VulpineOS
Docs
Runtime
Runtime overview
Hardened browser, orchestrator, MCP
Injection filter
Strip invisible DOM before the agent
Action lock
Freeze JS, timers, reflows mid-think
Optimised DOM
93.1% measured token reduction
Operator surfaces
Web panel
Embedded operator console
TUI workbench
SSH-friendly terminal UI
MCP toolbelt
36 typed browser tools
Vulpine-Box
One-container self-host
Ecosystem
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device sessions
OpenClaw
Pre-configured agent loop
Documentation
Quickstart
First agent in 30 seconds
Architecture
Four-phase security model
MCP Reference
All 36 browser tools
Agent Scripting DSL
Declarative agent definitions
Open source
VulpineOS Runtime
GitHub, MPL 2.0
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device discovery + sessions
Integrations
OpenClaw
Pre-configured agent loop
Camoufox
Anti-detect browser core
LLM providers
30+ models, one toolbelt
Docker (Vulpine-Box)
One-click self-host
Guides
AI Agent Security
Threat model, mitigations
Prevent Prompt Injection
Hidden DOM, ARIA tricks
OpenClaw + Camoufox
End-to-end setup
Camoufox vs Chrome
Why Firefox, why patches
Engineering
Changelog
Release notes as work lands
Roadmap
Now, next, later, research
Blog
Long-form posts on the runtime
RenderLab
Optional render-diagnostics study
Community
Support
How to get help, fast
GitHub Discussions
Ideas, RFCs, support
Contributing
How to help
Security
Responsible disclosure
Star on GitHub →
Product · MCP toolbelt

36 browser tools, MCP-native.

VulpineOS exposes the browser as a 36-tool MCP server. Any LLM client that speaks Model Context Protocol — Claude, GPT, Gemini, OpenRouter, Ollama, anything — can drive a Camoufox session through the same wire.

36 typed toolsMCP-nativeCDP fallback via Foxbridge
01

Tool categories

The toolbelt splits into five categories.

01

Core (12)

navigate, snapshot, click, type, screenshot, scroll, new/close context, get_ax_tree, click/type/hover by ref.

02

Agent reliability (8)

wait, find, verify, screenshot_diff, page_settled, select_option, fill_form, page_info.

03

Interaction (3)

press_key, clear_input, get_form_errors.

04

Human realism (3)

human_click (jitter + trajectory), human_scroll (easing + pauses), human_type (character variance + corrections).

05

Extensions (10)

annotated_screenshot, click_label, get_credential, autofill, audio capture, mobile bridge, more.

02

Loop detection

The toolbelt tracks consecutive identical tool calls. After three identical calls in a row, the next response includes a warning telling the agent to try a different approach. Resets on navigation. Catches stuck loops without the agent realising it is stuck.

03

BYO model, every time

VulpineOS does not proxy your LLM calls.

You configure your provider keys in the runtime config; the agent talks to the provider directly.

We never see, log, or charge for tokens.

Operator-controlled model path
04

Full reference

See every tool, with descriptions and category notes, at /mcp-tools — a single-page reference for all 36 tools across the five categories.

05

Resources

  • Architecture deep-dive

    docs.vulpineos.com/architecture — every patch, where it lives, and why.

  • VulpineOS source

    github.com/VulpineOS/VulpineOS — runtime, patches, additions.

Self-host the runtime today.

Pull the source, build the binary, and drive your first agent. The waitlist gates the managed runtime; the open-source path is open now.

Read the docs→Star on GitHub
VulpineOS

The browser built for AI agents.
Open-source runtime, end to end.

Camoufox 146.0.1
Product
RuntimeAction lockOptimised DOMMCP toolbeltVulpine-Box
Ecosystem
Foxbridgevulpine-markmobilebridgeOpenClawCamoufox
Resources
Resources hubRoadmapChangelogBlogDocs
Community
SupportDiscussionsContributingIssuesSecurity
© 2026 VulpineOSBuilt on Camoufox · Firefox 146.0.1TermsPrivacyCookiesAcceptable useSecurity