Skip to content
Updated Jul 21, 2026

AstroBrowse

AstroBrowse is a cloud based browser tool that enables AI agents to access websites as you without needing a login or password. All outgoing traffic runs through your own network via Tailscale. (Set up a free Tailscale account HERE)

Ways To Connect

AstroBrowse supports MCP and RestAPI connection methods to integrate with your AI agents and workflows.

MCP Integration

AstroBrowse connects to any agent harness via the Model Context Protocol (MCP).

For detailed information about connecting agents via MCP, see the MCP Integration section in our Connect An Agent guide.

RestAPI

For custom integrations and advanced workflows, AstroBrowse provides a REST API that allows programmatic control over browsing sessions, site management, and audit trails.

For complete REST API documentation and authentication details, see Programmatic Access.

Schema

For the full AstroBrowse API schema and endpoint reference, visit the AstroBrowse marketplace page and click the tab that says Schema.

On the AstroBrowse marketplace page, click the Schema tab to view the full API schema and endpoint reference.

Enable AstroBrowse

Before your agents can use AstroBrowse, make it available to an Agent Group. You can either auto-approve every tool for the group, or enable AstroBrowse specifically.

Auto Approve All Tools

Set your Agent Group to Auto Approve All Tools so AstroBrowse (and any other tools you add) are available without per-tool approval.

Set your Agent Group to Auto Approve All Tools to make every tool available without per-tool approval.

Enable For A Specific Agent

To enable AstroBrowse on its own, open the AstroBrowse product page, click AI Agent, and click Enable For Agent.

On the AstroBrowse product page, click AI Agent and then Enable For Agent.

Connect Your Tailscale Account

AstroBrowse routes all outgoing browser traffic through your own network via a Tailscale exit node, so destination sites see your residential ISP IP instead of a datacenter address. Setup is one-time per device; AgentPMT reuses it for every subsequent browser session.

What you'll need

  • A Tailscale account — the personal Free plan at tailscale.com is plenty.
  • One device on your home network that stays online while your agents are browsing — a laptop, desktop, NAS, or Raspberry Pi all work. This becomes your exit node.

Step 1 — Install Tailscale on your exit-node device

Open tailscale.com/download on the device that will be your exit node and run the installer for its OS. After installation, sign in with the same Tailscale account you'll use for AgentPMT.

Step 2 — Enable exit-node mode

Tell Tailscale this device is willing to route traffic out to the internet for other devices on your tailnet (including the AgentPMT browser).

  • Windows / Linux: open a terminal and run:

    bash
    tailscale up --advertise-exit-node

  • macOS: in the Tailscale menu bar app, choose Exit Nodes → Run Exit Node.

  • iOS / Android / NAS: follow Tailscale's exit-node setup guide for your platform.

Then open the Tailscale admin console at login.tailscale.com/admin/machines, find your device, click Edit route settings, and tick Use as exit node. Save.

In the Tailscale admin console, find the device that will act as your exit node.
Open the device's Edit route settings menu.
Tick Use as exit node and save.

Note the device's short name in the Machine column (for example, spark-3b02) — you'll paste it into AgentPMT in Step 4.

Step 3 — Create a reusable auth key

In the Tailscale admin console, go to Settings → Keys → Generate auth key and configure:

  • Reusable: ON. Required — AgentPMT re-registers the browser against your tailnet each time it provisions a session.
  • Pre-approved: ON. Required — without this you'd have to approve the browser manually every time.
  • Ephemeral: OFF.
  • Expiration: 90 days is the default and fine to start with. You can rotate at any time without disrupting an active session.
  • Tags: optional. Leave blank unless you've configured ACL tags.

Click Generate key and copy the tskey-auth-… value. AgentPMT won't show it back after you save it, so paste it now.

In Settings → Keys, choose Generate auth key.
Make sure the key is Reusable and Pre-approved, then generate it.

Step 4 — Connect the credential in AgentPMT

In the AgentPMT dashboard, go to Credentials → Add → Tailscale Browser Egress and fill in:

  • Tailscale auth key: the tskey-auth-… value from Step 3.
  • Exit node name: the short name from Step 2 (for example, spark-3b02).
  • Auth key expires on: the date you set in Step 3, formatted as YYYY-MM-DD (for example, 2026-09-01). AgentPMT emails you 14 days, 3 days, and 1 day before this date so you have time to rotate.

Save. The credential is encrypted at rest and never displayed back.

Open the Credentials tab in the AgentPMT dashboard.
Choose Tailscale and enter the auth key, exit node name, and expiration date.

Step 5 — Assign the credential to an agent group

Add the Tailscale credential to the agent group that will run your browser sessions, then select the credential you just created.

Add the Tailscale credential to the agent group that will run your browser sessions.
Choose the Tailscale credential you just created.

Manage Authenticated Sites

AstroBrowse allows you to manage and maintain authenticated sessions across multiple websites, enabling your AI agents to access protected content and perform actions on your behalf.

Site Authentication

Login to any sites you want your agent to access using the virtual browser in your dashboard.

Add a site by logging into it through the virtual browser in your AgentPMT dashboard.

Login through the virtual browser to create a session. The session is isolated, encrypted, and saved in AgentPMT. Your passwords are not saved and are not visible to AgentPMT or your AI agent.

After you log in, the isolated session is encrypted and saved in AgentPMT — your password is never stored or visible.

Permanently revoke a website at any time to destroy the session, preventing an agent from logging in until you re-add it.

Revoking a website destroys its session, so no agent can log back in until you re-add the site.

Limit Website Access

You can limit the sites your agent can go to by setting the browsing policy. You can limit them to specific saved accounts only that you have added above, an allow list of websites, or open browsing across the internet.

Set the browsing policy to restrict your agent to saved accounts, an allow list of websites, or open browsing.

Agent Prompts

An agent can choose to use the AstroBrowse tool on their own when they need it. If your agent isn't finding the tool you can give them specific details by clicking 'AI Agent' and 'Copy prompt for LLM' on the AstroBrowse tool page.

If your agent isn't finding AstroBrowse on its own, use 'AI Agent' → 'Copy prompt for LLM' on the tool page to give it the specific details it needs.

Browser Takeover

AstroBrowse keeps the AI agent in control of the browser session by default. When the agent encounters a step it cannot complete on its own — such as a CAPTCHA or a complex verification flow — it can request human assistance and send a link that lets a person step in and finish that specific action, after which control returns to the agent.

When the agent cannot complete a step, it sends a takeover request with a link so a human can finish that action and hand control back.

Tracking and Auditing

Comprehensive tracking and auditing features ensure transparency and compliance in automated browsing activities.

Activity Logging and Audit Trails

Every action performed through AstroBrowse is logged, and those logs feed audit reports for compliance, analysis, and troubleshooting.

The AstroBrowse agent activity dashboard surfaces every logged session and action for audit and review.

Logged details include:

  • Timestamp and session details
  • Actions taken and pages visited
  • Data accessed and modified
  • Errors and exceptions