Scalebrowser Blog
Use cases · Oct 25, 2026 · 5 min readSubstack API: the official MCP can't publish, an agent can
Substack's official MCP server only reads publication data. What an AI agent can do on Substack in your signed-in browser, and what we measured logged out.
Use cases · Oct 25, 2026 · 6 min readWhatsApp MCP: answer your chats with an AI agent, no API
Meta's WhatsApp Business Platform is closed to general-purpose AI assistants. How an agent uses your own WhatsApp through WhatsApp Web, with 3 signed-out runs.
Use cases · Oct 25, 2026 · 5 min readZillow API: listings are invite-only, the website isn't
Zillow's listing data is invite only. How an AI agent searches zillow.com like you do instead, and what 5 signed-out runs on 11 October 2026 showed.
Infrastructure · Oct 24, 2026 · 6 min readComputer use agent or browser agent: 2 ways to see a page
Computer use agents read screenshots, browser agents read a page map: tokens per step, precision, what each can reach, and why a site detects neither by its method.
Security · Oct 23, 2026 · 8 min readAI agent security: what a signed-in agent never gets
How to limit an AI agent that works in a signed-in browser: the 3 prompt kinds it never answers, server-side limits instead of prompt rules, and keys kept out.
Infrastructure · Oct 22, 2026 · 6 min readAI agent observability: 1 still image for every browser step
How to record and audit what an AI agent did in a browser: 1 step per tool call, a still per step, stated outcomes, and proof recording leaves input timing alone.
Detection · Oct 21, 2026 · 5 min readUser agent spoofing: why 2 Chrome versions behind is a tell
User agent spoofing against client hints, TLS and Chrome's two-week release cycle: why a changed string contradicts itself and why a frozen version stands out.
Proxies · Oct 20, 2026 · 6 min readProxy detection: 4 signals that give a proxy exit away
How a site detects a proxy exit from 4 signals: IP reputation, the exit's TCP fingerprint, a WebRTC route and the clock, with our readings of September 2026.
Use cases · Oct 20, 2026 · 6 min readTikTok MCP: let an AI agent upload and answer comments
What a TikTok MCP server can do: API posts stay private until an audit and an unaudited app serves 5 users a day, while a signed-in browser posts like you.
Detection · Oct 19, 2026 · 6 min readWebGL fingerprint: why SwiftShader is a bot signal
What a WebGL fingerprint reveals about the graphics card, why SwiftShader rendering is a bot signal, and why a spoofed renderer string contradicts its own pixels.
Detection · Oct 18, 2026 · 6 min readnavigator.webdriver and CDP detection: 9 checks Reddit runs
What Reddit's 9 platform health checks read, run verbatim on 8 September 2026 against a person, a bare CDP driver and our browser, and why webdriver is 1 of 17.
Use cases · Oct 17, 2026 · 5 min readFacebook MCP: an AI agent for your groups, pages and DMs
A Facebook MCP server on Meta's Graph API cannot reach groups since 22 April 2024. What a browser signed in to your profile reads, and what 4 signed-out runs showed.