Browser Use
Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.
Descripción del creador (original en inglés)
Stealth browser automation for AI agents — real Chrome, N parallel persistent logged-in sessions.
Estos tres nunca se combinan en una sola puntuación: las opiniones, las mediciones y la popularidad son cosas distintas.
Todavía no escribimos un resumen sencillo para este. Abajo están los datos que leímos del registro.
Elige la app de IA que usas y copia la configuración.
Necesitas
¿Qué app usas?
Elige tu app arriba. La recordamos, así que la próxima vez el botón dirá “Instalar en …”.
Abre Claude Desktop → Settings → Developer → Edit Config y pega esto en claude_desktop_config.json
{
"mcpServers": {
"vibatchium": {
"command": "uvx",
"args": [
"vibatchium",
"mcp"
]
}
}
}Ejecuta esto en tu terminal
claude mcp add vibatchium -- uvx vibatchium mcpPégalo en .cursor/mcp.json de tu proyecto, o en ~/.cursor/mcp.json
{
"mcpServers": {
"vibatchium": {
"command": "uvx",
"args": [
"vibatchium",
"mcp"
]
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Pégalo en .vscode/mcp.json de tu proyecto
{
"servers": {
"vibatchium": {
"type": "stdio",
"command": "uvx",
"args": [
"vibatchium",
"mcp"
]
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Este se ejecuta en tu computadora, y ChatGPT solo puede conectarse a servidores en internet. Elige otra app.
Tu elección se guarda en una cookie en este dispositivo; no necesitas cuenta.
Esta configuración se genera a partir de la ficha del creador en el registro. Si el README dice otra cosa, sigue el README.
Se ejecuta en tu computadora; la lista de herramientas aparece en tu app de IA después de instalarlo.
Revisamos información que cualquiera puede ver; no hemos leído el código. Las revisiones que no aplican no se cuentan. · Revisado el 6 nov 2026
El nombre en el registro se verificó con la cuenta de GitHub trueoriginlabs, dueña del repo
Todavía no hemos leído este repo en GitHub
Todavía no hemos leído este repo en GitHub
Este se ejecuta en tu computadora; no hay endpoint en internet
Se ejecuta en tu computadora y usa ajustes locales en su lugar
Se ejecuta en tu computadora; solo podemos leer listas de herramientas de endpoints en internet
Comparado con todos los servidores activos de esta categoría en el registro. Las estrellas solo cuentan cuando quien lo publica es dueño del repo.
Superó 1 de 1 revisiones básicas aplicables. No hemos leído el código. Antes de agregar una clave o un token, revisa qué acceso pide el servidor y usa una clave que tenga solo los permisos que necesitas.
El registro no indica ninguna clave obligatoria, aunque algunos servidores te piden iniciar sesión la primera vez que los usas.
Se ejecuta en tu computadora. Tu app de IA lo inicia cuando hace falta, y los datos no pasan por los servidores del creador (a menos que el propio servidor llame a un servicio en línea).
El repo de GitHub cambió por última vez –, y la última versión (0.21.0) llegó al registro hoy.
Las apps compatibles con MCP, como Claude Desktop, Claude Code, Cursor y VS Code. También necesitas Python (uv) en tu computadora.
En la misma categoría: Browser Use, Chrome DevTools MCP, MCP Server Browser
Servidores de la misma categoría hechos por otros creadores, ordenados por estrellas.
Cómo leer una tarjeta:★ Estrellas de GitHubiTres pilares: reseñas · revisiones · usoiActualizado = fecha en que se publicó la última versión en el registroi
Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.
MCP server for Chrome DevTools
MCP server for browser use access
Copiado tal cual del repo del creador. PopNx MCP no lo ha revisado ni lo respalda. Se quitaron HTML, imágenes y scripts. Los enlaces llevan fuera de este sitio.
The browser layer for an always-on box. Many logged-in identities, running unattended, all at once — on real Chrome, with stealth on by default, and with a security model for letting an AI near the credentials.
One daemon, N persistent Chrome sessions, a vb CLI and an MCP server. Self-hosted, free, Apache-2.0.
pipx install 'vibatchium[all]'
patchright install chrome vb setup # register the MCP server + agent skill (Claude Code, Codex, Cursor) vb explore https://example.com
| You want… | Use |
|---|---|
| An agent driving your signed-in browser while you watch | Claude in Chrome, Chrome Auto Browse — first-party, free, better integrated |
| The stealthiest single browser you can buy | CloakBrowser — fingerprints patched in Chromium's C++ (paid for concurrency) |
| The leanest driver for one agent | bladebro — five tools, one Rust binary |
| Browser automation without anti-bot pressure | playwright-mcp, agent-browser — bigger, older, better tested |
| Many accounts on one box, running unattended, against sites that fight automation | vibatchium |
That last row is the whole wedge. Supervised agents hand control back to you at every login wall and CAPTCHA; a library leaves the fleet — sessions, budgets, crash recovery, credentials — for you to build. vibatchium is that fleet layer.
