Browser control

Agents can browse on your computer in the Omni browser, a separate window with its own sign-ins. You allow it per chat, watch it work, and take over or stop it at any time.

When your organization’s Desktop policy allows Browser control, an agent in an app conversation can open pages, read them, click, type and fill forms in the Omni browser: a separate window with its own sign-ins and cookies. It never uses your own browser, profile or saved passwords. Because it runs on your computer, it reaches what you reach, including internal sites on your network or VPN.

Allow it for a chat

The first time in a conversation, the app asks Allow browser control? and names the starting site:

Choice	What it means
Not now	The agent continues without the browser and does not ask again in this conversation.
Only this session	Allowed in this conversation until you stop it or quit the app.
Always	Allowed in every conversation without asking.

An agent asking to use the Omni browser. Shown with sample data.

With the window in the background, a notification says An agent asks to use the browser. An unanswered question closes as Not now. To be asked again, choose Ask each time next to Browser control in Settings > Trusted folders.

Watch, take over or stop

While the agent drives, the Omni browser shows Agent is controlling this browser, and a strip under the app’s title bar reads Agent is controlling the Omni browser.

• Take over pauses the agent and gives you the browser, for example to sign in or solve a check. The agent waits for Hand back.
• Stop closes the browser and ends browsing in this conversation. After Only this session, the agent must ask again.

The banner at the top of the Omni browser window. Shown with sample data.

The strip under the app's title bar. Shown with sample data.

Stop browser control in the menu bar icon, or closing the browser window, also stops it.

What the browser does for you, and what it leaves to you

• Cookie and newsletter pop-ups are closed with the choice that shares the least (reject, or close). It never accepts.
• Sign-in, payment, CAPTCHA, age and permission prompts are left for you. The agent asks you to take over.
• Downloads are cancelled. Files reach your computer only through your trusted folders.
• Camera, microphone, location and notification requests are refused.
• Password fields are never read.

Browse on this computer or in the cloud

Agents also have a cloud browser. Prefer this Mac’s browser in Settings > Shell & files decides which comes first: on (the default), your computer; off, the cloud, using your computer only when you ask. See Prefer this computer or the cloud.

What is recorded

The audit log records the site an agent opened, never the page address, what it typed or what the page showed.