Skip to content
Updated Jul 20, 2026

AstroBrowse

AstroBrowse is a cloud based browser tool that enables AI agents to access websites as you without needing a login or password. All outgoing traffic runs through your own network via Tailscale. (Set up a free Tailscale account HERE)

Ways To Connect

AstroBrowse supports MCP and RestAPI connection methods to integrate with your AI agents and workflows.

MCP Integration

AstroBrowse connects to any agent harness via the Model Context Protocol (MCP).

For detailed information about connecting agents via MCP, see the MCP Integration section in our Connect An Agent guide.

RestAPI

For custom integrations and advanced workflows, AstroBrowse provides a REST API that allows programmatic control over browsing sessions, site management, and audit trails.

For complete REST API documentation and authentication details, see Programmatic Access.

Schema

For the full AstroBrowse API schema and endpoint reference, visit the AstroBrowse marketplace page and click the tab that says Schema.

AstroBrowse marketplace page showing the Schema tab selected to view the API schema and endpoint reference
On the AstroBrowse marketplace page, click the Schema tab to view the full API schema and endpoint reference.

Enable AstroBrowse

Before your agents can use AstroBrowse, make it available to an Agent Group. You can either auto-approve every tool for the group, or enable AstroBrowse specifically.

Auto Approve All Tools

Set your Agent Group to Auto Approve All Tools so AstroBrowse (and any other tools you add) are available without per-tool approval.

AgentPMT Agent Group settings showing the Auto Approve All Tools option enabled
Set your Agent Group to Auto Approve All Tools to make every tool available without per-tool approval.

Enable For A Specific Agent

To enable AstroBrowse on its own, open the AstroBrowse product page, click AI Agent, and click Enable For Agent.

AstroBrowse product page showing the AI Agent option and Enable For Agent button
On the AstroBrowse product page, click AI Agent and then Enable For Agent.

Connect Your Tailscale Account

AstroBrowse routes all outgoing browser traffic through your own network via a Tailscale exit node, so destination sites see your residential ISP IP instead of a datacenter address. Setup is one-time per device; AgentPMT reuses it for every subsequent browser session.

What you'll need

  • A Tailscale account — the personal Free plan at tailscale.com is plenty.
  • One device on your home network that stays online while your agents are browsing — a laptop, desktop, NAS, or Raspberry Pi all work. This becomes your exit node.

Step 1 — Install Tailscale on your exit-node device

Open tailscale.com/download on the device that will be your exit node and run the installer for its OS. After installation, sign in with the same Tailscale account you'll use for AgentPMT.

Step 2 — Enable exit-node mode

Tell Tailscale this device is willing to route traffic out to the internet for other devices on your tailnet (including the AgentPMT browser).

  • Windows / Linux: open a terminal and run:

    bash
    tailscale up --advertise-exit-node

  • macOS: in the Tailscale menu bar app, choose Exit Nodes → Run Exit Node.

  • iOS / Android / NAS: follow Tailscale's exit-node setup guide for your platform.

Then open the Tailscale admin console at login.tailscale.com/admin/machines, find your device, click Edit route settings, and tick Use as exit node. Save.

Tailscale admin console Machines page showing the list of devices to choose an exit machine from
In the Tailscale admin console, find the device that will act as your exit node.
Tailscale machine menu with the Edit route settings option highlighted
Open the device's Edit route settings menu.
Tailscale route settings dialog with the Use as exit node checkbox ticked
Tick Use as exit node and save.

Note the device's short name in the Machine column (for example, spark-3b02) — you'll paste it into AgentPMT in Step 4.

Step 3 — Create a reusable auth key

In the Tailscale admin console, go to Settings → Keys → Generate auth key and configure:

  • Reusable: ON. Required — AgentPMT re-registers the browser against your tailnet each time it provisions a session.
  • Pre-approved: ON. Required — without this you'd have to approve the browser manually every time.
  • Ephemeral: OFF.
  • Expiration: 90 days is the default and fine to start with. You can rotate at any time without disrupting an active session.
  • Tags: optional. Leave blank unless you've configured ACL tags.

Click Generate key and copy the tskey-auth-… value. AgentPMT won't show it back after you save it, so paste it now.

