# Scalebrowser Documentation > Scalebrowser gives each AI agent its own browser on your own machine instead of a vendor's cloud: an isolated profile with a persistent identity, a Chromium fork built and signed by us, and human input on every click and keystroke. These docs cover installing it, driving it over MCP, REST, CDP or either SDK, and how a profile keeps its identity, secrets and sessions. > Live documentation is also available over MCP at https://scalebrowser.net/docs/mcp ## Documentation — Getting started - [Browsers for AI agents on your own machine](https://scalebrowser.net/docs.md): Scalebrowser documentation: run browsers for AI agents on your own machine, one persistent identity per profile, driven over MCP, direct CDP, REST or the SDKs. - [Quickstart](https://scalebrowser.net/docs/quickstart.md): From nothing to an AI agent driving a real browser profile: install, sign in, create a profile, connect a client, and the first thing to ask it. - [Install & run](https://scalebrowser.net/docs/install.md): Install Scalebrowser on Windows with the desktop client: requirements, first start, engine provisioning, ports and configuration. - [Core concepts](https://scalebrowser.net/docs/concepts.md): The nine words the rest of this documentation uses: daemon, engine, profile, persona, seed, tier, lease, run and machine, and what each one decides for you. ## Documentation — Migrate - [Migrate from Playwright, nodriver or a cloud browser](https://scalebrowser.net/docs/migrate.md): Move existing browser automation to Scalebrowser in two steps: attach your current code to a profile over CDP, then replace the parts a page can observe. - [Migrate from Playwright or Puppeteer](https://scalebrowser.net/docs/migrate/playwright.md): Attach Playwright or Puppeteer code to a Scalebrowser profile over CDP, remove the stealth plugin, and move strict targets to direct CDP with human input. - [Migrate from nodriver or zendriver](https://scalebrowser.net/docs/migrate/nodriver.md): Attach nodriver or zendriver to a Scalebrowser profile by host and port, keep your code, and replace the script-dispatched clicks and key events a page can see. - [Migrate from Browserbase to a local browser](https://scalebrowser.net/docs/migrate/browserbase.md): Move Browserbase code to a Scalebrowser profile on your own machine: swap the session's connect URL for cdp_ws, a context for the profile, and its proxies for the profile's. - [Migrate from browser-use](https://scalebrowser.net/docs/migrate/browser-use.md): Run a browser-use agent in a Scalebrowser profile by its CDP address, or hand the browser to your coding agent over MCP and let it do the driving. ## Documentation — Drive a profile - [MCP server](https://scalebrowser.net/docs/agents/mcp-server.md): The MCP tools an AI agent uses to see and operate a page inside a Scalebrowser profile: connecting the server, the tool set, and the page map it works from. - [Tool reference](https://scalebrowser.net/docs/agents/tools.md): Every MCP tool the daemon can serve, grouped by the profile it belongs to, with what each one does and which of them change something. - [Which clients work](https://scalebrowser.net/docs/agents/mcp-clients.md): The MCP clients that can drive a Scalebrowser profile: the ones that run on your machine and reach the daemon directly, and the ones in somebody else's cloud that need a relay. - [Claude Code and Claude Desktop MCP setup](https://scalebrowser.net/docs/agents/mcp-clients/claude.md): Add an MCP server to Claude Code with claude mcp add over HTTP, and to the Claude desktop app over stdio, with a local browser server as the example. - [Cursor MCP setup: add an MCP server](https://scalebrowser.net/docs/agents/mcp-clients/cursor.md): Add an MCP server to Cursor with mcp.json, for one project or for all: the url and headers entry, where to check it loaded, and the MCP Logs. - [Codex MCP config: config.toml and auth](https://scalebrowser.net/docs/agents/mcp-clients/codex.md): Add an MCP server to OpenAI Codex: the config.toml table, a bearer token read from an environment variable, codex mcp add, and the errors when it fails to load. - [ChatGPT MCP connector for a local browser](https://scalebrowser.net/docs/agents/mcp-clients/chatgpt.md): Connect ChatGPT to an MCP server on your own machine: why a loopback address is out of reach from OpenAI's cloud, and the two ways across. - [GitHub Copilot MCP setup in VS Code](https://scalebrowser.net/docs/agents/mcp-clients/copilot.md): Add