Every action is a single API call. Every egress request is checked against your allowlist.
Non-root user, read-only rootfs, dropped Linux capabilities, RuntimeDefault seccomp profile.
Set the domains each session can reach. Anything outside the list is refused at the proxy.
Agents see a structured tree of roles, names, and values. No raw HTML, no raw CDP.
Element references expire with the session. No persistent IDs to leak across runs.
navigate, observe, click, fill, select, press, scroll, wait_for, screenshot. Nothing else.
One Telnyx API key covers Agent Browser, Web Search, and Inference. One bill.
Create a session, navigate to a page, observe the result. The full API surface fits in a few hundred lines.