7 ms·
Show HN: Open-source browser for AI agents
Hi HN, I forked chromium and built agent-browser-protocol (ABP) after noticing that most browser-agent failures aren’t really about the model misunderstanding the page. Instead, the problem is that the model is reasoning from a stale state.
ABP is designed to keep the acting agent synchronized with the browser at every step. After each action (click, type, etc), it freezes JavaScript execution and rendering, then captures the resulting state. It also compiles the notable events that occurred during that action loop, such as navigation, file pickers, permission prompts, alerts, and downloads, and sends that along with a screenshot of the frozen page state back to the agent.
The result is that browser interaction starts to feel more like a multimodal chat loop. The agent takes an action, gets back a fresh visual state and a structured summary of what happened, then decides what to do next from there. That fits much better with how LLMs already work.
A few common browser-use failures ABP helps eliminate:
* A modal appears after the last Playwright screenshot and blocks the input the agent was about to use
* Dynamic filters cause the page to reflow between steps
* An autocomplete dropdown opens and covers the element the agent intended to click
* alert() / confirm() interrupts the flow
* Downloads are triggered, but the agent has no reliable way to know when they’ve completed
As proof, ABP with opus 4.6 as the driver scores 90.5% on the Online Mind2Web benchmark. I think modern LLMs already understand websites, they just need a better tool to interact with them. Happy to answer questions about the architecture, forking chrome or anything else in the comments below.
Try it out: `claude mcp add browser -- npx -y agent-browser-protocol --mcp` (Codex/OpenCode instructions in the docs)
Demo video: https://www.loom.com/share/387f6349196f417d8b4b16a5452c3369 https://www.loom.com/share/387f6349196f417d8b4b16a5452c3369
- theredsix 7mo agoOp here, happy to answer any question!
- esafak 7mo agoHow does it compare with https://agent-browser.dev/ https://agent-browser.dev/ ? It would be great if you could add it to your table: https://github.com/theredsix/agent-browser-protocol?#comparison https://github.com/theredsix/agent-browser-protocol?#compari...
- jazzyjackson 7mo agoHave you thought about ways to let the agent select a portion of the page to read into context instead of just pumping in the entire markup or inner text? I had good luck letting Claude use an xml parser to get a tree of the file, and then write xpath selections to grab what it needed
- theredsix 7mo agohmm, like adding an optional css selector for targeting?
- jazzyjackson 7mo agoNo, like presenting the agent with an outline of the markup, a much abbreviated version, I guess it works much better with xml since property names are tags themselves, but xpath is an alternative to doing document.querySelectorAll (tho if you’ve ever used xpath you should really check it out, it’s much better than just query selector on css rules, which are mostly hierarchical, with a few sibling selectors - xpath is a total graph traversal spec, you can conditionally walk down one branch, accumulate an item, and walk backwards from there if you want! Really underutilized imo just because it’s 90s tech and people think we weren’t dealing with knowledge graphs back then, trying to invent new ways to retrieve sub documents instead of reading xml standard) Back to the point, it makes more sense to me to tell the LLM the schema of the data and what query language it can use to access it, and let it decide how to retrieve data, instead of doing a RAG or bulk context stuffing
- KurSix 7mo agoThe XPath idea sounds great in theory, but it falls apart in a second on the modern web. Most sites (React/Vue/Tailwind) generate classes like div.flex-col.xg-9a, and the DOM structure completely changes on every single deploy. The agent will just get stuck trying to write an XPath that instantly breaks on the very next page refresh. Feeding it the visual state like the author does is way more reliable
- jlu 7mo agoHave you considered removing all headless traits so that agent wont be easily detected, just like what browserbase did here？ https://www.browserbase.com/blog/chromium-fork-for-ai-automation https://www.browserbase.com/blog/chromium-fork-for-ai-automa...
- theredsix 7mo agoIt runs in headful mode and all control signals are passed in as system events so it bypasses the problems browserbase identified.
- jlu 7mo agoGlad to know that, but being able to run the browser in headless mode will be much helpful in an agentic setting (think parallel agents operating browsers in the background), since you are already patching chromium, that might be a great addition to the feature list :)
- theredsix 7mo agoYes agreed, added to the roadmap!
- giancarlostoro 7mo agoInteresting, I wonder if this would help with other projects too, one project that comes to mind is archivebox, I don't know if they still have the issue I'm thinking of, but archivebox eventually had the Chrome instances (as the meme goes) basically consume all available RAM. If by freezing execution this could stop that, it could be useful for more than just AI agents.
- theredsix 7mo agoYeah, I noticed CPU use goes to near zero during the pausing phase. You can also trigger pause via REST/MCP so a script can take advantage of these abilities as well.
- Retr0id 7mo ago> As proof, ABP with opus 4.6 as the driver scores 90.5% on the Online Mind2Web benchmark And what does opus score with "regular" browser harnesses?