an MCP server to GitHub Copilot in VS Code: the mcp.json entry with a token prompt, MCP: List Servers, and what to check when the tools are missing. - [Antigravity MCP setup: add an MCP server](https://scalebrowser.net/docs/agents/mcp-clients/antigravity.md): Add an MCP server to Google Antigravity: mcp_config.json with serverUrl, agy mcp add, why the token must be literal, and how to see it loaded. - [Remote access](https://scalebrowser.net/docs/agents/remote.md): Reach the MCP server from a chat service that runs in someone else's cloud: which services actually work, how to set a connection up, and the six rules that keep the relay from being a way into your machine. - [WSL & containers](https://scalebrowser.net/docs/agents/wsl-and-containers.md): Connect an agent that runs in WSL, a devcontainer or on another machine to a Scalebrowser daemon on Windows: why localhost does not reach it, and what does. - [Lovable MCP setup: custom MCP connectors](https://scalebrowser.net/docs/agents/integrations/lovable.md): Add a custom MCP server to Lovable: the connector form, why the web app cannot reach a local server, and the desktop app route that can. ## Documentation — What an agent can do - [Tasks & memory](https://scalebrowser.net/docs/agents/tasks.md): Two things a profile carries between agents: standing instructions in a PROFILE.md, and a task list with a claim that stops two agents doing the same work twice. - [Workflows](https://scalebrowser.net/docs/agents/workflows.md): Record a stretch of ordinary agent work and replay it later: what a stored routine deliberately does not contain, and why two runs of the same routine never share a timeline. - [Activity & runs](https://scalebrowser.net/docs/agents/runs.md): What your agents are doing right now and whether the last piece of work reached its goal: the run, its step trail, the outcome rules, and why an outcome is never guessed. - [Videos of agent runs](https://scalebrowser.net/docs/agents/videos.md): What the agent did, as a film: recording without the page noticing, rendering into a finished video, presets for how it looks, and a share link that can be revoked. - [Verification challenges](https://scalebrowser.net/docs/agents/verification.md): What an agent can and cannot get through: the measured status per challenge type, the four measuring tools that make it possible, and why there is no captcha-solving service in this product. ## Documentation — Build with the API - [REST API](https://scalebrowser.net/docs/rest.md): The Scalebrowser daemon's native REST API: authentication, the profile, group and proxy endpoints, events, and the error codes a client has to handle. - [Events](https://scalebrowser.net/docs/events.md): The daemon's live stream over SSE or WebSocket: the 23 event types, why every frame is numbered, and how a reader notices it fell behind. - [Errors](https://scalebrowser.net/docs/errors.md): Every failure a client has to handle: the numeric REST codes with their HTTP status and remedy, and the MCP tool faults with the phase, effect and retryable fields that say whether an action landed. - [SDKs](https://scalebrowser.net/docs/sdks.md): The Python and Node clients for the Scalebrowser daemon: a typed REST client plus a direct-CDP driver, in the two languages the daemon ships clients for. - [CDP endpoint, session and page attach](https://scalebrowser.net/docs/cdp.md): Drive a browser over the Chrome DevTools Protocol: get the WebSocket URL, attach to a page with Target.getTargets and Target.attachToTarget, or use the SDKs. - [AdsPower adapter](https://scalebrowser.net/docs/adspower.md): The AdsPower-compatible local API: how to switch it on, which calls it answers, and what an existing AdsPower script has to change. ## Documentation — Profiles & fleet - [Profiles & personas](https://scalebrowser.net/docs/profiles.md): What a profile is made of: the fields you set, the identity drawn from its seed, which values are taken from your machine rather than invented, and what may be changed after creation. - [Groups, presets & bulk](https://scalebrowser.net/docs/fleet.md): Turning one profile into fifty: groups as labels, presets as stored templates, the bulk endpoints and their partial-failure shape, and how an agent leases a whole fleet at once. - [Proxies & exits](https://scalebrowser.net/docs/proxies.md): Store a proxy, check it, and understand the exit rule: how one bought gateway becomes many stable addresses, why