktop)
- [Troubleshooting: PC offline, sign-in, limits](https://bridgerator.com/guides/troubleshooting)

## Optional

- [Full text for LLMs](https://bridgerator.com/llms-full.txt)
- [Russian site](https://bridgerator.com/ru/)