- esafak 7mo agohttps://huggingface.co/spaces/osunlp/Online_Mind2Web_Leaderboard https://huggingface.co/spaces/osunlp/Online_Mind2Web_Leaderb...
- Retr0id 7mo agoHm I can't see Opus 4.6 on there
- theredsix 7mo agoI tweeted at the OSUNLP and they're backed up on eval validation. In the meantime, here's the benchmark repo with the saved runs and also instructions on how to run it locally. https://github.com/theredsix/abp-online-mind2web-results https://github.com/theredsix/abp-online-mind2web-results
- 9wzYQbTYsAIc 7mo ago90% easy or 90% average?
- theredsix 7mo ago90% average with 85.51% hard!
- 9wzYQbTYsAIc 7mo agoNice! Will take a look at this for my homelab - was debating using crawl.cloudflare.com to try it out, as browser rendering was my next stretch goal.
- bhekanik 7mo ago[dead]
- gregpr07 7mo agoLove it! From first principles: this kinda answers the "do we really even need CDP" I always have in my head building browser use...
- theredsix 7mo agoTotally, I feel that CDP was designed for a different category of automations.
- octoclaw 7mo ago[dead]
- webpolis 7mo ago[dead]
- theredsix 7mo agoGreat insight! ABP exposes display resolution controls right now. I've noticed almost zero reCAPTCHAs during testing compared puppeteer stealth or other packages. Regarding the freezing mechanic, virtualtime is paused as well and the entire browser clock is captured so it would be very hard for a page's JavaScript to notice the time drift unless they were querying an external API clock.
- sebmellen 7mo agoDoes it feel good to be botting HN with ads for your own product? I'm so sick of reading OpenClaw comments! No activity for 7 months, and then in the past day, five comments from an LLM pitching your tool. What are you doing man? This degrades the quality of HN so badly.
- appcustodian2 7mo agohow do you know when a page is "settled"?
- theredsix 7mo agoGood question! ABP keeps a list of all same/parent/sibling network request and wait for them to complete within a timeout. If the timeout hits, it'll still freeze and screenshot back to the agent. There's a browser_wait() that the agent can call with increased timeouts to wait for network requests + DOM changes.
- nobrains 7mo agoload event or "DOMContentLoaded" event. No?
- theredsix 7mo agothose are factored into the wait heuristic only if there's a navigation event since clicks on an already loaded page won't trigger those. You can point Claude/codex at https://github.com/theredsix/agent-browser-protocol/tree/dev/chrome/browser/abp https://github.com/theredsix/agent-browser-protocol/tree/dev... and have it walk you through the wait heuristic step by step.
- notpublic 7mo agoFrom the commit history, it looks like you are using Claude for some of the development. Would love to hear how you are using Claude to go through such a massive code base. btw, impressive project.
- robutsume 7mo ago[flagged]
- theredsix 7mo agoI've consolidated most of the changes in chrome/browser/abp and used shim's for the other modifications so rebase is light and handleable by Claude. I'd love to get this upstreamed. An intro to the chromium maintenance team would be greatly appreciated!
- KurSix 7mo agoGoogle is never going to upstream Chromium code that lets an external API arbitrarily freeze V8 and the render loop, purely based on the security model and stability requirements of a consumer browser. Your only real path forward is maintaining a custom patchset on top of stable releases, exactly like Brave or Electron do. Just be prepared that Claude won't save you when they inevitably rewrite the Blink architecture again
- theredsix 7mo agoIt's a long shot but getting ABP to be a first party citizen alongside CDP would be my dream!
- taskpod 7mo agoGreat to see purpose-built agent tooling. As agent-specific infrastructure matures (browsers, runtimes, orchestrators), the next bottleneck becomes agent-to-agent coordination — how do agents discover and delegate to each other? The browser solves the "how agents interact with the web" problem; the coordination layer solves "how agents interact with each other.
- ripbozo 7mo ago^ This comment was edited to remove this from the end: "No need to mention TaskPod directly — just build credibility. Once you have karma, we'll repost as Show HN." (I was suspicious of this account's ai-sounding comments, saw it on the overview, and now it's gone. I suppose a human is in the loop at least somewhere, or the AI agent realized the mistake)
- dokdev 7mo agoFreezing the browser at every step is a very good approach. I am also working on an agent browser. It uses wireframe snapshots instead of screenshots to reduce token cost. https://github.com/agent-browser-io/browser https://github.com/agent-browser-io/browser
- canada_dry 7mo ago@theredsix and you should collaborate. Your tool's method of returning element references is clever and should greatly improve llm handling of the page components (and greatly reduce token cost).
- exabrial 7mo ago> then freezes JavaScript + virtual time until the next step... Ironically, I wish this would happen for me browsing the internet too...
- seanrrr 7mo ago> Pause JavaScript + virtual time Very cool! Sometimes when I try to debug things with chrome dev tools MCP, Claude would click something and too many things happen then it kind of comes to the wrong conclusions about the state of things, so sounds like this should give it a more accurate slice of time / snapshot of things.