an address belongs to one profile, and what the guard does while a browser runs. - [Extensions](https://scalebrowser.net/docs/extensions.md): Bring your own Chrome extensions: what the daemon accepts and refuses at upload, how a package reaches a profile, why every profile gets its own copy, and the three ways this quietly does nothing. - [Profile sync](https://scalebrowser.net/docs/sync.md): Move a profile between your machines through the control plane, encrypted with a key the server never sees: what travels, what deliberately does not, and how ownership works. - [The management app](https://scalebrowser.net/docs/ui.md): The interface the daemon serves: the seven screens, what each one is for, and the settings that exist nowhere else because they belong to this machine rather than to your account. ## Documentation — Identity & secrets - [Secrets](https://scalebrowser.net/docs/secrets.md): How an agent uses a password or a token without ever reading it: what the daemon catches, what it replaces, where a value may be typed, and how to reach one from a command line. - [Credentials & logins](https://scalebrowser.net/docs/credentials.md): Store a login against a profile so an agent can sign in without ever holding the password: one account per service, two-factor codes included, and the vault password that guards reading one back. - [Cookies & sessions](https://scalebrowser.net/docs/sessions.md): Being signed in, and staying that way: what an agent may see of a cookie jar, why a value never reaches it, and how a whole session moves between profiles as an encrypted bundle. - [Passkeys](https://scalebrowser.net/docs/passkeys.md): Signing in without a password: where a profile's passkeys live, why they survive a browser that dies badly, why nothing is ever silently deleted, and the two tools an agent gets. - [Email inboxes](https://scalebrowser.net/docs/inboxes.md): Where a profile's confirmation codes arrive: bind an address per profile over IMAP or your own command, and let an agent read the code without opening a mailbox in the browser. ## Documentation — How profiles hold up - [Coherence & proxies](https://scalebrowser.net/docs/coherence.md): What the daemon checks before a profile is allowed to launch: timezone and locale against the proxy exit, the geo modes, and how proxy credentials are handled. - [Human input](https://scalebrowser.net/docs/behaviour.md): How pointer paths, typing rhythm and press-and-hold are produced from measured human distributions, and what an agent can and cannot control about them. - [The engine](https://scalebrowser.net/docs/engine.md): The signed Chromium build profiles run in: what is verified before it may launch, the local registry you drive from the command line, delta updates, and the two things it deliberately does not carry. - [Test your setup](https://scalebrowser.net/docs/verify.md): Four ways to measure what a page really sees: the account-free check pages, the built-in detector audit against a running profile, the proxy check, and the metrics endpoint. ## Documentation — Run the daemon - [Configuration](https://scalebrowser.net/docs/ops/configuration.md): Every setting the daemon reads: the four layers and which wins, the TOML blocks with their defaults, and the environment variables that override them. - [CLI reference](https://scalebrowser.net/docs/ops/cli.md): Everything the daemon binary does from a command line: the flags that override configuration, and the subcommands for the engine registry, sync and the Windows service. - [Monitoring & metrics](https://scalebrowser.net/docs/ops/monitoring.md): What to watch on a running daemon: the health probes, the metrics endpoint and its probe states, the opt-in Prometheus surface, and the event stream as the live signal. - [Troubleshooting](https://scalebrowser.net/docs/ops/troubleshooting.md): The failures that look like something else: a launch that is refused, a client that cannot connect, an agent that says a tool does not exist, and a profile that behaves differently from yesterday. ## Documentation — Your account - [Plans & limits](https://scalebrowser.net/docs/account/plans.md): What a subscription buys: browsers running at the same time and machines, counted across your whole account, plus what happens when a payment fails or a plan ends. - [Machines & sign-in](https://scalebrowser.net/docs/account/machines.md): Every install belongs to your account: how a machine is paired, why one profile may only