Overview
bobby-browser is a browser automation runtime with authenticated, capability-scoped control surfaces. All adapters share capability, idempotency, evidence, checkpoint, and event contracts. Authentication fails closed; credentials are never accepted in URLs or query strings.
Alpha. Interfaces are stable enough to build against, but may still change before 1.0. See the security model before exposing any deployment. Interface version: `2026-08-19`.
Which surface?
| Goal | Start here |
|---|---|
| Install / run the CLI | Installation · CLI reference |
| First successful navigate | First browser session |
| Application code in Node/TS | TypeScript SDK |
| Application code in Rust (HTTP) | bobby-browser-client |
| Embed in Rust | Rust crate book · Rust SDK |
| Raw HTTP / curl | HTTP API + Authentication |
| Agent host (Claude, Cursor, …) | MCP tools via stdio or HTTP |
| NVIDIA OpenShell sandbox | OpenShell host |
| Playwright / Puppeteer | Authenticated CDP (primitives only) |
Default browser engine preference is Firefox (with Chromium available when selected). The runtime is multi-principal: one instance serves many tenants, each with a capability-scoped bearer.