VulpineOS
Docs
Runtime
Runtime overview
Hardened browser, orchestrator, MCP
Injection filter
Strip invisible DOM before the agent
Action lock
Freeze JS, timers, reflows mid-think
Optimised DOM
93.1% measured token reduction
Operator surfaces
Web panel
Embedded operator console
TUI workbench
SSH-friendly terminal UI
MCP toolbelt
36 typed browser tools
Vulpine-Box
One-container self-host
Ecosystem
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device sessions
Agent runtime
Native browser-agent loop
Documentation
Quickstart
First agent in 30 seconds
Architecture
Four-phase security model
MCP Reference
All 36 browser tools
Agent Scripting DSL
Declarative agent definitions
Open source
VulpineOS Runtime
GitHub, MPL 2.0
Foxbridge
CDP ↔ Juggler / WebDriver BiDi
vulpine-mark
Set-of-Mark visual labelling
mobilebridge
Android device discovery + sessions
Integrations
Vulpine browser
Firefox-based browser core
LLM providers
30+ models, one toolbelt
Docker (Vulpine-Box)
One-click self-host
Guides
AI Agent Security
Threat model, mitigations
Prevent Prompt Injection
Hidden DOM, ARIA tricks
Vulpine Browser Setup
End-to-end setup
Vulpine Browser vs Chrome
Why Firefox, why patches
Engineering
Changelog
Release notes as work lands
Roadmap
Now, next, later, research
Blog
Long-form posts on the runtime
Community
Support
How to get help, fast
GitHub Discussions
Ideas, RFCs, support
Contributing
How to help
Security
Responsible disclosure
Star on GitHub →
Integration · Vulpine browser

Vulpine browser, hardened for AI agents.

Vulpine browser is the fingerprint-coherent Firefox runtime at the core of VulpineOS, built from the Camoufox lineage. We extend it with prompt-injection filtering, deterministic execution, token-optimized DOM export, and identity warming — turning a stealth browser into an agent-grade runtime.

Firefox 146.0.1MPL 2.0Self-hosted
01

What the browser layer is

Vulpine browser is based on Firefox 146.0.1 and the Camoufox automation lineage. It rewrites the parts of Firefox that bot detection systems probe — WebGL parameters, font metrics, screen properties, navigator properties — to produce an OS-coherent, indistinguishable-from-real fingerprint.

It's MPL 2.0 licensed, like upstream Firefox. VulpineOS uses it as the rendering and execution surface for every agent.

02

What VulpineOS adds on top

Four security primitives, all applied to the Vulpine browser base. Each one patches Firefox internals where an extension or wrapper layer can't reach.

01

Phase 1 — Injection-proof accessibility

Strips invisible DOM nodes from the accessibility tree before they reach the agent. Stops indirect prompt injection at the DOM layer, not at the model.

02

Phase 2 — Action lock

Freezes the page completely while the agent is thinking. No JS, no timers, no reflows. Implemented at the C++ docShell level so it can't be bypassed by page script.

03

Phase 3 — Optimized DOM export

Token-compressed semantic snapshot for LLM context. Real benchmark: 93.1% reduction vs Chrome's standard accessibility tree, 74.6% vs Playwright's ariaSnapshot.

04

Phase 4 — Trust warming

Background service that warms browser profiles with human-like interactions while the agent is idle. Off by default; opt-in for long-lived identities.

03

Why a fork instead of an extension

All four primitives patch C++ inside the Firefox core: nsDocShell, the accessibility tree, the refresh driver. Action lock alone is impossible from a WebExtension — you can't suspend the JS event loop from JS. The fork lets us put security where it belongs: below the agent's reach.

VulpineOS contributes upstream where it makes sense. Patches that aren't operator-specific (fingerprint coherence improvements, rendering bug fixes) get sent to Camoufox. The operator-specific ones (action lock, injection filter) live in the VulpineOS patch set.

04

Quick start

  1. 01Install the runtime — curl -fsSL https://vulpineos.com/install | bash. Source builds still pull Firefox 146.0.1, apply Vulpine patches, and produce a Vulpine browser binary.
  2. 02Or pull Vulpine-Box — docker compose up -d. The container ships a pre-built Vulpine browser + the Go runtime in one image.
  3. 03Run vulpineos. Setup wizard handles model providers; the runtime auto-detects the bundled Vulpine browser binary.
05

Resources

  • Architecture deep-dive

    docs.vulpineos.com/architecture — every patch and how it wires up.

  • Vulpine Browser vs Chrome

    docs.vulpineos.com/camoufox-vs-chrome — why Firefox, why patches.

  • Upstream Camoufox

    github.com/CloverLabsAI/camoufox — base fork that VulpineOS patches.

  • VulpineOS source

    github.com/VulpineOS/VulpineOS — runtime, patches, and additions.

Self-host an agent-grade Firefox.

Install the runtime, build from source, or run the container. Vulpine browser plus the four VulpineOS phases, end to end.

Star on GitHub →Read the docs
VulpineOS

The browser built for AI agents.
Open-source runtime, end to end.

Vulpine browser 146.0.1
Product
RuntimeAction lockOptimised DOMMCP toolbeltVulpine-Box
Ecosystem
Foxbridgevulpine-markmobilebridgeVulpine browser
Resources
Resources hubRoadmapChangelogBlogDocs
Community
SupportDiscussionsContributingIssuesSecurity
© 2026 VulpineOSBuilt on Vulpine browser · Firefox 146.0.1TermsPrivacyCookiesAcceptable useSecurity