run on one machine at a time, how a takeover works, and what happens when a machine is removed. ## Documentation — Releases - [Changelog](https://scalebrowser.net/docs/changelog.md): Released versions of the Scalebrowser desktop client and the signed engine, newest first. ## Blog - [Challenges](https://scalebrowser.net/blog/category/challenges.md): Captchas and challenge pages an AI agent meets on real sites: which ones it solved, how many runs it took and where it failed. - [Detection](https://scalebrowser.net/blog/category/detection.md): How websites tell an automated browser from a person: the TLS handshake, the fingerprint, mouse movement and the test sites that read them. - [Infrastructure](https://scalebrowser.net/blog/category/infrastructure.md): What an AI agent needs from the browser it drives: where the browser runs, how the model talks to it over MCP and what each step costs in tokens. - [Measurements](https://scalebrowser.net/blog/category/measurements.md): What we measured about browsers, detectors and the challenges agents run into, with the dates, the run counts and the results that went against us. - [Proxies](https://scalebrowser.net/blog/category/proxies.md): How a proxy exit decides what a site thinks of an AI agent's browser: address class, reputation, the exit's TCP stack and the timezone and language behind it. - [Security](https://scalebrowser.net/blog/category/security.md): What an AI agent in a signed-in browser can reach: prompt injection, secrets, session cookies, the MCP server and the local ports beside the browser. - [Sign in](https://scalebrowser.net/blog/category/sign-in.md): How an AI agent signs in and stays signed in: stored passwords, second factors, emailed codes, passkeys and sessions that survive the end of a run. - [Stealth tools](https://scalebrowser.net/blog/category/stealth-tools.md): The free tools people use to hide browser automation, reviewed one by one: what each one patches, what it leaves open and what we measured. - [Use cases](https://scalebrowser.net/blog/category/use-cases.md): What an AI agent does on LinkedIn, Reddit, X, Instagram, job portals and tools with no API when it works in its own signed-in browser. - [Videos](https://scalebrowser.net/blog/category/videos.md): How an agent's browser run becomes a finished video: recording the page cannot notice, camera and cursor, voice, subtitles, GIFs and the label for an AI voice. - [Proxy detection: 4 signals that give a proxy exit away](https://scalebrowser.net/blog/proxy-detection.md): How a site detects a proxy exit from 4 signals: IP reputation, the exit's TCP fingerprint, a WebRTC route and the clock, with our readings of September 2026. - [TikTok MCP: let an AI agent upload and answer comments](https://scalebrowser.net/blog/tiktok-mcp.md): What a TikTok MCP server can do: API posts stay private until an audit and an unaudited app serves 5 users a day, while a signed-in browser posts like you. - [WebGL fingerprint: why SwiftShader is a bot signal](https://scalebrowser.net/blog/webgl-fingerprint.md): What a WebGL fingerprint reveals about the graphics card, why SwiftShader rendering is a bot signal, and why a spoofed renderer string contradicts its own pixels. - [navigator.webdriver and CDP detection: 9 checks Reddit runs](https://scalebrowser.net/blog/webdriver-cdp-detection.md): What Reddit's 9 platform health checks read, run verbatim on 8 September 2026 against a person, a bare CDP driver and our browser, and why webdriver is 1 of 17. - [Facebook MCP: an AI agent for your groups, pages and DMs](https://scalebrowser.net/blog/facebook-mcp.md): A Facebook MCP server on Meta's Graph API cannot reach groups since 22 April 2024. What a browser signed in to your profile reads, and what 4 signed-out runs showed. - [Slider captcha: measure the gap instead of guessing](https://scalebrowser.net/blog/slider-captcha.md): How an AI agent solves a slider captcha by measuring the gap first: GeeTest v3 at 112 pixels in one drag, GeeTest v4 in 2 of 2 runs, the rotation variant not at all. - [Playwright storage state: what a persistent profile keeps](https://scalebrowser.net/blog/session-persistence.md): What Playwright's storage state saves in 2026, the 4 things a restored state still lacks next to a persistent profile, and how a session moves between machines. - [Permission prompts in automation: 14 kinds a browser draws](https://scalebrowser.net/blog/permission-prompts.md): Why automation cannot see