Tailscale admin console Settings menu showing the Keys page where you generate an auth key
In Settings → Keys, choose Generate auth key.
Tailscale auth key generation dialog with the Reusable and Pre-approved options enabled
Make sure the key is Reusable and Pre-approved, then generate it.

Step 4 — Connect the credential in AgentPMT

In the AgentPMT dashboard, go to Credentials → Add → Tailscale Browser Egress and fill in:

  • Tailscale auth key: the tskey-auth-… value from Step 3.
  • Exit node name: the short name from Step 2 (for example, spark-3b02).
  • Auth key expires on: the date you set in Step 3, formatted as YYYY-MM-DD (for example, 2026-09-01). AgentPMT emails you 14 days, 3 days, and 1 day before this date so you have time to rotate.

Save. The credential is encrypted at rest and never displayed back.

AgentPMT dashboard showing the Credentials tab where Tailscale browser egress credentials are managed
Open the Credentials tab in the AgentPMT dashboard.
AgentPMT new credential dialog with the Tailscale option selected, showing fields for the auth key, exit node name, and expiration date
Choose Tailscale and enter the auth key, exit node name, and expiration date.

Step 5 — Assign the credential to an agent group

Add the Tailscale credential to the agent group that will run your browser sessions, then select the credential you just created.

AgentPMT agent group settings showing where to add credentials to the group
Add the Tailscale credential to the agent group that will run your browser sessions.
AgentPMT credential picker showing the newly created Tailscale credential selected for the agent group
Choose the Tailscale credential you just created.

Step 6 — Try it

Open any agent or workflow that uses the Tailscale browser product. The first session takes a few seconds longer than usual while AgentPMT spins up a dedicated Tailscale daemon bound to your tailnet. After that there's no extra delay.

To confirm your home IP is what destinations see, ask the agent to navigate to https://ipv4.icanhazip.com inside a session and read the page back. The IP shown should match your home network's public IP.

Manage Authenticated Sites

AstroBrowse allows you to manage and maintain authenticated sessions across multiple websites, enabling your AI agents to access protected content and perform actions on your behalf.

Site Authentication

Login to any sites you want your agent to access using the virtual browser in your dashboard.

AstroBrowse dashboard showing how to add a site by logging in through the virtual browser
Add a site by logging into it through the virtual browser in your AgentPMT dashboard.

Login through the virtual browser to create a session. The session is isolated, encrypted, and saved in AgentPMT. Your passwords are not saved and are not visible to AgentPMT or your AI agent.

AstroBrowse saving a new site session after login through the virtual browser
After you log in, the isolated session is encrypted and saved in AgentPMT — your password is never stored or visible.

Permanently revoke a website at any time to destroy the session, preventing an agent from logging in until you re-add it.

AstroBrowse dashboard showing how to permanently revoke a website and destroy its saved session
Revoking a website destroys its session, so no agent can log back in until you re-add the site.

Agent Prompts

An agent can choose to use the AstroBrowse tool on their own when they need it. If your agent isn't finding the tool you can give them specific details by clicking 'AI Agent' and 'Copy prompt for LLM' on the AstroBrowse tool page.

AstroBrowse tool page showing the AI Agent option and Copy prompt for LLM button for giving an agent specific tool details
If your agent isn't finding AstroBrowse on its own, use 'AI Agent' → 'Copy prompt for LLM' on the tool page to give it the specific details it needs.

Browser Takeover

AstroBrowse keeps the AI agent in control of the browser session by default. When the agent encounters a step it cannot complete on its own — such as a CAPTCHA or a complex verification flow — it can request human assistance and send a link that lets a person step in and finish that specific action, after which control returns to the agent.

AstroBrowse browser takeover request showing the agent asking a human to complete a step it cannot handle, with a link the person can use to take over
When the agent cannot complete a step, it sends a takeover request with a link so a human can finish that action and hand control back.

Tracking and Auditing

Comprehensive tracking and auditing features ensure transparency and compliance in automated browsing activities.

Activity Logging and Audit Trails

Every action performed through AstroBrowse is logged, and those logs feed audit reports for compliance, analysis, and troubleshooting.

AstroBrowse agent activity dashboard showing logged sessions, actions taken, pages visited, and errors
The AstroBrowse agent activity dashboard surfaces every logged session and action for audit and review.

Logged details include:

  • Timestamp and session details
  • Actions taken and pages visited
  • Data accessed and modified
  • Errors and exceptions