Clark-Browser – Stealth Chromium
Chromium fork patched at C++ source level to bypass bot detection without JS shims.
Deterministic browser automation. Works out of the box with Claude/Codex/OpenCode
Forked Chromium to freeze execution state—solves the stale-state problem that breaks most browser agents.
AI agent developers building browser automation
Browser Use · Playwright · LangChain Browser Tools
ABP is designed to keep the acting agent synchronized with the browser at every step. After each action (click, type, etc), it freezes JavaScript execution and rendering, then captures the resulting state. It also compiles the notable events that occurred during that action loop, such as navigation, file pickers, permission prompts, alerts, and downloads, and sends that along with a screenshot of the frozen page state back to the agent.
The result is that browser interaction starts to feel more like a multimodal chat loop. The agent takes an action, gets back a fresh visual state and a structured summary of what happened, then decides what to do next from there. That fits much better with how LLMs already work.
A few common browser-use failures ABP helps eliminate: * A modal appears after the last Playwright screenshot and blocks the input the agent was about to use * Dynamic filters cause the page to reflow between steps * An autocomplete dropdown opens and covers the element the agent intended to click * alert() / confirm() interrupts the flow * Downloads are triggered, but the agent has no reliable way to know when they’ve completed
As proof, ABP with opus 4.6 as the driver scores 90.5% on the Online Mind2Web benchmark. I think modern LLMs already understand websites, they just need a better tool to interact with them. Happy to answer questions about the architecture, forking chrome or anything else in the comments below.
Try it out: `claude mcp add browser -- npx -y agent-browser-protocol --mcp` (Codex/OpenCode instructions in the docs)
Demo video: https://www.loom.com/share/387f6349196f417d8b4b16a5452c3369
Chromium fork patched at C++ source level to bypass bot detection without JS shims.
HarmActionsEval benchmark proves GPT and Claude fail at blocking harmful tool use.
Control before execution beats observability after—HITL with 10-min replay window.
Reserve-commit lifecycle blocks agent actions before execution, unlike standard rate limiters.
Deterministic browser steps for agent reasoning, but README is just Chromium boilerplate with no substantive implementation details.
Git for AI agent runs—pack, diff, replay, and verify agent work with content addressing.