List open browser tabs.

Make a tab active by tabId.

Open a NEW tab (optionally at a URL) and focus it. Prefer this over navigate when the user says "open"/"go to" a site — navigate REPLACES the current tab. Pass active:false to open in the background (used by parallel batches).

Close a tab by tabId.

Navigate a tab to a URL, REPLACING its current page. Acts on the active tab unless tabId is given — to open a site without losing the current page, use tab_new instead.

Go back in history.

Go forward in history.

Reload the active (or given) tab.

Click an element (target by selector or a snapshot ref). trusted=true uses real OS-level input.

Type text into an element. trusted=true sends real keystrokes (works on React/Vue controlled inputs).

Select option(s) of a by value or visible label.

Press a key (with optional modifiers).

Hover over an element.

Scroll the page or to an element.

Capture a PNG screenshot (page or element).

Get visible text of the page or an element.

Get HTML of the page or an element.

Accessibility snapshot: interactive elements with stable refs to target by ref (more reliable than guessing CSS selectors).

Read cookies visible to the tab's URL (or a given url).

Read/write localStorage (or sessionStorage). op: get|set|remove|clear.

Evaluate JavaScript in the page (disabled in safe-mode).

Wait for a selector or text to appear/disappear.

Extract anchors from the page or a subtree. dedupe=true collapses links sharing an href (nav/footer noise); limit caps the count.

Read the page (or subtree) as readable markdown.

Fill multiple fields (keyed by selector) and optionally submit.

Download a file by URL or from a link element.

Set local file(s) on a file (target by selector or ref) — uploads without the OS dialog. Requires --enable-uploads. files are absolute local paths.

Report backend/session status.

Switch the active browser profile (identity). Subsequent downloads, results, screenshots, and the action log are stored under profiles//. Resets the active task to "default" unless you then call task_new.

Start a new task (run) under the active profile. Creates profiles//tasks// with downloads/, results/, screenshots/ and makes it the active task so all captured artifacts land there.

List every task across all profiles under the data dir, with sizes and download counts.

Report the active profile/task and the folder paths where this run's artifacts are stored.

Run multiple tool calls in one request — parallel (default) or serial. Each op is { tool, args } and goes through the same policy gate, rate limit, and error handling as a direct call. In parallel mode, tab-scoped ops MUST pass an explicit tabId (the active-tab default is unsafe under concurrency). Use to drive several tabs at once (e.g. open tabs, then batch get_text across them). Cannot be nested.