Chrome's permission prompts, which 14 kinds a browser draws beside the page, and which 3 an AI agent should never answer. - [Font fingerprinting: 130 of 187 fonts drawn but not listed](https://scalebrowser.net/blog/font-fingerprinting.md): Font fingerprinting compares the fonts a browser lists with the fonts it draws. Our persona list left 130 of 187 families unlisted; voices follow the same rule. - [AI job applications: Workday wants an account by step 3](https://scalebrowser.net/blog/ai-job-applications.md): What an AI agent meets when it applies to jobs: we opened real postings on Greenhouse, Lever, Workday, LinkedIn, Indeed and Upwork and counted every step. - [Directory submission: 100 sent, 32 live, 9 followed links](https://scalebrowser.net/blog/directory-submission.md): We collected 1,166 directories and lists, dropped 597, and let an AI agent submit 100. Which entries went live, which links count and what it cost. - [Temporary email for verification: 1 address per profile](https://scalebrowser.net/blog/email-verification-codes.md): Why temporary email fails for agent sign-ups, and how a catch-all domain gives every profile 1 address of its own, read outside the browser within 60 seconds. - [Facebook Marketplace API doesn't exist: find deals anyway](https://scalebrowser.net/blog/facebook-marketplace-api.md): Facebook Marketplace has no public API for buyers or sellers. What an AI agent does instead: search, watch for deals, list items, and what a visitor sees signed out. - [Instagram MCP: post and reply with an AI agent, no API](https://scalebrowser.net/blog/instagram-mcp.md): What an Instagram MCP server can do: the official API covers professional accounts only, 100 posts in 24 hours, and a signed-in browser covers any account. - [LinkedIn MCP: let an AI agent work LinkedIn without the API](https://scalebrowser.net/blog/linkedin-mcp.md): How an AI agent works LinkedIn through an MCP server: what the official API allows, what a browser signed in as you reaches, and what we measured. - [Market research AI misses Reddit and X: 0 of 7 links read](https://scalebrowser.net/blog/market-research-ai.md): Why AI deep research misses Reddit, X and LinkedIn, and what an agent in a browser signed in as you reads instead: 4 of 4 Reddit threads in our test. - [Midjourney API: why every one you find is unofficial](https://scalebrowser.net/blog/midjourney-api.md): Midjourney grants an API only in rare cases. What the unofficial APIs are, how an AI agent works the Midjourney website, and what we measured on 11 October 2026. - [Reddit MCP: let an AI agent read and post on Reddit](https://scalebrowser.net/blog/reddit-mcp.md): Three ways an AI agent reads Reddit through MCP, what the Data API costs, and what a signed-in browser read in our run of 10 threads on 11 October 2026. - [Reddit monitoring: 125 posts, 7 matches, 1 worth answering](https://scalebrowser.net/blog/reddit-monitoring.md): Which Reddit monitoring tools are left in 2026, how an AI agent watches five subreddits and reads each match, and what two rounds on 11 October 2026 found. - [Suno API: behind a sign-in, so how do agents make songs?](https://scalebrowser.net/blog/suno-api.md): Suno shows an API sign-in page and no public docs. What unofficial wrappers do, and how an AI agent makes songs on the Suno website, measured on 11 October 2026. - [X API pricing in 2026: 10,000 post reads now cost 50 USD](https://scalebrowser.net/blog/x-api-pricing.md): What the X API costs in 2026: 0.005 USD per post read, 0.015 to create one, a 3 million read cap, and what a logged-out browser agent reads for nothing. - [X MCP: let an AI agent research and post on X](https://scalebrowser.net/blog/x-mcp.md): How an AI agent searches, reads and posts on X through an MCP server: the paid API at 0.005 USD per read, xAI's X Search, or a browser signed in to you. - [Can an automated browser sign in with a passkey?](https://scalebrowser.net/blog/passkeys-automation.md): How an automated browser signs in with a passkey: what real machines answer, what Chrome's virtual authenticator gives away, and why the time has to vary. - [PerimeterX press and hold: 2 presses, 1 call](https://scalebrowser.net/blog/perimeterx-press-and-hold.md): How the HUMAN (PerimeterX) press and hold works, why one long press fails, and how an AI agent passed it on Microsoft's sign-up in 3 runs on 4 August 2026. - [How does Cloudflare bot management detect an agent?](https://scalebrowser.net/blog/cloudflare-bot-detection.md): What