What you get

Agents get a fixed handle on page elements instead of guessing at selectors.

agent-browser: A Browser CLI Built for Agents

Added 2026-08-06

A native Rust CLI with a resident daemon driving Chrome over CDP. The body of it is deterministic commands, not natural-language control — that lives in one subcommand and needs a gateway key configured first.

EngineeringProduct & Project
agent-browser: A Browser CLI Built for Agents preview

A snapshot returns the accessibility tree with deterministic refs, so the agent clicks a ref instead of re-querying the DOM. The default operation timeout is 25 seconds, deliberately under the CLI's 30-second IPC read timeout so the daemon returns a real error rather than EAGAIN. The credential vault stays encrypted locally; the model never sees a password. A domain allowlist also blocks subresources, WebSockets and sendBeacon. The gotcha is documented: a click fails when a consent banner covers the target, so clear it and snapshot again.