CloudBLOCK
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.
Overview
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.
d17a318e5003OBSERVED · 2026-10-21Install
Commands as the repository documents them. They are shown, not run.
uvx --from 'browser-use[cli]' browser-use --mcp
uv pip install 'browser-use[cli]'
uvx --from 'browser-use[cli]' browser-use --mcp
pip install browser-use-sdk
npm install browser-use-sdk
Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned | |
| claude-desktop | mentioned | |
| codex | mentioned | |
| cursor | mentioned | |
| openclaw | mentioned | |
| windsurf | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: cloud
description: >
Documentation reference for using Browser Use Cloud — the hosted API
and SDK for browser automation. Use this skill whenever the user needs
help with the Cloud REST API (v2, v3, or v4), browser-use-sdk (Python or
TypeScript), X-Browser-Use-API-Key authentication, cloud sessions,
browser profiles, profile sync, CDP WebSocket connections, stealth
browsers, residential proxies, CAPTCHA handling, webhooks, workspaces,
skills marketplace, liveUrl streaming, pricing, or integration patterns
(chat UI, subagent, adding browser tools to existing agents). Also
trigger for questions about n8n/Make/Zapier integration, Playwright/
Puppeteer/Selenium on cloud infrastructure, or 1Password vault
integration. Do NOT use this for the open-source Python library
(Agent, Browser, Tools config) — use the open-source skill instead.
allowed-tools: Read
---
# Browser Use Cloud Reference
Reference docs for the Cloud REST API, SDKs, and integration patterns.
Read the relevant file based on what the user needs.
## Choose a starter
- Hosted task in, result out: use the V4 SDK `runs` resource in `references/api-v4.md`.
- Your existing agent needs a browser: use the V4 SDK `browsers` resource or REST/CDP, then explicitly stop the browser.
- Local framework development: use the open-source `browser-use` skill, not Cloud SDK calls.
Eligible new Google, GitHub or Microsoft signups get a one-time **$1 Cloud credit**. No card required; email/password signups do not qualify. [Pricing and eligibility](https://browser-use.com/pricing.md). Use `gpt-5.6-luna` for the free starter; paid-only models need a top-up.
Reuse `BROWSER_USE_API_KEY`, or guide the user through Cloud signup and key creation. Keep keys server-side, never in prompts or client bundles.
## API & Platform
| Topic | Read |
|-------|------|
| Current v4 setup, first run, sessions, workspaces, browsers | `references/api-v4.md` |
| Legacy v2 setup, pricing, FAQ | `references/quickstart.md` |
| v2 REST API: all 30 endpoints, cURL examples, schemas | `references/api-v2.md` |
| v3 BU Agent API: sessions, messages, files, workspaces | `references/api-v3.md` |
| Sessions, profiles, auth strategies, 1Password | `references/sessions.md` |
| CDP direct access, Playwright/Puppeteer/Selenium | `references/browser-api.md` |
| Proxies, webhooks, workspaces, skills, MCP, live view | `references/features.md` |
| Parallel, streaming, geo-scraping, tutorials | `references/patterns.md` |
## Integration Guides
| Topic | Read |
|-------|------|
| Building a chat interface with live browser view | `references/guides/chat-ui.md` |
| Using browser-use as a subagent (task in → result out) | `references/guides/subagent.md` |
| Adding browser-use tools to an existing agent | `references/guides/tools-integration.md` |
## Critical Notes
- Use v4 for new hosted-agent integrations. Keep v2 or v3 only when maintaining an existing integration or using a resource not yet wrapped by the v4 SDK.
- Cloud API base URL: `https://api.browser-use.com/api/v2/` (v2), `https://api.browser-use.com/api/v3` (v3), or `https://api.browser-use.com/api/v4` (v4)
- Auth header: `X-Browser-Use-API-Key: <key>`
- Get API key: https://cloud.browser-use.com/new-api-key
- Set env var: `BROWSER_USE_API_KEY=<key>`
- Cloud SDK: `uv pip install browser-use-sdk` (Python) or `npm install browser-use-sdk` (TypeScript)
- Python v2: `from browser_use_sdk import AsyncBrowserUse`
- Python v3: `from browser_use_sdk.v3 import AsyncBrowserUse`
- Python v4: `from browser_use_sdk.v4 import BrowserUse` or `AsyncBrowserUse`
- TypeScript v2: `import { BrowserUse } from "browser-use-sdk"`
- TypeScript v3: `import { BrowserUse } from "browser-use-sdk/v3"`
- TypeScript v4: `import { BrowserUse } from "browser-use-sdk/v4"`
- SDK 3.11.3 or newer exposes `browsers.create` and `browsers.stop` in the v4 namespace, alongside the v4 REST `/browsers` resource. Always stop a browser explicitly; closing CDP does not stop billing.
- CDP WebSocket: `wss://connect.browser-use.com?apiKey=KEY&proxyCountryCode=us`Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
Eligible new Google, GitHub or Microsoft signups get a one-time **$1 Cloud credit**. No card required; email/password signups do not qualify. [Pricing and eligibility](https://browser-use.com/pricing.
curl -X POST https://api.browser-use.com/api/v2/files/sessions/<session-id>/presigned-url \
Eligible new Google, GitHub, or Microsoft signups receive a one-time $1 Cloud credit. No credit card is required. Email/password signups are not eligible; the credit does not renew. Start with the def
- Profile sync (easiest): `curl -fsSL https://browser-use.com/profile.sh | sh`
curl -fsSL https://browser-use.com/profile.sh | sh
curl -fsSL https://browser-use.com/profile.sh | sh
Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
d17a318e5003full audit observations/trust-audit/skill/browser-use__cloud.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-21 | d17a318e5003 | BLOCK | D | 69 | first audit |
Questions
What does the cloud — browser-use/browser-use skill do?
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.
Is cloud — browser-use/browser-use safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What can cloud — browser-use/browser-use access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
What do I need installed to use cloud — browser-use/browser-use?
Its own instructions reference browsers. Dependencies are pinned to exact versions.
Which assistants does cloud — browser-use/browser-use work with?
Its documentation mentions claude-code, claude-desktop, codex, cursor, openclaw and windsurf. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d17a318e5003), read on 2026-10-21. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/browser-use/cloud/)
Not your listing, or something out of date? Claim or update your listing.