An agent browser that remembers who it is

What it does

dsh-antibrow is a plugin for DeepSeek Harness that hands the agent an AntiBrow browser — a Chromium fork with fingerprint spoofing built into the engine — driven through the standard Playwright API. The core pitch is persistence: each named profile keeps its cookies, passkeys, and last session across runs, so an agent can actually stay logged into a mailbox or keep a marketplace account warm instead of re-authenticating every time like a suspicious stranger.

The interesting bit

The spoofing happens inside the engine, before any page script runs — so there’s no injected script for a detector to find, which is the usual tell in patched-Playwright setups. It also derives timezone, locale, and network profile from the proxy’s real exit, because a US IP reporting Shanghai time is a contradiction a page can check in one line.

Key highlights

• Unlimited local profiles on the free tier; sync and managed residential proxies are the paid parts
• 16 MCP tools (mcp__antibrow__*) covering sessions, profiles, proxies, page control, and live view
• Android emulation via a single deviceType: 'android' argument, built from whole captured devices — three ship in the package, no network round trip needed
• Passkeys stored with the profile, not the machine keychain, so WebAuthn logins survive across runs (and machines, with sync)
• start_live_view streams the agent’s browser to a dashboard so unattended runs are watchable
• Published detection measurements, failures included, reproducible via tests/smoke

Caveats

• One browser at a time on a free key — the concurrency limit is per machine and counted across every app using the engine
• The engine downloads on first launch (190–320 MB) into a shared cache
• Two agents driving one profile concurrently is last-one-to-close-wins; give each its own
• Requires SDK 2.19.1+ — older versions leave browser processes running after close, locking the profile directory

Verdict

Worth a look if your agent does anything behind a login or needs to maintain an identity over time. If your agent just scrapes public pages, a plain Playwright plugin is simpler and free of anti-detect baggage.