SuperSurf
Let your agent do the driving.
Watch Demo
See it in action
Get Started
Install and configure
How It Works
Architecture overview
Browser Tools
30 automation tools
Job Application Automation
An AI agent filling out a real job application — unassisted, in a real browser.
One of many use cases — full form navigation, field detection, and submission with zero human input.
How It Works
Extension-based architecture. No headless browser. No synthetic profile.
Isolated-World Reads
Page reads run in an isolated world, apart from the page's own scripts. Clicks, key presses, screenshots, network capture and PDF export go through Chrome's debugger API.
Real Profile
Your cookies, history, localStorage, and installed extensions are all present. No synthetic launch flags. The browser looks and behaves like a human's browser.
CI Ready
Sideload without user interaction via Chrome's --load-extension flag. Automation-ready from the command line.
30 Browser Tools
Everything your AI agent needs to operate a real browser.
Navigation & Tabs
Create, close, and switch tabs. Navigate to URLs, go back/forward, reload. Stealth mode support for bot-sensitive sites.
3 toolsPage Interaction
Click, type, scroll, hover, drag, press keys, upload files, select dropdowns, and handle dialogs. Full input simulation.
3 toolsDOM Inspection
Accessibility tree snapshots, element lookup by text, content extraction as clean markdown, computed CSS inspection, and visibility assertions for text and elements.
6 toolsCapture & Export
Screenshots (viewport, full page, element crop), PDF export, file downloads, clickable element highlighting.
3 toolsNetwork & Console
Monitor network traffic with JSONPath filtering, replay requests, read console output. Page timings: TTFB, FCP, DOMContentLoaded and Load.
3 toolsForms & Credentials
Batch form filling and secure credential injection from environment variables. Agent never sees raw passwords.
2 toolsJavaScript Evaluation
Execute JS in page context with optional AST-based security analysis. Blocks dangerous patterns before they run.
1 toolPlaybooks & Profiles
Run, inspect and validate JavaScript playbooks. Create and manage isolated Chromium profiles. Connect, disconnect, and read live status.
7 toolsExtensions & Storage
List installed extensions, hot-reload unpacked extensions, inspect and modify localStorage and sessionStorage.
2 toolsSecurity & Privacy First
Built for developers who don't compromise on trust.
🔒 Zero Data Collection
SuperSurf doesn't collect, transmit, or store any personal data. Period.
🏠 Localhost Only
All communication happens over a WebSocket bound to 127.0.0.1. Nothing leaves your machine through the extension.
🔑 Secure Credentials
Passwords and secrets are resolved from local environment variables. The AI agent only sees variable names, never raw values. Typed char-by-char with random delays.
👀 Isolated Reads
Page reads run in an isolated world, apart from the page's own scripts.
📦 Zero Dependencies
The extension has zero runtime dependencies. Browser APIs only. No supply chain risk from third-party packages.
📑 Fully Open Source
The server and extension source is on GitHub. Apache 2.0 with a Commons Clause. Read it, audit it, fork it. No obfuscation, no hidden binaries.
Experimental Features
Toggle cutting-edge capabilities per session.
Page Diffing page_diffing
After interactions, returns only the DOM changes instead of requiring a full re-read. Includes a confidence score so your agent knows when to request a full snapshot.
Smart Waiting smart_waiting
Replaces fixed navigation delays with adaptive DOM stability detection and network idle monitoring. Your agent stops guessing when a page is ready.
Mouse Humanization mouse_humanization
Replaces instant cursor teleportation with human-like Bezier trajectories, overshoot correction, and idle micro-movements. Based on real mouse dynamics research.
Secure Eval secure_eval
Two-layer defense for browser_evaluate: server-side AST parsing blocks dangerous patterns, extension-side Proxy membrane traps blocked API access before execution.
Profile Management profiles
Isolated Chromium instances per agent session. Each profile gets its own cookies, storage, and browser state. The daemon spawns and manages Chromium processes with matchmaker-based connection routing and automatic crash recovery.
Quick Start
One command, or bring your own setup.
Install Script
Recommended for most users
Install the SuperSurf CLI
curl -fsSL https://liquidbuiltit.github.io/Supersurf/install.sh | shThe installer opens the Chrome Web Store and waits until the extension connects
Register it with your MCP client and start automating
claude mcp add supersurf -- supersurf mcpWithout the CLI
If your client already runs npx
Point your client straight at the npm package — nothing to install locally
claude mcp add supersurf -- npx supersurf-mcp@latestAny MCP-compatible client works: Claude Code, Codex, Cursor, Claude Desktop and more. For Claude Desktop, use npx as the command and supersurf-mcp@latest as the argument.
- Send the prompt above to your AI agent
- Your agent reads the skill guide and learns SuperSurf's tools
- They connect and start automating your browser