AgentTab

Local browser runtime for AI agents

AgentTab

Any agent. Your browser. Your rules.

Give an agent a tab, not the keys to your browser.

Unreleased: AgentTab v2.0.0-rc.1 is under review. No v2 installation is available from this site.

Explore the trust boundary Read the privacy policy
A visible workspace, with a clear next move
Research assistant Working

Needs your attention

Complete a password, passkey, or other human-only input.

The agent keeps working and verifies the result itself.

Built for useful work without silent reach

A browser runtime that keeps the important boundaries visible.

Task-owned workspaces

Agent work is organized into visible task workspaces in your existing signed-in Chrome profile.

Human-only input stays human

Attention notices hand passwords, passkeys, 2FA, CAPTCHAs, payment secrets, and similar input back to you.

Recognizable effects stage first

Commit presents a review step for recognizable sends, publishing, purchases, deletion, uploads, authorization, and permission grants.

Outcome-first browser use

From an agent request to a deliberate browser action.

AgentTab makes the ordinary path clear: a task gets a workspace, the agent works in it, and people take over when an action needs them.

  1. Start in a task workspace

    A task opens or adopts an explicit tab. Ownership is visible and stays scoped to that task.

  2. Let the agent do the routine work

    Standard actions use the task workspace, not broad browser control.

  3. Step in when it matters

    Attention notices protect secret and other human-only input without pausing the task. Recognizable consequential actions wait for Commit.

Trust boundary

Local runtime, signed-in Chrome, bounded standard access.

What AgentTab does

  • Runs locally beside your signed-in Chrome profile.
  • Coordinates task-owned browser workspaces and visible handoff.
  • Stages recognizable consequential actions before they take effect.

What task ownership does not do

Task ownership is an execution and coordination boundary. It is not cookie, identity, or profile isolation.

Standard mode does not provide raw cookies, storage, passwords, arbitrary JavaScript, raw Chrome DevTools Protocol access, or coordinate actions.

Private by architecture

Local only. No telemetry. No remote AgentTab service.

AgentTab does not collect, sell, or share personal data. Browser work happens through your local runtime and your own signed-in browser.

Read the full privacy policy