v1.5 — New Interface

Testing Phase

v1.5 is currently still in a testing phase (Beta); the following features may change before the official release. Feedback from trying it out is welcome — you can also join the discussion about the new UI/UX in the GitHub Discussions.

v1.5 is a full rebuild of the ScriptCat interface: cleaner, more consistent, and easier to use — with dedicated optimizations for mobile so that both desktop and mobile users get a better experience.

A Brand-New Interface #1514

The entire interface has been fully rebuilt, with a more consistent visual style, clearer hierarchy, and full light/dark theme support. The script list offers both table and card views, together with advanced filtering by status, type, tag, and source — so managing a lot of scripts stays comfortable.

Mobile Optimizations

The layout is now purpose-built for mobile browsers that support extensions (such as Edge for Android and Kiwi): the script list is shown as cards, a bottom navigation bar is provided, a left-side drawer gives quick access to Subscriptions, Logs, Tools, and Settings, and the extension popup adapts to narrow screens.

💥 Network Rules (DNR) #1598

Under Tools → Network rules you can manage, per domain, how the browser handles matching requests: strip CSP / X-Frame-Options and other response headers, rewrite request and response headers, block requests, or redirect them elsewhere. Priority follows the list order, so rules can be reordered by dragging, enabled, disabled, or deleted in bulk, and the footer shows live dynamic-rule quota usage.

If a userscript is blocked by a site's CSP or Trusted Types restrictions, see CSP / Trusted Types troubleshooting for guidance on creating a site-specific "Remove CSP" rule and understanding its security impact.

The edit drawer offers both common scenario templates and a custom entry point. Request headers that would leak or forge the caller's identity — Cookie, Authorization, Host and Origin — can never be modified, and the "All websites" scope is treated as high risk and asks for confirmation before saving. Once a rule is filled in, "Try a URL" shows how a given address would be handled.

💥 External Access (MCP bridge) #1573

A local sctl daemon lets CLI and MCP clients uniformly access ScriptCat: listing/reading script metadata, installing, enabling/disabling, deleting, and editing are all gated by tiered authorization and a human confirmation page, with three levels — Deny / Allow / Allow this session — and every operation is recorded in an audit log.

💥 Script Recycle Bin #1585

Deleted scripts are no longer destroyed immediately — they go to the recycle bin first, supporting restore (preserving the original script data and permissions), permanent delete, and retention-based auto-cleanup. The retention period defaults to 30 days and is adjustable in settings, or can be set to never.

💥 Official Firefox MV3 Support #1561

With improved sandbox / offscreen communication, ScriptCat MV3 now officially supports the Firefox browser.

Choose Script Type from the Editor #1544

The editor tab bar's "＋" now lets you pick the type of script to create (normal / background / scheduled) directly, without returning to the list page.

Manual Download for Local Backups #1543

Local backups now offer a manual download link to export the backup file directly to your device.

structured_clone Messaging on Chromium 148+ #1534

On Chromium 148+, internal extension messages use structured_clone serialization, supporting a wider range of data types.

Other Improvements

• GM API: native GM_download now honors @connect, consistent with GM_xmlhttpRequest #1506
• Performance: improved script-loading cache and fixed leftover popup menus #1511
• Editor: adjusted the eslint-plugin-userscripts rules #1510
• Pre-release (beta) updates now open the changelog page automatically
• Fix: avoid scheduled-task issues caused by cron auto-detecting an invalid time zone #1531
• Fix: replace an unavailable demo API in the crontab example #1542
• i18n: added Korean, Turkish, and Brazilian Portuguese