Cloudflare's bot management reads before it challenges a browser: the 1 to 99 score, JA4, JavaScript detections, behaviour, and what stealth plugins miss. - [DataDome detection: 1 header turned a block into a login](https://scalebrowser.net/blog/datadome-detection.md): What DataDome reacted to on PayPal in 4 runs on 12 August 2026: one Accept-Language header decided captcha or login, while the block page blamed the IP. - [Chromium fork for automation: 29 patches instead of a script](https://scalebrowser.net/blog/chromium-fork.md): Why hiding automation takes a patched Chromium rather than a script, and what a fork costs to keep: releases every two weeks, rebased patches, signing, rollback. - [browser-use alternative: 1 identity per profile](https://scalebrowser.net/blog/browser-use-alternative.md): browser-use compared with a fixed identity per profile: what Browser Use Cloud randomises per session, what a profile keeps, and 5 USD per GB of proxy traffic. - [Audio captcha: transcribed locally in 1.3 seconds](https://scalebrowser.net/blog/audio-captcha.md): How an AI agent answers the audio captcha of reCAPTCHA v2 on its own machine: a local Whisper tiny model, 1.3 seconds, no speech service and no model shipped. - [Automate 2FA for an AI agent: 6 digits every 30 seconds](https://scalebrowser.net/blog/automate-2fa-totp.md): How an AI agent passes two-factor authentication: the 6-digit TOTP code computed per RFC 6238 inside its profile, and why cloud guides say to disable 2FA. - [Accessibility tree for LLM agents: 462 tokens per step](https://scalebrowser.net/blog/accessibility-tree.md): What the accessibility tree is, why LLM agents read it instead of HTML, what a page map built from it costs per step, and how it catches a page's error message. - [Cloud browser or local browser for AI agents?](https://scalebrowser.net/blog/cloud-browser.md): What a cloud browser for AI agents costs at 5 vendors: session caps, hour and gigabyte meters, GPU and fingerprint, set against a browser on your own machine. - [Browser agents: how sites detect them and how to pass](https://scalebrowser.net/blog/ai-agent-browser.md): What a browser agent is, the 4 layers a site reads to detect the browser it drives, which stacks exist today, and what stops an agent after detection. - [AI agent login: the 4 walls before a signed-in session](https://scalebrowser.net/blog/ai-agent-login.md): How an AI agent signs in to websites and stays signed in: the second factor, the emailed code, the passkey and the lost session, each with what we measured. - [Behavioral biometrics: 11 mouse measures against 120 people](https://scalebrowser.net/blog/behavioral-biometrics.md): How behavioral biometrics tell an automated mouse and keyboard from a person, the 11 pointer measures we track against 120 people, and the 5 still outside. - [Bot detection: 4 layers that flag an agent's browser](https://scalebrowser.net/blog/bot-detection.md): How bot detection reads a browser on 4 layers before and after the page loads, how the layers add up to one verdict, and where our own runs went wrong. - [Browser fingerprint test sites: what 8 detectors check](https://scalebrowser.net/blog/browser-fingerprint-test.md): 8 browser fingerprint test sites and what each one reads, how long each takes, and the results that flag even a real Chrome if the test is set up wrong. - [What browser fingerprinting reads](https://scalebrowser.net/blog/browser-fingerprinting.md): What browser fingerprinting reads, which values have to agree with each other, why a random value stands out, and how to check your own browser. - [Browser MCP servers compared: tokens per step across 6 tools](https://scalebrowser.net/blog/browser-mcp.md): Six browser MCP servers measured on live pages: tokens to see a page, tokens per step, the tool list's fixed cost, and which server fits which job. - [A Browserbase alternative on your own machine](https://scalebrowser.net/blog/browserbase-alternative.md): Browserbase compared with a browser on your own machine for AI agents: session length, billing, proxies, fingerprint, second factor and passkeys, as documented. - [Camoufox review: Firefox patches and a new device per launch](https://scalebrowser.net/blog/camoufox.md): What Camoufox's C++ Firefox patches do well, why a new fingerprint at every launch hurts a returning login, and the 2025 build 63.4% of downloads still run. - [Canvas fingerprinting: why profiles on