Your AI agent already thinks. Now give it eyes and hands on the open web.
Your first top-up can be $1 by card, enough for about 4 typical tasks. After that, top up from $5 and pay only for what you use. One token works for A2A, MCP and the CLI.
Sign in, get past the code step and keep the session in a saved profile. If the agent gets stuck, a person can take over in the live viewer and hand control back.
Registration forms with Cloudflare Turnstile or hCaptcha and an email confirmation step, run end to end without anyone at the keyboard.
Multi-step forms, supplier portals and government sites where page.fill() misses React inputs. The agent types key by key and checks what it sees.
Read pages that refuse datacenter IPs and return the answer to your agent as text or JSON, with the session recording available for review.
Check prices, search results or availability as a visitor from a given country. Pass country=<iso2> when you start the session.
Every session returns a viewer URL. Share it with a teammate to watch the run or step in. Takeover time is not billed.
// A2A (v0.3) over plain HTTP. No SDK. const r = await fetch('https://agent.humanbrowser.cloud/a2a', { method: 'POST', headers: { Authorization: 'Bearer ' + TOKEN, 'Content-Type': 'application/json' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'message/send', params: { message: { role: 'user', parts: [ { kind: 'text', text: 'List the top 5 titles on news.ycombinator.com' } ]}} }) }); const { result: task } = await r.json(); // task: status, sessionId, viewer_url (watch it live)
Side-by-side prices: pricing comparison · vs Browserbase · vs Browser Use · vs Steel · vs Apify
Americas — United States, Canada, Mexico, Brazil, Argentina, Chile, Colombia, Peru
Western Europe — United Kingdom, Ireland, France, Germany, Netherlands, Belgium, Luxembourg, Spain, Portugal, Italy, Austria, Switzerland
Nordics — Sweden, Norway, Denmark, Finland, Iceland
Central & Eastern Europe — Romania, Poland, Czechia, Slovakia, Hungary, Bulgaria, Greece, Slovenia, Croatia, Serbia, Estonia, Latvia, Lithuania
CIS & Caucasus — Russia, Ukraine, Belarus, Kazakhstan, Moldova, Georgia, Armenia, Azerbaijan, Uzbekistan, Kyrgyzstan
Western Balkans — Bosnia & Herzegovina, North Macedonia, Albania, Montenegro
Middle East — UAE, Saudi Arabia, Israel, Turkey, Qatar
Asia-Pacific — Japan, South Korea, Singapore, India, Indonesia, Philippines, Vietnam, Thailand, Malaysia, Taiwan, Hong Kong, Australia, New Zealand
Africa — South Africa, Nigeria, Egypt, Kenya, Morocco
Home ISP addresses in 75 countries, sticky for the length of a session so a login doesn't jump between IPs.
Real desktop Chrome. Timezone, language and geolocation are set from the exit country, and navigator.webdriver is false.
Curved mouse paths, typing at 60–220 ms per key with pauses, and scrolling in uneven steps. Works with React inputs that ignore page.fill().
12 types, including reCAPTCHA v2/v3, Cloudflare Turnstile and hCaptcha, at $0.005 per solve. If automatic solving fails, a person can finish it in the viewer.
Each session has a viewer URL with a step timeline. Take control at any point; the agent continues when you hand it back.
The same token works over the A2A endpoint, the MCP server (npx -y @virixlabs/humanbrowser mcp) and the command line. Up to 10 sessions in parallel per token.
Send your token as Authorization: Bearer hb_live_… on every call. The agent card itself needs no token.
Skills listed in the agent card include:
browser_task
login_and_scrape
fill_form
scrape_url
email_verified_signup
Use tasks/get to poll, or open the viewer URL to watch. The final message carries the result.
Most agent benchmarks run curated tasks on friendly sites, with retries and no bot defenses. We publish what happens on real ones — account registration, SMS confirmation, anti-bot walls, rotating residential proxies. Here is the whole ladder, including the all-in number most vendors leave out.
Fixed, friendly task set — retries allowed, no anti-bot, no residential proxies.
The open-source agent core we build on, under easy conditions.
Upstream library benchmark — not our measurement
Our production traffic, counting only what the agent is responsible for.
Excludes proxy/network failures, user-supplied bad credentials, 404 targets and SMS/OTP verification walls.
n ≈ 2,600 · trailing 90 days · our audit log
Live sites — account registration, SMS/OTP confirmation, anti-bot walls, rotating residential proxies.
