Skip to main content
Use Remote MCP when Claude, Codex, or another MCP-speaking agent should remain the Brain while BrowserPair provides scoped access to the user’s connected browser.

Scoped

Every tool call stays inside the agent key and task authority.

Durable

Task identity and effect state survive normal reconnects.

Composable

The external Brain can inspect state, delegate bounded Reflex work, request observations, and respond.

​
Connect

MCP endpoint

https://mcp.browserpair.com

Authentication

Authorization: Bearer bp_live_…
The bp_live_… token is an agent credential, not a browser-device credential. The extension never stores the agent key.

​
Tool surface

​
Start a task

browser_run requires:

Goal

What the task should accomplish.

Browser

The connected browser_id inside the key scope.

Allowed domains

One or more explicit task websites.
Optional fields are capabilities, confirmations, and max_side_effects. If capabilities are omitted, BrowserPair uses the ordinary browsing set: read, navigate, click, fill, and select.
Multiple websites can be authorized at task start. Keep the set as narrow as the workflow allows.
1

Discover

Call browser_list and select an online browser inside the key scope.
2

Create

Call browser_run with the goal, browser, websites, and required capabilities.
3

Read state

Call task_state and use only the current interaction generation.
4

Choose the next mode

Respond directly with task_respond, delegate routine work with task_subgoal, or request richer context with task_observe.
5

Finish deliberately

Report done, blocked, resolve an uncertain effect, or cancel.

​
Delegate to Reflex

task_subgoal is useful when the external Brain knows the next bounded objective but does not need to choose every click.

Bounded work

Provide a subgoal, optional success criteria, and an optional maximum step count.

Skill-aware

Optionally bind a compatible Skill so Reflex has reusable workflow knowledge.
Reflex returns control when confidence is too low, it reaches its bound, or it becomes blocked.

​
Request richer context

task_observe can request:
  • lite
  • accessibility
  • dom
  • screenshot
  • combined
with either relevant-region or full-page scope.
Observation depth does not change authority. Account observation policy, domain scope, capabilities, and sensitive-data redaction still apply.

​
Respond safely

Current action kinds include navigate, open_tab, back, click, fill, select, focus, press, scroll, wait, done, blocked, and resolve_effect.
Never invent a DOM or accessibility ref. Use only refs returned by the current BrowserPair interaction, with the matching interaction generation.

​
Idempotency

MCP request IDs are mapped to BrowserPair task idempotency keys for browser_run. Retrying the same MCP request does not create another task.

REST API

Prefer explicit HTTP if you do not need an MCP client.

Permissions

Understand the authority applied to every tool call.

Skills

Add reusable workflow knowledge to bounded Reflex work.