Browy
An in-browser AI agent plugin that performs tasks within tabs where the user is already logged in, locates controls via the accessibility tree, and provides a Chrome DevTools panel and a REPL.
Timeline (last 90 days)
Browy's security model assumes it will always encounter malicious pages, because it reads pages written by strangers and is logged in as the user.
Browy's indexed snapshot design draws on the DOM service and serializer of the open-source project browser-use.
Browy has 54 browser tools, most of which have switches in settings, and disabled tools are removed from the model definitions and the availableTools allowlist.
The run_script tool was enabled by default before version 0.1.10 but was changed to disabled by default after that version, because it can run Node.js on the computer.
The copilot CLI's built-in tools such as bash and web_fetch are kept off the allowlist by default in Browy and need to be manually enabled.
Only one debugger client can attach to the same tab at a time, so while Browy holds a tab, the user cannot open DevTools in parallel.
Browy is an AI Agent that runs in a Chrome, Edge, or Brave browser window the user already has open, and interacts with the user through a sidebar, a DevTools panel, or a settings page.
Browy drives tabs through the chrome.debugger API, so Chrome displays the notice "Browy is debugging this browser," and this cannot be hidden by the extension.
The Browy project is open-sourced under the Apache-2.0 license, and its author has developed it alone since April.
Browy's architecture comprises three programs: a browser extension, a Node host, and the Copilot CLI, which cooperate through a native messaging channel and JSON-RPC.
6 more timeline events
All Facts (16)
Browy uses a GitHub Copilot subscription (including the free tier) as its payment method.
60%UnverifiedBrowy's security model assumes it will always encounter malicious pages, because it reads pages written by strangers and is logged in as the user.
50%UnverifiedBrowy has 54 browser tools, most of which have switches in settings, and disabled tools are removed from the model definitions and the availableTools allowlist.
50%UnverifiedThe run_script tool was enabled by default before version 0.1.10 but was changed to disabled by default after that version, because it can run Node.js on the computer.
50%UnverifiedThe copilot CLI's built-in tools such as bash and web_fetch are kept off the allowlist by default in Browy and need to be manually enabled.
50%UnverifiedOnly one debugger client can attach to the same tab at a time, so while Browy holds a tab, the user cannot open DevTools in parallel.
50%UnverifiedBrowy is an AI Agent that runs in a Chrome, Edge, or Brave browser window the user already has open, and interacts with the user through a sidebar, a DevTools panel, or a settings page.
50%UnverifiedBrowy drives tabs through the chrome.debugger API, so Chrome displays the notice "Browy is debugging this browser," and this cannot be hidden by the extension.
50%UnverifiedThe Browy project is open-sourced under the Apache-2.0 license, and its author has developed it alone since April.
50%UnverifiedBrowy's architecture comprises three programs: a browser extension, a Node host, and the Copilot CLI, which cooperate through a native messaging channel and JSON-RPC.
50%UnverifiedBrowy uses numbered lists rather than CSS selectors to let the model operate page elements, traversing the page in a single Runtime.evaluate and tagging data-browy-id, returning at most 150 elements.
50%UnverifiedBrowy's indexed snapshot design draws on the DOM service and serializer of the open-source project browser-use.
50%UnverifiedBrowy clicks and types by reading the page's accessibility tree and numbering the controls, avoiding reliance on CSS selectors.
50%UnverifiedWhen the user has not explicitly asked to submit, Browy stops before submitting the form.
50%UnverifiedSince v0.1.10, Browy has disabled by default tools that reach the local machine, such as bash and run_script, which must be manually enabled in settings.
50%UnverifiedBrowy runs in the user's own Chrome/Edge/Brave browser and directly reuses already logged-in sessions.
50%