Skip to main content
Production browser jobs need two separate boundaries:
  • Policy controls what the browser is allowed to do.
  • Proxy controls the network path used by browser traffic.
Use both when the job has a known target and a required egress route. Do not treat either one as permission to access a site, bypass a blocker, or ignore site rules.

Support matrix

SDK browser job

In deterministic browser control, the application owns the target, extraction, validation, and cleanup.

SDK agent job

In browser-agent work, the model chooses browser steps inside the browser boundary you configured.

MCP policy

MCP policy is useful when a coding agent creates browsers through manage_browsers. It is not a proxy setting. If an MCP workflow needs a proxied browser, create that browser through SDK, CLI, or REST first, then reuse the browser ID where the workflow supports it.

Failure handling

Reference: policy reference, proxy reference, security and secrets, and errors and retries.