VulpineOS
Docs
Runtime
Runtime overview
Hardened browser, orchestrator, MCP
Injection filter
Strip invisible DOM before the agent
Action lock
Freeze JS, timers, reflows mid-think
Optimised DOM
93.1% measured token reduction
Operator surfaces
Web panel
Embedded operator console
TUI workbench
SSH-friendly terminal UI
MCP toolbelt
36 typed browser tools
Vulpine-Box
One-container self-host
Ecosystem
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device sessions
OpenClaw
Pre-configured agent loop
Documentation
Quickstart
First agent in 30 seconds
Architecture
Four-phase security model
MCP Reference
All 36 browser tools
Agent Scripting DSL
Declarative agent definitions
Open source
VulpineOS Runtime
GitHub, MPL 2.0
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device discovery + sessions
Integrations
OpenClaw
Pre-configured agent loop
Camoufox
Anti-detect browser core
LLM providers
30+ models, one toolbelt
Docker (Vulpine-Box)
One-click self-host
Guides
AI Agent Security
Threat model, mitigations
Prevent Prompt Injection
Hidden DOM, ARIA tricks
OpenClaw + Camoufox
End-to-end setup
Camoufox vs Chrome
Why Firefox, why patches
Engineering
Changelog
Release notes as work lands
Roadmap
Now, next, later, research
Blog
Long-form posts on the runtime
RenderLab
Optional render-diagnostics study
Community
Support
How to get help, fast
GitHub Discussions
Ideas, RFCs, support
Contributing
How to help
Security
Responsible disclosure
Star on GitHub →
Product · Docker (Vulpine-Box)

Self-host with one container.

Pre-built Camoufox plus the Go runtime in a single multi-stage image. Persistent volumes for the vault and browser profiles. Designed to survive on a VPS or in your CI runner with nothing but Docker.

Multi-stage imagePersistent volumesSingle command
01

Run it

Set a shared key, bring the stack up, point your laptop at it. Compose serves plain HTTP on port 8443 by default; mount VULPINE_TLS_CERT and VULPINE_TLS_KEY to terminate TLS in-container.

02

Footprint

The image is built from Ubuntu 22.04 plus GTK / X11, the prebuilt Camoufox binary, the Go runtime (CGO_ENABLED=0), and Xvfb. Memory limit defaults to 4GB. Volumes for vault and profiles persist across restarts so your identities survive deploys.

03

Quick start

  1. 01export VULPINE_API_KEY=$(openssl rand -hex 32)
  2. 02docker compose up -d
  3. 03vulpineos remote panel --url http://your-host:8443 --api-key $VULPINE_API_KEY
04

Resources

  • Architecture deep-dive

    docs.vulpineos.com/architecture — every patch, where it lives, and why.

  • VulpineOS source

    github.com/VulpineOS/VulpineOS — runtime, patches, additions.

Self-host the runtime today.

Pull the source, build the binary, and drive your first agent. The waitlist gates the managed runtime; the open-source path is open now.

Read the docs→Star on GitHub
VulpineOS

The browser built for AI agents.
Open-source runtime, end to end.

Camoufox 146.0.1
Product
RuntimeAction lockOptimised DOMMCP toolbeltVulpine-Box
Ecosystem
Foxbridgevulpine-markmobilebridgeOpenClawCamoufox
Resources
Resources hubRoadmapChangelogBlogDocs
Community
SupportDiscussionsContributingIssuesSecurity
© 2026 VulpineOSBuilt on Camoufox · Firefox 146.0.1TermsPrivacyCookiesAcceptable useSecurity