Browse Puts Agents In Real Browsers

Browse makes authenticated browser automation far more practical, but its usefulness depends on keeping a tight leash around permissions and prompt-injection risks.

• –Real browser profiles eliminate much of the friction of isolated headless automation.
• –Background tab groups, named sessions, recordings, screenshots, and HAR capture make longer agent workflows easier to debug.
• –Domain allowlists, pairing keys, and explicit human handoffs provide meaningful safety controls.
• –The extension requires powerful browser permissions, so malicious page content remains a serious concern.
• –Its broad MCP-client support makes this more significant than an OpenCode-only feature.