As of 2026-10-06, from each project's own README, source and release notes (the MCP-cost row is our own measurement¹). Rows where we lose are included on purpose.
| vibatchium | CloakBrowser | bladebro | agent-browser | playwright-mcp | |
|---|---|---|---|---|---|
| N persistent logged-in sessions at once | yes, free, one daemon | 1 free (latest build) · more on Pro | one Chrome per agent session | yes, one daemon per session | one per profile dir |
| Unattended ops: crash self-heal, leases, budgets, idle freeze, goals | all of them | — | partial (crash relaunch, idle timeout) | partial (idle timeout, restore) | idle timeout |
| Agent can *use* a secret but not *read* it (origin-bound fill, read-back refused, TOTP) | yes | — | — | vault, origin check | --secrets redaction |
| Prompt-injection scanning of page content | yes | — | — | boundary markers (opt-in), no scanning | — |
| Browserless HTTP on the session's own cookies, Chrome TLS fingerprint · keyless web search | yes | — | — | — | — |
| Browser | stock Chrome | own Chromium build | stock Chromium | Chrome for Testing default | stock Chrome |
| Stealth layer | CDP-level (Patchright) | engine-level (87 C++ patches) | CDP-level ("6-layer"), no Runtime.enable | none in core; via cloud providers | none |
| Published stealth score | not yet | 30/30 on its own detector list | 68/80 Stealth Bench V1 (self-run) | — | — |
| MCP startup cost in Claude Code¹ | ~2.7k tokens (89 tools, 5 always loaded) | n/a | ~3.4k tokens (5 tools) | not measured | not measured |
| Platforms | Linux (macOS: CI probe, unsupported) | Linux · macOS · Windows | Linux · macOS · Windows | all | all |
¹ bytes/4 of tools/list plus server instructions, measured over stdio. Clients without tool search load every tool: vb mcp --caps min is 12 tools, ~3.8k tokens. bladebro's own README says ~1.9k.
Where the others are genuinely better: CloakBrowser's engine-level patches go deeper than any CDP-level layer can — and vb start --browser-binary will drive a Chromium build you bring. bladebro has a stealth benchmark number and we don't; until we do, read our stealth claims as measured on scoreboards, below, not on production walls. Both run on more operating systems.
1. A fleet of logged-in identities on one box. Each session is its own Chrome and profile, with its own proxy, timezone and GPU node, and — opt-in with vb persona set — its own screen and window, because by default every headless session on one machine reports the same 800×600 screen. vb fleet-check measures how alike your sessions still look. They run in parallel on one daemon that keeps them alive: a crashed renderer is relaunched on the same profile, parked sessions have their renderers stopped and thawed on the next call, leases stop two agents clobbering one session, and goals give a task a step/spend/time budget that survives a daemon restart.
vb --session alice start && vb --session alice go https://x.com # log in once, stays logged in
vb --session bob start && vb --session bob go https://x.com vb --session alice act "open notifications" & vb --session bob extract & wait vb fleet-check --sessions alice,bob # how twinned are they?
2. Credentials an agent can use but never see. The vault fills a password or a live TOTP code into the page without the value reaching the model's context, a screenshot or a log — and only into the site it belongs to. Over MCP, a prompt-injected agent can't type your GitHub password into a lookalike page, can't read it back with value or eval while it sits in the field, and can't edit the vault or pull a code. An agent with a *shell* is the operator — the CLI has deliberate escape hatches — so give agents MCP, not Bash, if that boundary matters to you.
printf %s "$GH_PASSWORD" | vb secret set github.com password --stdin
printf %s "$GH_TOTP_SEED" | vb secret set github.com totp-seed --stdin vb --session work fill @e7 --use-secret github.com:password vb --session work fill @e9 --use-secret github.com:totp vb wait-email-code github.com # operator CLI: polls IMAP and prints the code; refused over MCP
3. Page text is treated as untrusted. Every session scans the page text it returns for instructions aimed at the agent and flags them by default; wrap fences them off and redact removes them. Caller-supplied file paths are confined too, so an injected agent can't upload ~/.ssh or write into .git/hooks.
