Every action is a single API call. Every egress request is checked against your allowlist.
Hardened container
Non-root user, read-only rootfs, dropped Linux capabilities, RuntimeDefault seccomp profile.
Egress allowlist
Set the domains each session can reach. Anything outside the list is refused at the proxy.
Accessibility tree
Agents see a structured tree of roles, names, and values. No raw HTML, no raw CDP.
Session-scoped refs
Element references expire with the session. No persistent IDs to leak across runs.
Closed action set
navigate, observe, click, fill, select, press, scroll, wait_for, screenshot. Nothing else.
One integration
One Telnyx API key covers Agent Browser, Web Search, and Inference. One bill.
Create a session, navigate to a page, observe the result. The full API surface fits in a few hundred lines.