# What is an AI agent in a browser? | SoftGlaze Browser glossary > An AI agent plans steps and calls tools, such as a browser, to finish a task. How agents work, the risks, and SoftGlaze AI approvals and limits. - Canonical URL: https://browser.softglaze.com/glossary/ai-agent - Last updated 2026-11-09 --- [Automation and AI](https://browser.softglaze.com/glossary?category=automation-and-ai) ## AI agent Also called AI browser agent, browser agent, agentic AI, AI browser automation, computer use Definition An AI agent is an AI model set up to work towards a goal on its own: it plans steps, calls tools such as a browser or an API, looks at the results and decides what to do next. Last updated 9 November 2026 ### How it works A chat assistant answers; an agent acts. The model is given a goal and a set of tools, each described with its arguments. It decides which tool to call, the app runs the call and returns the result, and the model continues until it thinks the goal is met. Browser agents get tools such as “open this page”, “read the page”, “click this” and “type that”, either through a protocol such as MCP or through screenshots and simulated mouse and keyboard input. ### Why it matters when you run several accounts Agents are good at the tedious, judgement-light parts of multi-account work: checking which proxies failed, finding profiles whose time zone doesn’t match, writing a macro from a description. They also make mistakes confidently, and a page an agent reads can contain text written to redirect it, a risk known as prompt injection. With real accounts, an agent should see only what it needs, ask before it changes anything, and leave a record you can check. ### How SoftGlaze Browser handles it SoftGlaze AI (Beta) is in version 1.0.22 and later. AI apps such as Claude, Cursor and Codex connect to a local MCP server in the app, each with its own token acting as one team member. Changes wait for Allow once, Allow for 1 hour or Deny, whatever the AI app is set to; no answer in 2 minutes counts as Deny. Page tools work inside a running profile through its own proxy and fingerprint, and can be limited to a list of sites. No tool reads cookies, 2FA codes or passwords, changes members or billing, or runs arbitrary JavaScript, and one button, Stop all AI, ends every AI session and run. ### Sources 1. [LLM01: Prompt Injection](https://genai.owasp.org/llmrisk/llm01-prompt-injection/) OWASP Gen AI Security Project 2. [Model Context Protocol](https://modelcontextprotocol.io/) modelcontextprotocol.io Outside sources were checked in November 2026. Browsers, standards and vendors' pages change, so details that depend on them are as of that month. ### Related terms - [MCP (Model Context Protocol)](https://browser.softglaze.com/glossary/model-context-protocol) The Model Context Protocol (MCP) is an open standard that lets AI applications connect to outside tools and data through MCP servers, which describe the tools they offer so the AI can call them. - [Browser automation](https://browser.softglaze.com/glossary/browser-automation) Browser automation is software controlling a web browser the way a person would, opening pages, clicking, typing and reading results, either from code, from a recorded macro or from an AI app. - [Browser macro](https://browser.softglaze.com/glossary/macro) A browser macro is a saved sequence of browser actions, such as opening a page, clicking, typing and waiting, that can be replayed on demand instead of doing the task by hand. - [Audit log](https://browser.softglaze.com/glossary/audit-log) An audit log is a time-ordered record of actions taken in a system, saying who did what, to which item and when, kept so that changes can be traced and checked later. - [Team roles (role-based access control)](https://browser.softglaze.com/glossary/role-based-access-control) Role-based access control (RBAC) is a way of managing permissions in which each person is given a role, and the role, not the individual, decides what they can see and do. ### Read more on this site - [SoftGlaze AI (Beta)](https://browser.softglaze.com/features/ai-agents) - [Docs: approvals](https://browser.softglaze.com/docs/ai-agents#approvals) - [Antidetect browser with MCP](https://browser.softglaze.com/antidetect-browser-mcp) - [Docs: AI prompts](https://browser.softglaze.com/docs/ai-prompts) - [MCP browser automation: how AI agents can drive real browser profiles](https://browser.softglaze.com/blog/mcp-browser-automation) ### See it in SoftGlaze Browser Separate profiles, each with its own cookies, device values and proxy, on Windows. Try the app's screens in your browser first, or start the free trial; no card needed. [Download for Windows](https://browser.softglaze.com/download) [Try the demo](https://browser.softglaze.com/demo) [All terms](https://browser.softglaze.com/glossary)