# Kernel integration

> Cloud browser infrastructure for AI agents: create and control Chrome sessions (computer-use actions, Playwright execution, file I/O, processes, replays), manage profiles, proxies, extensions and pools, and deploy and invoke hosted automation apps.

- Authentication: apiKey

## Tools (128)

- **Acquire Browser from Pool**: Long-polling endpoint to acquire a browser from the pool. Returns immediately when a browser is available, or returns 204 No Content when the poll times out.
- **Capture Browser Screenshot**: Capture a screenshot of the browser instance
- **Check Proxy Health**: Run a health check on the proxy to verify it's working. Optionally specify a URL to test reachability against a specific target.
- **Click Mouse in Browser**: Simulate a mouse click action on the browser instance
- **Create API Key**: Create a new API key within the authenticated organization.
- **Create Auth Connection**: Creates an auth connection for a profile and domain combination. If the provided profile_name does not exist, it is created automatically.
- **Create Browser Directory**: Create a new directory
- **Create Browser Pool**: Create a new browser pool with the specified configuration and size. Pooled browsers load their profile read-only: any save_changes on the profile is ignored (n...
- **Create Browser Session**: Create a new browser session from within an action.
- **Create Credential**: Create a new credential for storing login information.
- **Create Credential Provider**: Configure an external credential provider (e.g., 1Password) for automatic credential lookup.
- **Create Deployment**: Create a new deployment.
- **Create Profile**: Create a browser profile that can be used to load state into future browser sessions.
- **Create Project**: Create a new project within the authenticated organization.
- **Create Proxy**: Create a new proxy configuration in the resolved project.
- **Delete API Key**: Delete an API key. A key cannot delete itself; use a different key to delete this one.
- **Delete Auth Connection**: Deletes an auth connection and terminates its workflow. This will: - Delete the auth connection record - Terminate the Temporal workflow - Cancel any in-progres...
- **Delete Browser Directory**: Delete a directory
- **Delete Browser File**: Delete a file
- **Delete Browser Pool**: Delete a browser pool and all browsers in it. By default, deletion is blocked if browsers are currently leased. Use force=true to terminate leased browsers.
- **Delete Browser Session**: Delete a browser session by ID or name
- **Delete Credential**: Delete a credential by its ID or name.
- **Delete Credential Provider**: Delete a credential provider by its ID.
- **Delete Deployment**: Stops a running deployment and marks it for deletion. If the deployment is already in a terminal state (stopped or failed), returns immediately.
- **Delete Extension**: Delete an extension by its ID or by its name.
- **Delete Invocation Browsers**: Delete all browser sessions created within the specified invocation.
- **Delete Profile**: Delete a profile by its ID or by its name.
- **Delete Project**: Soft-delete a project. The project must be empty (no active resources).
- **Delete Proxy**: Soft delete a proxy. Sessions referencing it are not modified.
- **Download Audit Log Export Chunk**: Download an organization's audit log records for a time range as a file, for archival, compliance, or offline analysis.
- **Download Browser Directory as ZIP**: Returns a ZIP file containing the contents of the specified directory.
- **Download Browser Replay**: Download or stream the specified replay recording.
- **Download Extension Archive**: Download the extension as a ZIP archive by ID or name.
- **Download Extension from Chrome Web Store**: Returns a ZIP archive containing the unpacked extension fetched from the Chrome Web Store.
- **Download Profile Archive**: Returns a zstd-compressed tar file of the full user-data directory.
- **Drag Mouse in Browser**: Drag the mouse along a path
- **Exchange Handoff Code for JWT**: Validates the handoff code and returns a JWT token for subsequent requests. Used by the hosted login UI.
- **Execute Batch Computer Actions**: Send an array of computer actions to execute in order on the browser instance. Execution stops on the first error.
- **Execute Browser Command (Async)**: Execute a command asynchronously
- **Execute Browser Command (Sync)**: Execute a command synchronously
- **Execute Playwright Code in Browser**: Execute arbitrary Playwright code in a fresh execution context against the browser.
