VulpineOS

Operate browser agents on a hardened Firefox-based runtime with real operator controls, remote access, and a public extension surface for optional providers.

Engine-level guarantees

Injection filtering, action lock, optimized DOM export, trust warming

Operator surfaces

Web panel, TUI workbench, remote control plane, MCP browser tools

Extension seams

Credentials, audio, mobile bridge, visual labels, and no-op public fallbacks

What Ships Now

Surface	What it is
VulpineOS	Public browser-agent runtime with Vulpine browser orchestration, web panel, TUI, remote server, and MCP tools
Foxbridge	Public CDP-to-Firefox bridge for CDP clients
Vulpine Mark	Public set-of-mark labeling for visual browser workflows
MobileBridge for Android	Public Android device discovery and session control

Why VulpineOS Exists

Most browser-agent stacks still fail on three basic problems:

Hidden prompt-injection content reaches the model.
The page mutates between read and action.
The model burns too much context on low-value browser structure.

VulpineOS handles those problems inside the browser/runtime itself:

Layer	Purpose
Injection-Proof Filter	Removes hidden or non-visible content before it reaches the agent
Action Lock	Freezes the page while the agent is deciding
Optimized DOM Export	Compresses browser state into lower-token semantic output
Trust Warming	Builds stronger browser trust over time for long-lived identities

Operator Stack

The runtime is not just a browser fork. It ships with the surfaces needed to run agents as an actual system:

Surface	What it covers
Web Panel	Fleet view, agent sessions, approvals, proxies, contexts, logs, scripts, security, settings
TUI Workbench	SSH-friendly operator view with live conversations, contexts, and browser state
Remote Access	Served web panel and remote TUI control over the same runtime
MCP Browser Tools	38 tools for browser control, reliability checks, realism, screenshots, audio, and mobile workflows
Foxbridge	CDP bridge so compatible clients can drive the same Vulpine browser runtime

Open Runtime, Extension Surfaces

The runtime and tool interfaces are public. Optional integrations attach behind stable provider interfaces; public builds return clear unavailable responses when a provider is not attached.

See Source Availability for the exact public-source boundary.

Quick Start


curl -fsSL https://vulpineos.com/install | bash
vulpineos

Use vulpineos serve when you need a remote control plane, and vulpineos remote --url http://host:8443 --api-key KEY to connect from another machine.