Developer preview · v0.1

Give your agent
a browser.
Keep its memory.

Persistent identities. Your proxies. Compact page context. Browser infrastructure built for agents that do real work.

Explore the API ↗Talk to the team

Self-hosted · No GPU required · Your sessions stay on your server

agent → pentest2browser / illustrative
# persistent session / p01
→ navigate /register
  200 · page ready

→ get_text interactive_only=true
  input:email "Email" [ref=s1e0]
  input:password "Password" [ref=s1e1]
  button "Register" [ref=s1e2]

→ fill_form data={ email, password }
  ok · 2 fields

→ run_scenario register · p02
  ok · workflow replayed
● persistent profiletext-first · CPU
↳ Persistent profiles↳ Authenticated SOCKS5↳ MCP + CLI + SDK↳ Text-first context
BUILT FOR AGENT WORKFLOWS

A browser that remembers.
An API that gets to the point.

Move from screenshots and fragile scripts to structured observations and reusable browser actions.

01 /

Persistent by design

Cookies, localStorage and IndexedDB live in independent profile directories. Close the agent. Resume the session.

02 /

Bring your own network

Bind each profile to a corporate or dedicated proxy. Local bridges handle SOCKS5 authentication without exposing credentials to the model.

03 /

Less context, more action

Compact ARIA and interactive targets. Fill an entire form in one call. Ask for screenshots only when you need them.

04 /

Learn once. Replay reliably.

Record parameterized workflows and run them across profiles. The model handles exceptions instead of rediscovering every field.

05 /

Agent-native interfaces

Streamable HTTP MCP, CLI and JS/Python clients. A single validated tool contract across every interface.

06 /

Honest observability

Audit outcomes, inspect errors and measure performance. Detection, solver tokens and site acceptance remain distinct states.

HOW IT FITS TOGETHER

Your model makes decisions.
Your server owns the browser.

01 →

Agent

OpenCode or another tool-calling client sends a structured action.

02 →

MCP / CLI

Authenticated calls enter a bounded, per-session action queue.

03 →

Profile + proxy

A persistent Chromium context uses its assigned proxy bridge.

04 →

Compact result

Return text, refs and outcomes. Keep heavy artifacts out of the prompt.

LESS PROMPT. MORE BROWSER.

A whole form. One call.

Structured actions are independent of the model vendor. Save repeated actions as a workflow and give the agent only the result.

Fits your workflow

OpenCodeCursorMCP clientsPython / JS
// POST /v1/tools/fill_form
{
  "session": "p01",
  "form_selector": "#register",
  "data": {
    "email": "[email protected]",
    "password": "${password}"
  },
  "submit": false
}

// one compact response
{
  "ok": true,
  "filled_fields": ["email", "password"],
  "unfilled_fields": []
}
@PENTEST2BOT

Meet the rest of the toolkit.

Pentest2Bot is our Telegram entry point for security tooling and project updates. Follow development, discuss a use case, or talk to the team about integration.

Open Pentest2Bot ↗
STATUS / ROADMAP

Built in the open. Clear about limits.

The public repository contains the MIT specification, schemas and examples. The server implementation is distributed separately.

  • PREVIEWPersistent Chromium, proxy bridges, browser/form tools, MCP and saved workflows.
  • VALIDATIONLocal acceptance tests passed. Live CAPTCHA/provider compatibility remains a separate validation step.
  • NEXTBroader browser backends, complete output contracts, production hardening and packaged releases.

Before you connect

Does it guarantee Cloudflare or CAPTCHA bypass?

No. Detection, token solving and site acceptance are different operations. There is no universal bypass promise or fabricated success rate.

Does a server without a GPU work?

Yes, ordinary forms and JavaScript pages run in headless Chromium on CPU. Workload capacity depends on CPU, memory and the target applications.

Is the implementation open source?

The public specification and examples are MIT. The implementation is separate; its release licensing and distribution are being finalized.

Can I install it from npm or PyPI?

Registry packages have not been released yet. Follow the official repository for verified installation instructions.