4. A browserless lane on the same identity. vb fetch reuses a session's cookies and proxy with Chrome's TLS fingerprint and client hints — JSON endpoints behind your login at curl speed, and it tells you when it can't match the browser. vb search finds URLs with no API key and no per-session budget.
vb --session work fetch https://api.example.com/v1/me
vb search "site reliability postmortem" -n 20 --urls
Status: alpha, active development. 2,331 tests green in CI (Linux, Python 3.11–3.14). Coding agents: read AGENTS.md first — the one-call recipes and the traps worth skipping.
Detector scores quoted below (bot.sannysoft, CreepJS, Cloudflare cold-launch) are manual observations, not CI-asserted — no test in the suite gates on them, and they are only as current as the last hand-run. The generated block under Measured scores is the one to trust.
pipx install vibatchium # core: browse / extract / screenshot / N parallel sessions
pipx install 'vibatchium[all]' # + fetch/search lanes, credential vault, VLM read, REST shim
patchright install chrome vb setup # register MCP + an auto-discoverable skill (idempotent) vb install # report which optional lanes are available
On a uv venv (no pip), add an extra with uv pip install --python /bin/python curl_cffi. Bleeding edge from master: pipx install 'git+https://github.com/trueoriginlabs/vibatchium#egg=vibatchium[all]'.
vb setup wires up the agents on *this* machine. To pull just the agent skill into any agent skills.sh supports (Claude Code, Codex, Cursor, Gemini CLI, Copilot, …), or to install skill + MCP server as one Claude Code plugin:
npx skills add trueoriginlabs/vibatchium # skill only, any agent
/plugin marketplace add trueoriginlabs/vibatchium # Claude Code: skill + vb mcp /plugin install vibatchium@vibatchium
Both still need the vb CLI on PATH (pipx install 'vibatchium[all]') — the skill drives it and the plugin's MCP server *is* vb mcp. On Claude Code, pick the plugin or vb setup, not both, or you register the server twice. The skill file is generated from vibatchium/setup_cmd.py; edit there and run python scripts/sync_skill.py.
vb explore https://example.com # one call: text-first, auto-closes
vb research --target https://example.com \ # parallel fan-out, N intents --intent "pricing model" --intent "customers" --intent "tech stack"
A wave of "headless browser for AI agents" tools rebuild the browser from scratch (Rust + V8, no Blink/Skia) to hit tiny memory and sub-100ms page loads. The catch is structural: with no rendering engine, they can't produce a real device's fingerprint — they synthesize one. And synthetic fingerprints don't hold still.
vibatchium drives *real* Google Chrome, so its fingerprints are real — and, more to the point, stable. The single test that separates the two is fingerprint stability across navigations. Run the same canvas + WebGL probe on two pages in one session:
| vibatchium (real Chrome) | synthesized-fingerprint engines | |
|---|---|---|
| canvas hash, page A → page B | identical | reseeded per navigation |
WebGL readPixels | real, deterministic pixels | often Math.random() |
| WebGL renderer | a real ANGLE renderer¹ | stub / zeros |
¹ Chrome's own software renderer (SwiftShader) by default — still a coherent, deterministic Chrome value, not a stub. A hardware-GPU string (e.g. ANGLE (Intel …)) needs the opt-in --gpu flag.
A real device returns the same fingerprint every page load; a fingerprint keyed off Date.now() does not — and *that inconsistency* is exactly what lie-detection fingerprinters (CreepJS and friends) flag. Measured: vibatchium's canvas hash and WebGL readback are byte-identical across navigations, and CreepJS reported 0 % stealth-tampering (no synthetic-environment signatures) when last run by hand. That figure is not regression-tested — treat it as an observation, not a guarantee.
This is not a claim of invisibility. The moat is fingerprint *authenticity*, not hiding that a browser is automated — vibatchium still reads as headless on the headless-specific tells (see Honest limits), and real-GPU WebGL (--gpu) is opt-in. But real, consistent fingerprints pass the consistency tier that synthetic ones fail *by construction* — and that tier is what stands between you and a login wall.
vb session new work
vb --session work start vb --session work go https://github.com # log in by hand once vb session new banking vb --session banking start vb --session banking go https://bank.example.com vb --session work click @e3 & # truly parallel — vb --session banking fill @e5 hi & # separate Chromes, no cookie bleed wait vb session list
Active-session resolution: --session FLAG → $VIBATCHIUM_SESSION env → ~/.config/vibatchium/active-session → default. Cap via VIBATCHIUM_MAX_SESSIONS=8 (default 8).
On one s
Solo se muestra el principio; lee el resto en el repo