- **Flush Idle Pool Browsers**: Destroys all idle browsers in the pool; leased browsers are not affected.
- **Generate TOTP Code**: Returns the current 6-digit TOTP code for a credential with a configured totp_secret. Use this to complete 2FA setup on sites or when you need a fresh code.
- **Get API Key**: Retrieve an API key by ID for the authenticated organization. API keys are masked.
- **Get Auth Connection**: Retrieve an auth connection by its ID. Includes current flow state if a login is in progress.
- **Get Auth Connection Timeline**: Returns a chronological timeline of events for an auth connection — login attempts, automatic re-auth attempts, and health checks.
- **Get Browser File Info**: Get information about a file or directory
- **Get Browser Mouse Position**: Get the current mouse cursor position on the browser instance
- **Get Browser Pool**: Retrieve details for a single browser pool by its ID or name.
- **Get Browser Process Status**: Get process status
- **Get Browser Session**: Get information about a browser session.
- **Get Credential**: Retrieve a credential by its ID or name. Credential values are not returned.
- **Get Credential Provider**: Retrieve a credential provider by its ID.
- **Get Deployment**: Get information about a deployment's status.
- **Get Extension Metadata**: Get an extension's metadata (name, size, timestamps) by ID or name, without downloading the archive.
- **Get Invocation**: Get details about an invocation's status and output.
- **Get Organization Limits**: Get the organization's concurrency limit — the maximum browsers running at once across on-demand sessions and browser pool reservations — and the default per-pr...
- **Get Profile**: Retrieve details for a single profile by its ID or name.
- **Get Project**: Get a project by its ID or by its name. Names are unique within an organization.
- **Get Project Limits**: Get the resource limit overrides for a project. Null values mean no project-level cap (org limit applies).
- **Get Proxy**: Retrieve a proxy in the resolved project by ID.
- **HTTP Request via Browser Network Stack**: Sends an HTTP request through Chrome's HTTP request stack, inheriting the browser's TLS fingerprint, cookies, proxy configuration, and headers.
- **Invoke Action**: Invoke an action.
- **List API Keys**: List API keys for the authenticated organization. API keys are masked.
- **List Apps**: List applications. Optionally filter by app name and/or version label.
- **List Audit Logs**: API for searching audit logs. Limited to at most 30 day search, returns up to 100 records per page. Not recommended for bulk export.
- **List Auth Connections**: List auth connections with optional filters for profile_name and domain.
- **List Browser Extensions**: List extensions in the resolved project.
- **List Browser Files**: List files in a directory
- **List Browser Pools**: List browser pools in the resolved project.
- **List Browser Replays**: List all replays for the specified browser session.
- **List Browser Sessions**: List all browser sessions with pagination support. Use status parameter to filter by session state.
- **List Credential Provider Items**: Returns available credential items (e.g., 1Password login items) from the provider.
- **List Credential Providers**: List external credential providers configured for the organization.
- **List Credentials**: List credentials in the resolved project. Credential values are not returned.
- **List Deployments**: List deployments. Optionally filter by application name and version.
- **List Invocation Browsers**: Returns all active browser sessions created within the specified invocation.
- **List Invocations**: List invocations. Optionally filter by application name, action name, status, deployment ID, or start time.
- **List Profiles**: List profiles with optional filtering and pagination.
- **List Projects**: List projects for the authenticated organization.
- **List Proxies**: List proxies in the resolved project.
- **Move Browser File or Directory**: Move or rename a file or directory
- **Move Mouse in Browser**: Move the mouse cursor to the specified coordinates on the browser instance
- **Press Keys in Browser**: Press one or more keys on the host computer
- **Read Browser Clipboard**: Read text from the clipboard on the browser instance
- **Read Browser File**: Read file contents
- **Read Browser Telemetry Events**: Reads a page of telemetry events for the browser session. To page through results, pass the X-Next-Offset value from the previous response as offset and repeat...
