# auto-browser

> Self-hosted, open-source MCP control plane for a shared Playwright Chromium, where an agent browses and a person can grab the live desktop mid-task, keeping saved logins.

- **Category:** Browser Automation
- **Licence:** MIT
- **Latest version:** v1.11.1
- **Open source:** oss
- **Languages:** Python
- **Platforms:** Docker Compose
- **Tags:** Mcp, Ai Agents, Local First, LLM, Claude, Playwright, Docker, Fastapi, Browser automation, Self Hosted, Ai Agent, Audit trail, Novnc, Human in the loop, Auth Profiles, Agent Approvals

## Description

Auto Browser is a local-first control plane that gives AI agents and their human operators one real Playwright-driven Chromium. MCP clients connect over HTTP at /mcp, a bundled stdio bridge covers Claude Desktop, and plain REST endpoints are there for curl-first callers; an operator dashboard lists actions waiting for sign-off, while a noVNC view lets somebody else drive the same running desktop when a site misbehaves. During a session it captures page views as images, condensed DOM text and OCR'd wording, manages tabs and downloads, and inspects network traffic. Guard rails include approval gates, a host allowlist that keeps holding after redirects and self-navigation, per-operator ownership of work, PII redaction, and Ed25519-signed witness receipts that a recipient can check without trusting the controller. Sign-in state can be stored under a name and reused by later sessions. Bring your own model: adapters for OpenAI, Anthropic and Google front ends, subscription login through the matching CLI, and a generic OpenAI-compatible route covering OpenRouter, Grok, DeepSeek, MiniMax or a local endpoint. Running it yourself means cloning the repo and starting it with Docker Compose, or pulling the prebuilt GHCR images, or spinning it up in Codespaces; a real private deployment is expected to set a bearer token, require operator IDs, encrypt saved login state, and narrow the allowlist, with an optional mode where each session gets its own throwaway browser container. A staged skill-induction harness is documented as a Stage 0 feature. CAPTCHA breaking, unauthorized scraping and identity-bypass tooling are explicitly out of scope.

## Links

- [Homepage](https://github.com/LvcidPsyche/auto-browser)
- [Docker](ghcr.io/lvcidpsyche/auto-browser-controller)
- [Repository](https://github.com/LvcidPsyche/auto-browser)
- [Security advisory GHSA-37hm-f6gf-q7vx](https://github.com/LvcidPsyche/auto-browser/security/advisories/GHSA-37hm-f6gf-q7vx)

---
Source: https://selfhost.directory/project/auto-browser