Skip to main content
Glama

Start browser task

browser_run

Start a browser task in the user's own Chrome profile. The task can only visit allowed_domains (within the sites the user allowed for this connection) and only use the listed capabilities, which default to ordinary low-risk browsing. It does not act by itself: continue with task_state, task_subgoal or task_respond. Every call starts a new task (and uses one task credit once the browser accepts it) unless idempotency_key repeats an earlier identical request, which returns that task with replayed: true.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
goalYesThe user's request in their own words, as the task's goal.
browser_idYesA browser id from browser_list.
capabilitiesNoWhat the task may do on those sites. Omit for ordinary low-risk browsing; add fill, select, click, state_change and so on when the request needs them.
confirmationsNoCapabilities that must always pause for the user's approval in Chrome, even when their settings would not ask. Usually omit.
allowed_domainsYesHostnames the task may visit (subdomains included), e.g. ["github.com"]. Name every site the request needs.
idempotency_keyNoReuse only to retry the exact same request after a lost response; omit to start a new task.
max_side_effectsNoHard cap on page-changing steps in this task: every click, fill, select, key press, upload and submit counts as one, so a form with four fields and a submit needs at least 5. Omit it (no cap) unless the user explicitly asked for a limit; it is not a number of submissions.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover only safety hints (readOnlyHint=false, openWorldHint=true, idempotentHint=false, destructiveHint=false); the description adds material context beyond them: cost model (one task credit per accepted task), replay semantics ('returns that task with replayed: true'), confirmation pausing in Chrome, and the domain/capability ceiling the task runs under.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, each load-bearing: scope/allowlist first, then the continuation model, then the cost/idempotency contract. No restatement of the tool name or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter, open-world, credit-consuming task launcher with no output schema, the description supplies the essential missing model: what the task can touch, that it is inert until continued, and that a replayed call returns an existing task instead of consuming a new credit.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real semantics: capabilities default to low-risk browsing, allowed_domains is a hard visit allowlist, and idempotency_key is retry-only rather than a general dedupe key. max_side_effects and confirmations are left entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Start a browser task') plus the unusual scope ('in the user's own Chrome profile') and the allowlist restriction. It also distinguishes itself from siblings by naming task_state, task_subgoal and task_respond as the continuation tools rather than alternates.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says the tool does not act by itself and routes the agent to the three continuation tools. It also gives when-to-use guidance for capabilities ('default to ordinary low-risk browsing', add fill/click when needed) and for idempotency_key ('reuse only to retry the exact same request after a lost response').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources