Skip to main content

Browser Use Agent

The Browser Use Agent is a built-in AI agent that can interact with web pages in your browser tabs. It reads page content, clicks elements, fills in forms, and extracts structured information.

The browser agent always runs on BrowseWiz's own model and uses your credits, whatever model you chose for the chat. If you run out of credits, the chat shows the out-of-credits message and stops.

Turn it on or off​

The browser agent is on by default. To turn it on or off, use either:

  • the "Enable browser agent" switch in the chat's Tools menu;
  • the "Browser automation agent" switch in Options → Tools → Built-in Tools.

Both switches show the same setting. Turning it on in Options first asks for permission to manage your tabs. If you don't allow it, the switch stays off.

Capabilities​

The agent can perform the following actions on a tab:

  • Read page content — read the text of a web page, including embedded frames
  • Find elements — find links, buttons, inputs and other interactive elements by their words or type
  • Click elements — click buttons, links, and other interactive elements
  • Input text — fill in form fields and search boxes
  • Choose an option — pick an option in a dropdown by its text
  • Scroll — scroll the page or a list, for example to load more results
  • Press Enter — for example, to submit a search or a form

The agent works from the page's text and elements, not from screenshots. It cannot upload files.

Downloads​

The agent can click links and buttons that download files, such as invoices, statements or exports. To know which files were really saved, it needs your permission to see downloads: allow it in Settings → Tools, or with Let BrowseWiz see downloads on a plan card whose steps download files ("BrowseWiz can confirm each saved file only with this permission."). Approve and Reject work the same whether you allow it or not.

With the permission, each click that starts a download waits until the file is saved, up to a minute, so clicking several download buttons in a row saves every file. The agent then lists the files by their real names and sizes. If Chrome blocks a site's repeated downloads, the agent says so; allow them for that site in Chrome's Site settings → Automatic downloads.

Without the permission, the agent reports a file only when the link itself names it, and never claims a download it didn't see.

The agent never sees what password, one-time-code and payment card fields hold: it reads them as hidden.

Tabs​

While the browser agent is on, BrowseWiz can also open new tabs in the BrowseWiz Tabs group, load pages in them, list them, and find your active tab. Each agent task works in one tab.

Opening and loading pages in these tabs needs no approval; the agent's actions on them do (see Approvals). New tabs open in the background, so the tab you are on stays in front. BrowseWiz does not close tabs in a chat. A scheduled task run closes the tabs it opened when it ends.

Tab access​

The first time BrowseWiz needs to work with your tabs, the chat shows "BrowseWiz needs permission to manage your browser tabs to do that." with a "Grant tab access" link. Click it and allow the permission in your browser's prompt. The chat then shows "Tab access granted. Continuing your request…" and carries on. You only need to do this once. If you refuse the permission, the chat shows "Tab access was not granted. Browser automation stays unavailable." and you can click "Grant tab access" again.

Tabs in the BrowseWiz Tabs group need no access question. Before the agent acts on any other tab, the chat shows "BrowseWiz agent wants to act on domain to work on your request." with two buttons:

  • Allow access adds the tab to the BrowseWiz Tabs group. The agent keeps access to the tab until you remove it from that group or restart the browser.
  • Deny refuses access. The agent does not ask again for that tab until you start a new chat.

This question is asked even when approvals are bypassed. Scheduled task runs never act on tabs outside the BrowseWiz Tabs group.

Approvals​

Before each action the agent takes on a page, such as reading it, finding elements, clicking, typing, choosing a dropdown option, scrolling or pressing Enter, the chat shows a card such as "Browser agent wants to read tab content." Click "tab" in the card to switch to that tab.

On a click, typing or Enter card, the name of the element, such as element "Search" or "Message" field, is a link too ("Show name on the page"). Click it to switch to the tab and scroll to the element, which is outlined for a few seconds. If the element is no longer on the page, the link only switches to the tab.

The card has these buttons:

  • Approve runs this action.
  • Approve on domain this chat approves this action and every later action on that domain until you start a new chat, the same as "Auto-approve all actions on domain" below. It is shown only when the action is on one domain and the card has no "Safety check: …" line.
  • Deny stops the agent.

The arrow next to Approve opens more choices:

  • Auto-approve all actions on domain approves this action and every later action on that domain until you start a new chat. It is shown only when the page has a domain.
  • Auto-approve all approves this action and every later action until you start a new chat. BrowseWiz first asks you to confirm ("⚠️ Bypass all approvals this chat session?"). Actions the safety check flags on other sites still ask you first.
  • Always auto-approve on domain adds the domain to your Auto-approve domains. Like the other domain choice, it is shown only when the page has a domain.
  • Always auto-approve all turns on "Always bypass all approvals" straight away, without asking you to confirm.

The two "Always" choices change your settings and show "Setting saved" with an "Open options" link, where you can change them back. Click "OK" to run the action.

When no approval is asked​

The agent runs its actions without showing the card when:

  • the action is part of a scheduled task run;
  • you approved a one-off plan with "Approve & run", also for your follow-up messages in the same chat, until you click Stop, approve or reject another plan, edit and resend a message sent before the plan, or start a new chat;
  • "Always bypass all approvals" is on;
  • the page is on a domain in your Auto-approve domains;
  • you chose "Approve on domain this chat", "Auto-approve all actions on domain" or "Auto-approve all" earlier in this chat;
  • the page has no domain, such as a blank tab or a local file.

The safety check can still ask you, or block an action, in all of these cases.

Approval record​

Each approval is recorded with your account and kept for 90 days, as the record of what you authorized: approvals you give on a card or a tab access card, and actions that a setting, an approved plan or a scheduled task run approves. Actions approved by an earlier "Approve on domain this chat", "Auto-approve all actions on domain" or "Auto-approve all" choice in the same chat aren't recorded again. Text typed into password, one-time-code and payment card fields is recorded as [redacted], and page addresses are recorded without their query string.

Settings​

Open Options → Tools → Built-in Tools and click "Configure" next to "Browser automation agent". The "Configure Browser Automation" dialog has:

  • Always bypass all approvals: skip all confirmation dialogs for browser actions. It is off by default. Turning it on asks you to confirm with "Enable bypass".
  • Auto-approve domains: actions on these domains are approved without asking. By default the list holds google.com and *.wikipedia.org. An entry like *.example.com matches example.com and all its subdomains. An entry without *. matches only that domain, so google.com does not cover mail.google.com. A leading www. is ignored. With an empty list, no domain is approved automatically.

Click "Save" to keep your changes.

caution

Be careful when adding domains to the auto-approve list or turning on "Always bypass all approvals". The agent will take actions on these sites without asking for confirmation.

Safety check​

The safety check is always on and has no setting. Before every click, text input or Enter key press, and before opening a page on a site you haven't approved (see Opening pages), BrowseWiz checks the action against what you asked for, or the plan you approved:

  • it is on the right site, not a lookalike or a site unrelated to your request;
  • it has no lasting effect you did not ask for, such as sending, paying, deleting, publishing or changing account settings. Searching, filtering, sorting, paging, closing a cookie banner and changing a cart count as no lasting effect;
  • for typed text, it doesn't send personal data, passwords or other credentials, or content from other pages to a site that shouldn't get it.

The check then allows the action, asks you, or blocks it.

  • Asks you. The approval card is shown, even on an auto-approved domain, with "Always bypass all approvals" on, or during a plan you approved. The card has a "Safety check: …" line with the reason: "this may not be the site you meant", "this has an effect you didn't ask for", or "this may send information the site shouldn't get".
  • Blocks it. Nothing runs, the chat shows "Safety check blocked: … — reason. Approvals can't override a block.", and the agent stops. A blocked action cannot be approved.

Approving a card with a "Safety check: …" line:

  • Auto-approve all actions on domain also approves later actions on that domain that the check asks about, and Auto-approve all approves them on the sites this card's actions are on, until you start a new chat. On any other site, the check still asks you. The "Always" choices and your saved settings never approve an action the check asks about.
  • Any approval on the card also remembers that exact action, so the same action isn't asked about again in this chat. Typing into a password field is never remembered.

If the check cannot run, the chat asks you with the usual card, without a "Safety check: …" line. In a scheduled task run nobody can answer, so an action the check would ask about, or can't check, is refused.

Opening pages​

BrowseWiz opens only http and https addresses. It refuses local files, browser pages such as chrome://settings and other kinds of links. An address without https://, such as otodom.pl, gets it added.

Before it opens a page, the safety check looks at the page's address: that it's the right site, and that the address doesn't carry personal data or other information the site shouldn't get. A site isn't checked when it is:

  • the site of a step in the plan you approved;
  • named in one of your own messages, as an address or a domain such as otodom.pl;
  • in your Auto-approve domains;
  • one you approved earlier in this chat with "Approve on domain this chat" or "Auto-approve all actions on domain", or with "Auto-approve all" on a card with a "Safety check: …" line for an action on that site.

Otherwise, "Auto-approve all" and "Always bypass all approvals" don't approve sites to open.

  • Asks you. The card says "Browser agent wants to Open address." with its "Safety check: …" line. Approve opens the page, and the same address isn't asked about again in this chat. Deny doesn't open it. Auto-approve all actions on domain also opens later pages on that site without a check until you start a new chat.
  • Blocks it. The page isn't opened and the chat shows "Safety check blocked: Open address — reason. Approvals can't override a block." The same happens when the check can't run.

In a scheduled task run, a page on a site that isn't in the task's plan or your Auto-approve domains is opened only when the check allows it.

Multi-step tasks​

For a bigger request, such as one with many steps, more than one site or work that repeats, BrowseWiz first shows a plan card with the steps and waits for you:

  • Approve & run starts the task, unless the plan has a schedule: then it's saved as a scheduled task instead of running now. The agent then runs the plan's actions without approval cards, and keeps doing so for your follow-up messages in the same chat ("now the second one"), until you click Stop, approve or reject another plan, edit and resend a message sent before the plan, or start a new chat. The safety check still applies.
  • Reject cancels the plan.

A plan with a schedule becomes a scheduled task when you approve it. A plan that changes an existing scheduled task shows "Updates scheduled task" with the task's name, and its button is Approve update.

If you send a message while a plan card waits, the plan is rejected and your message is sent, so you can say what to change. If you click Stop, the card is marked "Cancelled".

While it works​

While the agent works, the chat shows "Using Browser automation agent...". Each agent task then appears in the chat as a "Browser automation agent" row with the task in quotes. Click the row to see the task BrowseWiz gave the agent and its result, with a copy button.

Each task has a limited number of steps. If the agent runs out of steps, it reports what it finished.

To stop the agent, click the square stop button in the message box. This also removes any open approval card and ends an approved plan run.

Example Use Cases​

  • Web research: "Search for 'best project management tools' on Google and return the top 5 results"
  • Form filling: "Fill in the contact form on this page with the following details…"
  • Data extraction: "List all article titles on this Wikipedia page"
  • Workflow automation: "Search for flights from NYC to London on this travel site"

Tips​

  • Keep requests focused and specific — describe exactly what data you need or what action should be taken
  • BrowseWiz gives the agent one clear goal per task (e.g., one search query, one form to fill, one page to read) and splits bigger requests into several tasks
  • Each agent task gets only the instructions BrowseWiz writes for it, not the whole chat — name the exact values, fields and pages in your message when they matter
  • The agent works in your browser, with the sites you are signed in to — if a site asks you to sign in, the agent stops and tells you; sign in yourself, then ask again