This is big. Hermes Agent just shipped cdp — Chrome DevTools Protocol integration that lets your AI agent launch, control, and interact with a real Chrome browser.
Your coding agent can now browse the web.
What CDP Unlocks
Chrome DevTools Protocol is the same protocol that powers Puppeteer, Playwright, and every serious browser automation tool. By integrating CDP directly into Hermes, the agent can:
- Navigate websites — go to URLs, click links, fill forms
- Extract data — read page content, scrape structured data
- Take screenshots — capture visual state of pages
- Handle authentication — log into services, manage sessions
- Webmail — send and receive emails through browser-based mail clients
Why This Matters for Agents
Until now, coding agents were limited to your terminal, your filesystem, and your git repos. They could call APIs and fetch URLs, but they couldn’t interact with the web. They couldn’t log into a dashboard, check a support ticket, or submit a form.
CDP changes that. Your agent can now:
- Open a browser tab to verify a deployment actually renders — not just that it returns 200
- Log into GitHub to check PR status and read the failure log on a page
- Fill out a web form to create a ticket or reply to a comment
- Read a documentation page interactively, including content behind a login
- Send email through webmail when your team lives inside Gmail
Setting It Up Without Footguns
Browser automation is powerful, but the setup details decide whether it’s a workhorse or a liability:
- Use a dedicated profile. Point the agent at its own user-data directory, not your daily-driver Chrome profile. Your saved passwords, banking sessions, and corporate SSO cookies should never ride along in an automation browser. A separate profile keeps agent logins isolated and makes the whole setup disposable.
- Expect real authentication. “Handle authentication” means the agent works with real session cookies — it does not magically bypass CAPTCHAs or SSO. Log the session in once, persist it, and let the agent reuse it. Don’t store long-lived secrets in the profile itself; keep credentials in your agent’s secret store and inject them at login time.
- Headless when possible, headed when stuck. Headless is faster and quieter for scraping and checks. When a page behaves differently headless (many login flows do), switch to headed mode and grab a screenshot to see what the agent sees.
- Use screenshots as the verification loop. For any UI task, have the agent screenshot after each step. That turns an opaque “I clicked something” into a checkable artifact — and it’s how you catch a bot-check or a layout change early.
CDP vs. Playwright: Which Do You Use?
If you already script Playwright or Puppeteer, you don’t need to redo anything — those tools speak CDP under the hood and are great for repeatable, versioned test suites. The difference with an agent-native CDP integration is that the agent drives the browser interactively: it can react to what a page shows, change course when a button is missing, and combine browsing with file edits in one session. For exploratory tasks and one-off operations, agent-driven CDP wins. For deterministic regression tests, keep the Playwright script.
A Concrete Workflow
Here’s the shape of a real task that was painful before CDP: “Check whether the staging deploy of my app works and file a ticket if the login page breaks.” The agent opens the staging URL, screenshots the login page, verifies the form renders and the expected title is present, and if something fails, opens the issue tracker, fills the bug template with the screenshot attached, and submits. That entire loop used to need a human; now it’s a single instruction.
Phase 2
The original commit referenced “phase-2 browser + webmail” — meaning this was just the beginning. Phase 1 was the infrastructure. Phase 2 is the agentic workflows built on top: agents that verify deploys, monitor dashboards, and manage inboxes as routine tasks. Hermes is evolving from a coding agent into a general-purpose autonomous web agent.
FAQ
Does the agent’s browser share my normal Chrome cookies? Only if you point it at your regular profile — don’t. Give it a dedicated user-data directory so automation sessions stay separate from your personal browsing.
Can this bypass CAPTCHAs or two-factor auth? No. It uses real browser sessions with real cookies. Treat it like a browser you personally logged in once — not a captcha-solving service.
Is this the same technology as Puppeteer/Playwright? Yes — CDP is the protocol underneath both. The difference is the agent controls the browser conversationally instead of you writing a script.
Related articles
- Beware: Claude for Chrome Extension OAuth Grant Survives Global Logout — You Cannot Kill It
- Hermes Agent v0.19.1 Quicksilver: 80% Faster Starts, Smart Approvals, and Secrets That Survive
- Hermes Agent Deep Dive: The Most Capable Open-Source Autonomous Coding Assistant
Sometimes Claude writes better code. Sometimes GPT does. aiFiesta lets you compare both instantly in one chat for $12/mo — plus 7 more premium models.