Agentic Browser

agentic-browser

Give any AI agent a real browser and watch everything it does.

Built and maintained by [Davarion](https://www.davarion.com).

No API key. No extra bill. agentic-browser is a tool, not a model: it runs on your computer and uses whatever brain your agent already has. That can be your Claude Pro/Max plan in Claude Code, your ChatGPT plan in Codex, Cursor, or a local model. Nothing to sign up for and no per-token charges from us.

Humans browse the web with browsers. Agents usually need APIs. agentic-browser lets any agent use your installed Google Chrome the way a person does. It perceives pages as compact text with pixel coordinates instead of screenshots, and a visible cursor shows every move and click.

Español · Use cases · Chat watcher · Architecture · Security · Disclaimer

▶ Watch the 15-second demo · ▶ Watch the full video (1 min)

Real runs recorded by the agent itself: compare prices · research the web · fill a form and stop before submitting.

Why

Quick start

One line (Claude Code):

claude mcp add agentic-browser -- npx -y agentic-browser-mcp

Any other MCP client: use "command": "npx", "args": ["-y", "agentic-browser-mcp"]. Requirements: Node ≥ 18 and Chrome (or Edge).

From source

Requirements: Node ≥ 18 and Google Chrome.

git clone https://github.com/davarion-tech/agentic-browser.git

cd agentic-browser && npm install

npm run doctor

npm test

Use it from an MCP client

Claude Code:

claude mcp add agentic-browser -- node /absolute/path/to/agentic-browser/src/mcp.js

Claude Desktop, Cursor, Codex, Hermes, OpenClaw or any MCP client: see examples/mcp-config.json.

Claude Code slash command (optional): copy skills/agentic-browser into ~/.claude/skills/. Then /agentic-browser always uses this browser instead of any other built-in browser tool.

Then ask your agent something like:

Use only the browser_* tools from agentic-browser. Open es.wikipedia.org, search for "Chrome DevTools Protocol", open the first result and summarize the first paragraph. Don't take screenshots.

Use it from anything else (HTTP)

npm run http

curl -s -X POST http://127.0.0.1:8787/tools/browser_navigate -d "{\"url\":\"example.com\",\"snapshot\":true}"

GET /tools returns the JSON Schema of every tool, ready to pass as function definitions to any LLM API. A dependency-free Python client is in examples/python_client.py.

Optional: chat watcher

Off by default. Installing agentic-browser only lets your agent use the browser when you ask it to. The watcher is a separate process that you turn on.

The watcher keeps the agent's own messaging tabs open (WhatsApp Web, Telegram, Messenger…). Waiting costs zero tokens; when a message arrives, it wakes Claude to read it and propose a reply. A code-enforced policy controls what happens next:

• observe: only notifies you.
• draft (default): writes the reply but never sends it.
• auto: sends, but only to an allowlist. Sensitive keywords, an hourly limit and a domain lock apply in every mode.

npm run setup

npm run watcher

It runs on your Claude subscription (claude setup-token) or an API key. Read docs/WATCHER.md and the Disclaimer first: many platforms forbid unofficial bots.

What the agent sees

# Test bench

url: http://localhost:3000/ viewport 1280x800 scroll=0,0 docH=2090 [3] textbox "Search" ph="type something" @191,124 [4] button "Search" @339,124 [5] select "color" value="Red" opts=[*Red|Green|Blue] @429,124 [6] checkbox "I agree" {checked} @492,124 [10] button "Button in shadow DOM" @652,316 [f1:1] button "Button inside iframe" @214,217

New in 1.4: save anything from a page

• `browser_article`: the main content of any page as clean Markdown (title, author, date, headings, lists, tables, links, images), without menus, ads or footers. The cheapest way for your agent to read or summarize an article. file saves it as .md.
• `browser_pdf`: save the page as PDF (A4/Letter/Legal, backgrounds, lazy images loaded first) or MHTML (one file, exact copy). It uses the agent's session, so it works behind logins.
• `browser_media`: every image, video, audio file and document on the page (HTML, CSS backgrounds and what the network loaded), downloaded into images/, videos/, audio/, docs/ with a manifest.json (source URL, alt text, size, hash). Duplicates and tracking pixels are skipped.
• `browser_video`: download the page's video, direct files (MP4/WebM) or HLS/DASH streams joined with ffmpeg. It refuses DRM content (Netflix, Disney+, Spotify…). Only for videos you own or have the right to save: YouTube, TikTok, Instagram and others forbid downloading in their terms.

Files go to ~/.agentic-browser/exports (AGENT_EXPORTS); AGENT_MEDIA_MAX_MB (500) caps each file.

New in 1.3

The chat watcher on a demo chat: it drafts a reply for you to send, and hands bank-detail requests and phishing links to you. Full video.

• Privacy mask. browser_cursor_style({ privacy: "whatsapp" }) or AGENT_PRIVACY=whatsapp blurs contacts, chat headers and profile photos so you can record or share the agent's screen without exposing anyone. Presets: whatsapp, telegram, gmail, or your own CSS selectors. The agent still reads everything.
• Watch only the chats you choose. In the chat watcher, contacts: ["Cliente demo"] keeps every other chat out: they never wake the model, and before typing the watcher reads the open chat's title from the page, so the agent can't write anywhere else. Safe on an account that also has personal chats.
• On-screen notices and a clip per event. The watcher shows a card for each new message, draft ("review it and press Send"), escalation and block (no names while the privacy mask is on), and record: true saves each event as its own video.

New in 1.2

• Teach it once, replay forever. browser_teach_start records a task while *you* do it in the agent's Chrome (clicks, text, selects, Enter). It is saved as a recipe of roles and names, not pixels, so it survives layout changes. browser_replay repeats it with new values ({"search": "October invoices"}) without perceiving every step. Passwords are never recorded: on replay, the person types them.
• An "Enseñar" (teach) button in the browser. A small tab on the left edge of the agent's Chrome starts a recording without asking the agent. Name the recipe in the banner, press Finish, then tell your agent "repeat ". Disable it with AGENT_TEACH_BUTTON=0.
• A clean screen. Chrome's translate bar, search-engine choice, restore-pages bubble and permission prompts are off (permissions are denied). After every navigation, website popups (language, newsletter, cookie banners, "Sign in with Google") are closed with visible clicks on their close or reject button, never accept, subscribe or sign in. browser_dismiss does it on demand; AGENT_AUTO_DISMISS=0 turns the automatic pass off.
• Structured data in one call. browser_extract turns the most relevant table or repeated list (products, search results, contacts) into JSON or CSV rows with title, link, price and image. Merged table headers are resolved. CSV output is safe to open in Excel.
• Live token counter. browser_cursor_style({ hud: true }) (or AGENT_HUD=1) shows, in the corner of the page, the tokens used against what screenshots would have cost. browser_stats returns the same numbers. Formula: tokens ≈ characters / 4; one screenshot ≈ width × height / 750 per perception call.

Tools

| browser_batch | Several actions in one cal