- **Release Browser to Pool**: Release a browser back to the pool, optionally recreating the browser instance.
- **Rename Profile**: Update a profile's name. Names must be unique within the logical project; during the default-project migration, unscoped profiles and profiles in the org defaul...
- **Rename Proxy**: Update a proxy's name. Proxy names are not unique and are not ID-or-name addressable on this endpoint; duplicate names are allowed.
- **Resize Browser Process Terminal**: Resize a PTY-backed process terminal
- **Rotate API Key**: Rotate an API key. Issues a new key that copies the name and project of the rotated key, and schedules the rotated key to expire after a grace period so in-flig...
- **Scroll in Browser**: Scroll the mouse wheel at a position on the host computer
- **Send Signal to Browser Process**: Send signal to process
- **Set Browser Cursor Visibility**: Set cursor visibility
- **Set Browser File Permissions**: Set file or directory permissions/ownership
- **Start Browser Replay Recording**: Start recording the browser session and return a replay ID.
- **Start Login Flow**: Starts a login flow for the auth connection. Returns immediately with a hosted URL for the user to complete authentication, or triggers automatic re-auth if cre...
- **Stop Browser Directory Watch**: Stop watching a directory
- **Stop Browser Replay Recording**: Stop the specified replay recording and persist the video.
- **Stream Browser Filesystem Events**: Stream filesystem events for a watch
- **Stream Browser Logs**: Stream log files on the browser instance via SSE
- **Stream Browser Process Stdout**: Stream process stdout via SSE
- **Stream Browser Telemetry Events**: Streams browser telemetry events as a server-sent events (SSE) stream. The stream closes when the browser session terminates.
- **Stream Deployment Events**: Establishes a Server-Sent Events (SSE) stream that delivers real-time logs and status updates for a deployment.
- **Stream Invocation Events**: Establishes a Server-Sent Events (SSE) stream that delivers real-time logs and status updates for an invocation.
- **Stream Login Flow Events**: Establishes a Server-Sent Events (SSE) stream that delivers real-time login flow state updates.
- **Submit Login Field Values**: Submits field values for the login form. Poll the auth connection to track progress and get results.
- **Test Credential Provider**: Validate the credential provider's token and list accessible vaults.
- **Type Text in Browser**: Type text on the browser instance
- **Update API Key**: Update an API key's name.
- **Update Auth Connection**: Update an auth connection's configuration. Only the fields provided will be updated.
- **Update Browser Pool**: Updates the configuration used to create browsers in the pool. As with creation, save_changes on the pool profile is ignored (not rejected); pooled browsers nev...
- **Update Browser Session**: Update a browser session.
- **Update Credential**: Update a credential's name or values. When values are provided, they are merged with existing values (new keys are added, existing keys are overwritten).
- **Update Credential Provider**: Update a credential provider's configuration.
- **Update Invocation**: Update an invocation's status or output. This can be used to cancel an invocation by setting the status to "failed".
- **Update Organization Limits**: Set the default per-project concurrency cap applied to projects without an explicit override.
- **Update Project**: Update a project's name or status.
- **Update Project Limits**: Update resource limit overrides for a project. Only fields present in the request are modified.
- **Upload and Extract ZIP to Browser**: Upload a zip file and extract its contents to the specified destination path.
- **Upload Browser Extension**: Upload a zip file containing an unpacked browser extension. Optionally provide a unique name for later reference.
- **Upload Extensions to Running Browser**: Loads one or more unpacked extensions and restarts Chromium on the browser instance.
- **Upload Files to Browser**: Allows uploading single or multiple files to the remote filesystem.
- **Watch Browser Directory**: Watch a directory for changes
- **Write Browser Clipboard**: Write text to the clipboard on the browser instance
- **Write Browser File**: Write or create a file
- **Write to Browser Process Stdin**: Write to process stdin

Connect Kernel in General Input: https://www.generalinput.com/apps/kernel