No setup per site
It works on the pages you already use, signed in as you. Sites don't need to support it, and there's nothing to connect.
Auto Browser runs an AI agent in Chrome's side panel. Describe a task in plain English, and it reads the page and clicks and types for you, with your tabs and logins. By default it asks before each action.
The agent reads the page, picks the next action and takes it. It repeats until the task is done, it needs your input, or it reaches the step limit (50 by default).
Type the task in plain English. You can attach images or audio when your model accepts them.
“Find me a flight from NYC to Tokyo next Thursday, one-way.” The agent builds an outline of the page's buttons, links, fields and text. It takes a screenshot only when it needs to check something visually.
Snapshot taken → 47 elements, search form detected It clicks, types, scrolls, opens pages and tabs, or calls the page's own WebMCP tools. In the default mode it asks before each change.
Fill form → submit → read results It works on the pages you already use, signed in as you. Sites don't need to support it, and there's nothing to connect.
Run tasks with OpenRouter (DeepSeek V4.1 Flash by default), Google Gemini with your own key, or a local model through Ollama or LM Studio. Gemini Nano is there for on-device chat.
Learn moreThe extension has no analytics, no telemetry and no servers. API keys stay in your browser, and what you type into form fields stays out of what the model reads. With a local model, nothing goes to a cloud provider.
Learn moreBy default, every click, keystroke and navigation waits for your approval, and scripts need an approval of their own. Banking, government and healthcare sites on a built-in list are blocked.
Learn moreEach card is a recording of the agent doing the task. Tap one to watch it.
The agent searches the store, reads the specs and reviews for each option, and gives you a side-by-side summary with a recommendation.
The agent writes a short script that filters and sorts the table, runs it once you approve, and returns only the rows you asked for.
Open an X profile and ask what the person is posting about. The agent scrolls the timeline, reads the posts and writes a short brief.
Open a long post, paper or release note and ask for a summary. The agent reads the whole page and returns a summary with the main points.
It finds the booking form, fills in the details you gave it and asks you for anything missing.
It reads the showtimes, asks which film you want, and goes through seat selection and checkout, waiting for your approval before the final step.
OpenRouter, Google Gemini and a local model can all run tasks on the page, and you can switch between them mid-conversation. Gemini Nano runs on your device for chat.
Free, on-device, for chat.
Gemini Nano runs inside Chrome on your computer, with no API key or account. Use it to chat and to ask about images or audio. Its context window is too small to drive web pages, so tasks on a page need one of the other three providers.
Google's models, called directly.
Requests go from your browser straight to Google's Gemini API, billed to your own key. The default model is Gemini 3.8 Flash.
Many models, one key.
Use any model in the OpenRouter catalog with one key. The default is DeepSeek V4.1 Flash, and Claude, GPT and Llama are a dropdown away. Auto Browser checks which models accept images and audio.
Runs on hardware you control.
Point it at Ollama, LM Studio or any OpenAI-compatible endpoint. Nothing goes to a cloud provider, and your own fine-tuned models work too.
Move between OpenRouter, Google Gemini and a local model, and the conversation and tool results carry over. Start on the default model and switch for a harder step.
Six pieces that decide how well it handles a task. The engineering posts on the blog cover each one in detail.
It builds an outline of the page that includes same-origin iframes, open shadow roots and content below the fold, and leaves out elements hidden behind a modal. It takes a screenshot only when a task needs a visual check.
When a page offers WebMCP tools, the agent is told to use them before clicking around. Each call goes through the same permission check as a click.
In the default mode, clicks, typing and navigation wait for your approval, and custom scripts need an approval of their own. Sites on a built-in list of banking, government and healthcare domains are blocked outright.
If an element has changed since the agent last looked, it gets a fresh view of the page in the same step. When a task stalls, it changes plan once, then stops and says why.
Within one task it can open, switch between and close tabs, working on one at a time. It sees only the tabs in its own Chrome tab group, and when the task ends it ungroups them without closing them.
Chrome can stop an extension's background worker mid-task. Auto Browser then tries to resume the task, up to twice within 10 minutes, and tells you if it can't. It never resends an action whose result it didn't see.
92.7% WebVoyager-mini pass rate
1.3¢ Model cost per task
DeepSeek V4.1 Flash on Auto Browser 1.6.0. 103 of WebVoyager's 643 tasks, mean of two runs, self-reported. Read the results
Auto Browser supports WebMCP, a draft web standard that lets a page give AI agents its own tools. Register tools or mark up your forms, and the agent calls them in place of clicking through the page.
document.modelContext itself, following the current draft. You don't
ship an SDK.
A draft standard for web pages to offer tools to AI agents, written by the W3C Web Machine Learning Community Group.
github.com/webmachinelearning/webmcpAn agent that clicks in your signed-in browser can buy, send or delete things. These checks limit what it can do without you, starting with the permission mode you pick.
In Ask mode, the agent asks before each click, keystroke and navigation. Reading the page and scrolling don't interrupt you. You can switch to auto-approve for one task, or for all actions until you turn it off.
Running custom JavaScript on a page is the most powerful thing the agent can do, and auto-approve never covers it. You can allow scripts on one site for the rest of a task, or turn the prompt off in Settings.
On a built-in list of about 30 banking, payment, crypto, government, healthcare and password-manager sites, the agent can't click, type, run scripts or open tabs, whatever mode you're in. It can still read a listed page you're on.
In Ask mode, an approval applies to the site you gave it on. If the page has moved to another site before the agent acts, it asks again.
What's typed into form fields, passwords included, stays out of the page outline the model reads. The model can see that a field is filled in, but not what it contains.
The agent works in the tab you started from and in tabs it opens, all kept in one Chrome tab group. It can't see or act on your other tabs.
With a local model through Ollama or LM Studio, the agent runs tasks without sending pages or prompts to a cloud provider.