Blog

Notes from the arms race.

What actually gets a profile flagged, how agents drive a real browser, and the detector runs behind our claims.

3 min

Giving an MCP agent a browser that keeps its session

Most MCP browser tools hand the model a fresh context per call, so anything behind a login is unreachable. Here is the setup, why session persistence across tool calls is the part that matters, and what still goes wrong.