What is perplexity-web-wrapper CLAUDE.md?

Project instructions for a Python package and server that use an existing Perplexity web subscription through browser session cookies. Perplexity is an AI search service that can return web-based answers.

They are for developing or publishing the Python package, using its search and conversation functions, and running the local REST API.

They explain how the package, client, server, and local-only API fit together, so changes are made in the right place.

How balakumardev/perplexity-web-wrapper configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to balakumardev/perplexity-web-wrapper. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/balakumardev/perplexity-web-wrapper/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/balakumardev/perplexity-web-wrapper

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/balakumardev/perplexity-web-wrapper/claude-md/github.svg)](https://agentmods.dev/instructions/balakumardev/perplexity-web-wrapper/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/balakumardev/perplexity-web-wrapper/claude-md"><img src="https://agentmods.dev/badge/instructions/balakumardev/perplexity-web-wrapper/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/balakumardev/perplexity-web-wrapper/claude-md"><img src="https://agentmods.dev/badge/instructions/balakumardev/perplexity-web-wrapper/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 935 This file is loaded in full into every session.

When invoked 935 The same file — it is already loaded in full.

Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00935	$0.00935
Opus 5.5	$0.00374	$0.00374
Sonnet 5.5	$0.00187	$0.00187
Haiku 4.5	$0.00093	$0.00093

Measured 2mo ago against content hash a51081a346c3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

perplexity-web-wrapper CLAUDE.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf dist && uv build

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

**Core** (published): `curl-cffi`, `mcp`

CLAUDE.md · 81 lines

How it starts

The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Perplexity Subscription MCP

Project Overview

PyPI package: perplexity-subscription-mcp (https://pypi.org/project/perplexity-subscription-mcp/) Import name: perplexity_subscription_mcp Console script: perplexity-mcp

Unofficial MCP server + Python client wrapping Perplexity AI's web interface using browser session cookies. No API key needed — uses the user's existing Perplexity subscription.

Project Structure

perplexity_subscription_mcp/   # Published package (PyPI)
├── __init__.py                # Exports: Client, normalize_cookies, __version__
├── __main__.py                # python -m support
├── client.py                  # Core Client class (curl_cffi, browser impersonation)
└── server.py                  # FastMCP server (search, follow_up, list_threads, get_thread)
api/                           # REST API (NOT published, local dev only)
├── main.py                    # FastAPI app — imports from perplexity_subscription_mcp
└── utils.py                   # Response extraction + logging helpers

Key Architecture

client.py: Client class uses curl_cffi with Chrome TLS fingerprint impersonation to call Perplexity's internal SSE API (/rest/sse/perplexity_ask). Authenticates via browser cookies.
server.py: FastMCP server exposes 4 tools over stdio transport. Lazy-loads the Client. Has its own extract_response() to parse Perplexity's block-based response format.
Cookie resolution (in get_client()): PERPLEXITY_COOKIES_PATH env → PERPLEXITY_COOKIES env (inline JSON) → ~/.config/perplexity/cookies.json → ./perplexity_cookies.json
Two cookie formats accepted: flat dict {"name": "value"} or Cookie-Editor array [{"name": "...", "value": "..."}]

Build & Publish

Build system: hatchling
Package manager: uv
Python: >=3.10

CI/CD (automatic)

Every push to main/master triggers .github/workflows/publish.yml:

Auto-bumps patch version (0.1.1 → 0.1.2)
Updates version in pyproject.toml and __init__.py
Commits v0.1.2 [skip ci] and creates git tag
Builds and publishes to PyPI

Read the full file on GitHub · 81 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 81 lines · 935 tokens per session scan C a51081a346c3

Subscribe to this mod's changes

perplexity-web-wrapper CLAUDE.md is an instructions file published in the GitHub repository balakumardev/perplexity-web-wrapper (23 stars, last pushed 7mo ago), licensed MIT. It adds 935 tokens to every session, about $0.0037 per session on Opus 5.5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Browser automation Research

perplexity-web-wrapper CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
perplexity-web-wrapper CLAUDE.mdbalakumardev/perplexity-web-wrapper	Instructions file	23	7mo ago	MIT	C	935	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

perplexity-web-wrapper: Instructions file for Claude Code