one machine match](https://scalebrowser.net/blog/canvas-fingerprinting.md): What canvas fingerprinting reads, which parts of a machine decide the hash, and why browser profiles on one computer share it without looking fake. - [Captcha solving without a service: 18 types measured](https://scalebrowser.net/blog/captcha-solving.md): 18 challenge types an AI agent solved in its own browser on live widgets with real keys, no solving service, with run counts and the 2 that stay open. - [Chrome DevTools MCP: 393,149 tokens per Wikipedia page](https://scalebrowser.net/blog/chrome-devtools-mcp.md): Chrome DevTools MCP measured as an agent's browser: tokens per page and per step on 3 live pages, the context window it fills and what it is built for. - [Is CloakBrowser good for AI agents? Fix the seed and noise](https://scalebrowser.net/blog/cloakbrowser.md): CloakBrowser reviewed: what its 87 Chromium patches cover, its 26 of 31 benchmark result, the free and Pro builds, and which 2 defaults to change on day one. - [Cloudflare Turnstile: can an AI agent pass it?](https://scalebrowser.net/blog/cloudflare-turnstile.md): Cloudflare Turnstile measured with an AI agent on 3 live pages with production keys: tokens in 1.7 and 2.9 seconds, one variant that failed twice, and why. - [hCaptcha and AI agents: 4 of 4 solved, 0 on its own demo](https://scalebrowser.net/blog/hcaptcha.md): How an AI agent solved hCaptcha's growing-shape task by measuring frames, 4 of 4 on one site, and why hCaptcha's own demo refused the same correct answers. - [JA4 fingerprint: 1 TLS extension tells Chrome from a fork](https://scalebrowser.net/blog/ja4-tls-fingerprint.md): What the JA4 TLS fingerprint reads before any script runs, why JA3 cannot follow Chrome, and the one extension that split our Chromium build from real Chrome. - [nodriver vs undetected-chromedriver: which one to use](https://scalebrowser.net/blog/nodriver.md): nodriver against undetected-chromedriver: releases, licences, a 31 target benchmark, and the 3 things nodriver leaves to your code: profile, input, licence. - [Patchright vs Playwright: what it patches and what it leaves](https://scalebrowser.net/blog/patchright.md): Patchright is Playwright with its protocol leaks patched: what it changes, what it leaves alone, why its console goes silent, and how it did on 31 targets. - [Playwright MCP token usage: 604,785 tokens to see 1 page](https://scalebrowser.net/blog/playwright-mcp-tokens.md): Playwright MCP measured in tokens per page and per step against 5 other browser tools, with the cost curve of a session and what cuts it. - [Playwright stealth for Python and Node: what it patches](https://scalebrowser.net/blog/playwright-stealth.md): What playwright-stealth (Python) and playwright-extra (Node) patch, what a detector still sees, and what Playwright's own typing looks like to a page. - [Is puppeteer-extra-plugin-stealth still maintained?](https://scalebrowser.net/blog/puppeteer-stealth.md): The Puppeteer stealth plugin read on 22 September 2026: maintenance, what its 17 evasions change, where they stop, and which maintained tools replace it. - [reCAPTCHA v3 score test: why a 0.9 on a demo means little](https://scalebrowser.net/blog/recaptcha-v3.md): We read reCAPTCHA v3 scores on Google's demo and on a fresh key: 0.9 for every browser, even without mouse movement. Plus the token trap that fakes a 0.3. - [Stealth browsers for automation: 7 free tools compared](https://scalebrowser.net/blog/stealth-browser.md): nodriver, Patchright, Camoufox, CloakBrowser, playwright-stealth, undetected-chromedriver and the Puppeteer plugin: what each changes and how current it is. - [Canvas noise and mouse tremor: why adding noise is the tell](https://scalebrowser.net/blog/noise-is-the-tell.md): We added noise to hide two browser signals, canvas pixels and pointer paths. Both times the noise itself gave us away. The numbers, and what replaced it. ## Pages - [Scalebrowser](https://scalebrowser.net/index.md): Give each agent its own isolated browser with a persistent identity. Stay signed in, handle the captcha, type like a human, and take over whenever you want. - [Pricing](https://scalebrowser.net/pricing.md): You pay for how many browsers run at once. Every plan carries the full product and unlimited profiles. - [Download](https://scalebrowser.net/download.md): Download the Scalebrowser desktop app for Windows. macOS and Linux are coming soon. - [How detectable are you right