Browser Harness
browser-use
Self-healing browser harness that lets LLMs drive a real browser via CDP.
What is Browser Harness?
Browser Harness is a thin Chrome DevTools Protocol wrapper that lets LLMs drive a real browser. Agents write missing helper functions on the fly, building a growing library of site-specific skills across runs. It integrates with Browser Use Cloud for stealth and headless deployment.
Browser Harness in depth
Most browser automation breaks the moment a site changes a button or reshuffles its layout, and the agents built on top of it inherit that fragility. Browser Harness, from the Browser Use team, tackles the problem from a different angle. It is a thin wrapper around the Chrome DevTools Protocol that lets a large language model drive a real Chrome instance rather than a sandboxed emulation. Instead of shipping a fixed library of selectors and helper functions, it gives the agent direct, low level access to the browser and the freedom to write whatever it is missing while a task runs. The pitch is honest about what it is: a small harness, not a full framework, that trades polish for control and lets the model do the heavy lifting.
The distinctive idea is self-healing through accumulation. When the agent hits something the existing helpers cannot handle, it writes a new helper on the fly into an editable workspace, and that code persists for later runs. Over time the project builds a growing library of domain skills, small playbooks that capture the selectors, flows, and edge cases for specific sites. The core stays deliberately tiny, the maintainers describe roughly a thousand lines across a handful of files, so the behaviour you care about lives in code you can read and edit rather than buried in an abstraction. It connects to local Chrome over remote debugging, and the same agent can target Browser Use Cloud browsers for stealth, proxies, and captcha handling.
The natural audience is developers building LLM agents that need persistent browser sessions and accumulate site-specific knowledge over many runs. Concrete examples already shipped in the repository cover LinkedIn outreach, Amazon ordering, and expense filing, which hint at the recurring, semi-structured workflows where it shines: tasks that vary slightly each time but follow a stable underlying flow. It also suits teams who want to inspect and audit exactly what their agent does at the protocol level, rather than trusting a closed runtime. Because installation runs through a setup prompt pasted into a coding agent like Claude Code, it fits people already working inside an agentic coding loop more than those wanting a conventional pip-install-and-go SDK.
The honesty has to extend to the weaknesses. It is Python only, with no official TypeScript or Node SDK, so JavaScript-first teams are out of luck for now. The stealth, proxy, and captcha features lean on Browser Use Cloud, which means part of the value sits behind a commercial service and creates partial vendor lock-in even though the harness itself is MIT licensed. CDP grants deep control over the browser, and letting an LLM write and execute helper code against it demands careful isolation in production, since a compromised or confused agent has real reach. The self-healing loop can also drift, generating helpers that work once but accumulate cruft, and the project is moving fast with many open pull requests and no stable public API.
Against its commercial sibling, Browser Use Cloud, the harness is the open, self-hosted, low-abstraction layer rather than a managed product, and the two are designed to complement each other, with the Cloud supplying the infrastructure the harness hooks into. Adopt it if you are comfortable in Python, want to read and own the automation logic, and value an agent that gets better at your specific sites over time without manual selector maintenance. Treat it as too early if you need a frozen production API, multi-language support, or strong guarantees today, since it is evolving rapidly and the security model around CDP access still asks a lot of the integrator. For experimentation and internal agents it is compelling; for mission-critical systems, watch it mature first.
Pros & Cons
Pros
- Self-healing design improves automatically across runs with no manual updates
- Minimal abstraction (~1k lines across 4 files) - easy to audit and extend
- Active community with many open PRs and real usage
Cons
- Python-only - no official TypeScript/Node SDK
- Stealth features depend on Browser Use Cloud - partial vendor lock-in
- CDP-level access needs careful security isolation in production
License
MIT (OSI-open)
When it is interesting
Building LLM agents that need persistent browser sessions with accumulated site-specific skills and minimal abstraction over CDP.
When it is too early
You need a stable production API - the harness is still evolving rapidly.
Commercial alternative & related
- Commercial counterpart: Browser Use Cloud
This repo featured in the 2026-07 edition of the Open-Source AI Radar.
UI-TARS-desktop
bytedance
Native desktop app for a GUI/computer-use agent powered by the open-weight UI-TARS model.
strix
usestrix
Framework of autonomous AI hacker agents for dynamic application security testing.
Page Agent
alibaba
In-page JavaScript GUI agent - control any webpage with natural language, no headless browser or extension.