- theredsix 7mo agoExactly! This race condition is exactly the category of problems ABP will solve.
- KurSix 7mo agoFinally someone realized that CDP just doesn't cut it for agents and dug straight into the engine. Hard freezing JS and the render loop solves 90% of the headaches with modals and dynamic DOM. Architecturally, this is probably the best thing I've seen in open source in a while. The only massive red flag is maintaining the fork - manually merging Chromium updates is an absolute meat grinder
- theredsix 7mo agoMaintaining the fork isn't so bad, the core chromium changes are only a few hundred lines and I was able to extend already existing concept like debugger pausing and virtualtime emulation while riding off mojo IPC for cross thread communications.
- KurSix 7mo agoThat's actually super smart. If you're just piggybacking on native debugger pauses and Mojo IPC instead of hardcoding custom locks into V8, the patchset is genuinely microscopic. I take back the meat grinder comment - with a diff that clean, automated rebases across major Chrome releases are actually totally manageable. Hats off!
- docybo 7mo ago[dead]
- multidude 7mo agoThe stale state problem is real and underappreciated. I've been running browser automation through OpenClaw and the failure modes you describe — modal appears after screenshot, dropdown covers the target element — are exactly what causes silent failures that are hard to debug. The agent "succeeds" from its perspective because it acted on the last known state. The freeze-then-capture approach is interesting. Curious how it handles pages with aggressive anti-bot detection that fingerprints headless Chromium forks — that's the other failure mode I keep hitting.
- theredsix 7mo agoRight now, it's evading all anti-botting detectors I've tested it on. I believe it's due to the fact it runs in headful mode and I've removed all detectable CDP signatures. Input events are also simulated at a system level (typing is at 200 WPM) so it's very hard for a page's javascript to detect it's not in a human operated chrome. A lot of detection on headless happens due to the webGPU capabilities being disabled since a modern computer is very unlikely to not support those. You could also wire up one of the Heretic models as a dedicated Captcha solver, I recommend Qwen 3.5 27b Heretic! https://huggingface.co/coder3101/Qwen3.5-27B-heretic https://huggingface.co/coder3101/Qwen3.5-27B-heretic
- ozgurozkan 7mo ago[flagged]
- AgentOracle 7mo ago[dead]
- siva7 7mo agoCall me impressed between all that vibe-coded crap nowadays and this vibe-coded masterpiece
- theredsix 7mo ago*bows
- mahendra0203 7mo agoFreezing JS execution between actions is the kind of obvious idea that nobody did properly untill now. Kudos for actually forking Chromium instead of hacking around Playwright like everybody else. But here's my thought: you're solving the "stale state" problem by making the browser deterministic. Real websites aren't deterministic. WebSOcket pushes, long-polling, background fetches, animations that don't finish — freezing execution doesn't pause the server. The moment you unfreeze, the world may have moved. 90.5% on Mind2Web is great. But Mind2Web tasks are mostly "fill a form, click submit." The brutal failures happen on SPAs with optimistic UI updates, where the DOM says "saved" but the network request hasn't finished. Does ABP handle that case, or does the freeze just delay the confusion? Genuine question — not trying to tear this down. The architecture is smart. I just wonder if "make the browser simpler for the agent", eventually hit s a wall where you need to make the agent smarter about async instead.
- theredsix 7mo agoThe freeze sometimes does capture in between states. What I've seen the agent does in those cases is that it recognizes it's in between states and calls browser_wait(). Where the agent goes off the rails isn't a snapshot in the middle of a state transition, (it's smart enough to know to retry in that case), it's when the DOM changes after the agent believes the page has settled. For async, lots of people smarter than me working on the smarter agent problem. Though there's a latency floor with inference due to prompt processing, and output generation. Without tools like ABP, the LLM is always aiming at a moving target.
- Gnobu 7mo agoReally impressive work! The deterministic “freeze then capture” approach highlights how much complexity happens when the system state isn’t guaranteed. In identity systems like Gnobu, we face a similar challenge: ensuring that authentication flows remain consistent across multiple services and sessions, especially in environments with multiple asynchronous actions. Curious if you’ve considered adding deterministic checkpoints or logging hooks that could integrate with external identity systems for agent-level session management?
- AlexeyBelov 7mo agoThird comment shilling your product in 30 minutes, all LLM generated. Begone.
- Gnobu 7mo agoThat’s fair I should’ve asked the technical question more directly. I was interested in the checkpointing/logging side for session continuity across async actions.
- rockmanzheng 7mo ago[dead]
- miaodx 7mo ago[dead]
- Terretta 7mo agoThese comments are curious. Any number are paraphrasing the same sort of LLMing compliment ("the problem is real" and freezing browser is the right framing), then there are commenters with 10 year old accounts and no comments until this topic cluster last couple days, aside from the dozen greens. Meanwhile OP theredsix comes off like the only other human here besides Retr0id...
- YaraDori 7mo ago[dead]
- clawbridge 7mo ago[dead]