now?](https://scalebrowser.net/check.md): Measure your own browser across the five layers where blocking happens, and see where they contradict each other. No account, no email, no cookie, no address kept. - [AI agent check](https://scalebrowser.net/ai-agent-check.md): Measures what an automation tool does rather than what the browser claims to be: typing, clicking and pointer movement, read from the structure of the input events. - [TLS fingerprint check: your JA4, JA3, HTTP/2 profile and header order](https://scalebrowser.net/check/connection.md): Your browser's TLS fingerprint as a server reads it: JA4, JA3 across two connections, the HTTP/2 profile and the header order, measured before any JavaScript runs. - [What is my user agent? The string, parsed and checked against itself](https://scalebrowser.net/check/user-agent.md): Your user agent string, what it says about browser, engine and system, and whether the header, the client hints and the connection tell the same story. - [Proxy detection test: can a site tell you are using a proxy or VPN?](https://scalebrowser.net/check/proxy.md): Five things a site can read about your connection: the type of network, your time zone, the WebRTC address, the TCP handshake and proxy headers. See which of them points to a proxy. - [Captcha test: do real captchas let your browser through?](https://scalebrowser.net/check/captcha.md): Real Cloudflare Turnstile, Google reCAPTCHA, hCaptcha and MTCaptcha captchas, each confirmed by the provider, with how long it took, whether you had to click and your reCAPTCHA v3 score. - [WebRTC leak check, and why .local names are the protection](https://scalebrowser.net/check/webrtc.md): Which addresses a peer connection reveals, measured against our own STUN helper. Obfuscated local names are the browser protecting you, not a leak. - [DNS leak check: measured with a name that never existed](https://scalebrowser.net/check/dns-leak.md): Which resolvers really look names up for you, measured against our own authoritative zone with a one-time label so no cache can answer. - [Time-zone check: name, offset and the daylight-saving rule](https://scalebrowser.net/check/timezone.md): A time zone is not just a name. This checks the offset at two dates of the year, because a name without its own daylight-saving rule was set from outside. - [Client hints: JavaScript, headers and the handshake, side by side](https://scalebrowser.net/check/client-hints.md): The high-entropy client hints on three paths at once, and whether they agree. Their absence outside Chromium is expected, not an anomaly. - [Your network: country, operator and network type](https://scalebrowser.net/check/network.md): What free datasets say about the address this page was loaded over, with the limits of each statement named. - [Measure a browser you are not sitting at](https://scalebrowser.net/check/handoff.md): For a headless run on another machine: open a one-time address with your own automation and read the report here. - [What an AI agent can do with its own browser](https://scalebrowser.net/use-cases.md): An AI agent with its own browser signs in to your accounts, uses sites with no API, keeps one profile per account and repeats work for you. - [Agents that sign in](https://scalebrowser.net/use-cases/agents-that-sign-in.md): Passwords, emailed codes and sessions that last, so the agent gets past the login and stays in. - [Tools with no API](https://scalebrowser.net/use-cases/tools-with-no-api.md): Midjourney, Zillow, an ad manager: where there is no API, or a costly one, the agent uses the website the way you do. - [Many identities](https://scalebrowser.net/use-cases/many-identities.md): One profile per account, yours, your company's and each client's, with nothing shared between them. - [Repeat work](https://scalebrowser.net/use-cases/repeat-work.md): Show the round once and the agent repeats it every time, in the profiles that are already signed in. - [Imprint](https://scalebrowser.net/legal/imprint.md): Who operates Scalebrowser, where, and how to reach them. - [Privacy](https://scalebrowser.net/legal/privacy.md): What Scalebrowser collects, why, how long it keeps it, and the rights you have. - [Terms](https://scalebrowser.net/legal/terms.md): The terms of service that govern using Scalebrowser and its plans. - [Data processing agreement](https://scalebrowser.net/legal/dpa.md): The data processing agreement between Scalebrowser and the customers whose data it processes.