No cherry-picked sites, no retries excluded. The number we publish.
n = 3,138 · trailing 90 days · our audit log
Measured 12 May – 30 Jul 2026 from our own session audit log. We show the all-in number because it is the one you can check.
| resource | price |
|---|---|
|
browser session
billed per second · under 30 s free · takeover time free
|
$0.10 / hour |
|
agent step
ai included · gpt-6-luna default · median task ~8 steps
|
$0.02 / step |
|
captcha solving
12 types · recaptcha v2/v3 · turnstile · hcaptcha
|
$0.005 / solve |
|
residential traffic
75 countries · metered per session · same price everywhere
|
$4 / GB |
Median customer task, 132 successful tasks in September 2026 re-priced at these rates: about 8 agent steps, $0.24 all-in. Full pricing and comparison →
People type “human browser” for two different reasons. Some want a browser that looks human to anti-bot systems — the automation meaning, where the goal is to scrape, log in, or fill forms without tripping Cloudflare, DataDome or PerimeterX. Others are really after an anonymous browser or a private, Tor-style way to browse without being tracked. The two overlap on one idea — “don't look like a bot, don't look out of place” — but they solve very different problems, and it's worth being clear about which one Human Browser is.
Human Browser is built for the automation meaning. It is a hosted Chrome instance, on a real residential IP, that an AI agent (Claude, GPT, Gemini, Kimi, Cursor and any A2A-speaking framework) controls to do real work on the open web. It is not a privacy product you install to hide your own browsing — for that, see how it compares to an anonymous browser and to Tor below.
An anonymous browser hides your identity — it strips cookies, blocks trackers and masks your IP so advertisers can't follow you. A human browser instead makes an automated session look like an ordinary human visitor: real ISP IP, real fingerprint, human input timing. Human Browser does rotate residential IPs in 75 countries, so each session is unlinkable to the last — but the point is clean, unblocked automation, not personal privacy.
Tor Browser routes you through volunteer relays for anonymity, but its exit-node IPs are well-known and instantly flagged by most anti-bot systems — Cloudflare, Instagram and LinkedIn block them on sight. A human browser does the opposite: it uses a real home-ISP IP and a legitimate device fingerprint, so sites treat it as a normal person. If your goal is agents that actually get through, residential beats Tor every time.
A headless Playwright or Puppeteer script on a data-center IP gets blocked in seconds — the IP, the fingerprint and the robotic input all give it away. A human browser fixes all three at the engine level, so your agent can log in, scrape and check out on sites that would otherwise reject it. With Human Browser it's a single A2A call: no SDK, no display server and no monthly plan.
A human browser is a real browser that behaves like a person instead of a bot: curved mouse movement, human-speed typing, natural scrolling, a residential IP from a home ISP and a genuine device fingerprint. Anti-bot systems like Cloudflare, DataDome and PerimeterX read the session as an ordinary visitor. Human Browser is a hosted version of this that an AI agent drives over HTTP to read pages, log in and fill forms.
Not in the privacy-tool sense. An anonymous browser is something you install to stop trackers and hide your own browsing. Human Browser is an automation browser: it makes an agent-controlled session look like a normal visitor and can exit from residential IPs in 75 countries. It is built for web automation, not for anonymizing your personal browsing.
No. Tor Browser anonymizes you through volunteer relays, but its exit-node IPs are public and blocked by most modern sites. Human Browser uses a residential IP and a real Chrome fingerprint so sites treat it as a normal person, which is what an AI agent needs to get through Cloudflare, Instagram or LinkedIn.
No. Chrome runs in our cloud and your agent reaches it over HTTPS. A2A needs no install at all; the MCP server and the CLI are a single npx -y @virixlabs/humanbrowser command.
$0.10 per browser-hour, billed per second; sessions under 30 seconds and time while a person has taken over are not billed. $0.02 per agent step with the AI included (gpt-6-luna by default), $0.005 per captcha solve and $4 per GB of residential traffic. The median customer task from September 2026, re-priced at these rates, took about 8 agent steps and costs $0.24 all-in. Details on the pricing page.
There is no free credit. Your first top-up can be $1 by card (crypto from $5), which covers about 4 typical tasks. After that you top up a prepaid balance from $5.
Often, not always. A residential IP, a fingerprint that matches it and human-like input pass most of the checks we see, but nobody can promise every site. Across all production tasks, including bad credentials, SMS walls and proxy failures, 51% finish successfully end to end; the benchmark section above shows how that number is built. Our Cloudflare guide explains what works and what doesn’t.
75 countries, all residential, at the same $4/GB. Pass country=<iso2> when you start a session, or switch mid-session without losing the browser profile.
Human Browser is an A2A (v0.3) service. Your agent fetches the public card at https://agent.humanbrowser.cloud/.well-known/agent-card.json (no auth needed), then sends tasks to POST /a2a with your bearer token. Editor agents such as Claude Desktop, Cursor and Cline can use the MCP server instead; see MCP setup.
Up to 10 in parallel per token. If you need more, email [email protected].
There is nothing to cancel: you stop topping up, and the balance never expires. Unused balance is refundable within 7 days of the top-up; email [email protected]. See the refund policy.
Human Browser is built and run by Virix Ltd, a company registered in England (No. 16325097), 167-169 Great Portland Street, London. Questions go to a person: [email protected].
Loading secure checkout…