VulpineOS
Docs
Runtime
Runtime overview
Hardened browser, orchestrator, MCP
Injection filter
Strip invisible DOM before the agent
Action lock
Freeze JS, timers, reflows mid-think
Optimised DOM
93.1% measured token reduction
Operator surfaces
Web panel
Embedded operator console
TUI workbench
SSH-friendly terminal UI
MCP toolbelt
36 typed browser tools
Vulpine-Box
One-container self-host
Ecosystem
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device sessions
OpenClaw
Pre-configured agent loop
Documentation
Quickstart
First agent in 30 seconds
Architecture
Four-phase security model
MCP Reference
All 36 browser tools
Agent Scripting DSL
Declarative agent definitions
Open source
VulpineOS Runtime
GitHub, MPL 2.0
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device discovery + sessions
Integrations
OpenClaw
Pre-configured agent loop
Camoufox
Anti-detect browser core
LLM providers
30+ models, one toolbelt
Docker (Vulpine-Box)
One-click self-host
Guides
AI Agent Security
Threat model, mitigations
Prevent Prompt Injection
Hidden DOM, ARIA tricks
OpenClaw + Camoufox
End-to-end setup
Camoufox vs Chrome
Why Firefox, why patches
Engineering
Changelog
Release notes as work lands
Roadmap
Now, next, later, research
Blog
Long-form posts on the runtime
RenderLab
Optional render-diagnostics study
Community
Support
How to get help, fast
GitHub Discussions
Ideas, RFCs, support
Contributing
How to help
Security
Responsible disclosure
Star on GitHub →
Product · Web panel

Operator console, embedded in the binary.

Twelve pages of operator UI compiled into the runtime. Spawn agents, watch conversations, inspect contexts, manage proxies, check security status, edit webhooks, run scripts, audit logs — all from a localhost web panel that needs no separate deploy.

Embedded React SPA48 control messagesWebSocket auth
01

What's on the panel

Twelve routes ship with the binary: Dashboard, Agents, Agent Detail, Bus, Contexts, Proxies, Security, Webhooks, Scripts, Settings, Logs, and Login. The Agent Detail view splits into separate Conversation, Action Trace, Raw Session Log, Recording, and Fingerprint tabs so operator-visible activity stays separate from sensitive action payloads.

01

Live agent status

WebSocket subscriptions to Vulpine.agentStatus and Vulpine.conversation events. Bulk pause/resume/kill.

02

Trace classification

Trace rows labelled RUN, OK, PARTIAL, TIMEOUT, FAIL, THINK, or WARN — no more flat 'system' badge.

03

Raw log redaction

Provider hidden-reasoning, signatures, bearer fragments, secrets, cookies, credential URLs all masked.

04

Sidebar runtime context

Live route, browser mode, gateway state, agent count visible across every page.

02

Auth

The panel validates access via /auth/check, keeps the access key only for the current browser session, and authenticates the agent-events WebSocket with an access subprotocol — not a tokenised URL — so keys never end up in browser history or referer logs.

03

Resources

  • Architecture deep-dive

    docs.vulpineos.com/architecture — every patch, where it lives, and why.

  • VulpineOS source

    github.com/VulpineOS/VulpineOS — runtime, patches, additions.

Self-host the runtime today.

Pull the source, build the binary, and drive your first agent. The waitlist gates the managed runtime; the open-source path is open now.

Read the docs→Star on GitHub
VulpineOS

The browser built for AI agents.
Open-source runtime, end to end.

Camoufox 146.0.1
Product
RuntimeAction lockOptimised DOMMCP toolbeltVulpine-Box
Ecosystem
Foxbridgevulpine-markmobilebridgeOpenClawCamoufox
Resources
Resources hubRoadmapChangelogBlogDocs
Community
SupportDiscussionsContributingIssuesSecurity
© 2026 VulpineOSBuilt on Camoufox · Firefox 146.0.1TermsPrivacyCookiesAcceptable useSecurity