[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-vercel-labs-derive-client":3,"mdc-b6vacz-key":36,"related-org-vercel-labs-derive-client":723,"related-repo-vercel-labs-derive-client":882},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":31,"sourceUrl":34,"mdContent":35},"derive-client","reverse engineer internal APIs from browser traffic","Reverse-engineer a website's internal API by recording browser traffic into a HAR file, then generate a standalone client or CLI that calls the endpoints directly, with no browser needed after the first recording. Use when asked to \"derive a client\", \"build a CLI for \u003Csite>\", \"reverse engineer this site's API\", \"record network requests\", \"turn this site into an API\", or when the same site will be automated repeatedly and direct HTTP calls would beat driving the browser every time.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"vercel-labs","Vercel Labs","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fvercel-labs.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Automation","automation","tag",{"name":17,"slug":18,"type":15},"Web Scraping","web-scraping",{"name":20,"slug":21,"type":15},"API Development","api-development",{"name":23,"slug":24,"type":15},"Browser Automation","browser-automation",38346,"https:\u002F\u002Fgithub.com\u002Fvercel-labs\u002Fagent-browser","2026-07-20T06:24:11.928835",null,2480,[],{"repoUrl":26,"stars":25,"forks":29,"topics":32,"description":33},[],"Browser automation CLI for AI agents","https:\u002F\u002Fgithub.com\u002Fvercel-labs\u002Fagent-browser\u002Ftree\u002FHEAD\u002Fskill-data\u002Fderive-client","---\nname: derive-client\ndescription: Reverse-engineer a website's internal API by recording browser traffic into a HAR file, then generate a standalone client or CLI that calls the endpoints directly, with no browser needed after the first recording. Use when asked to \"derive a client\", \"build a CLI for \u003Csite>\", \"reverse engineer this site's API\", \"record network requests\", \"turn this site into an API\", or when the same site will be automated repeatedly and direct HTTP calls would beat driving the browser every time.\nallowed-tools: Bash(agent-browser:*), Bash(npx agent-browser:*)\n---\n\n# Derive an API client from a recorded session\n\nDriving a browser is the right tool for the first visit and the wrong tool for the hundredth. This skill records a site's network traffic once while you use it, then turns the captured requests into a standalone client (script, CLI, or library) that talks to the site's internal API directly.\n\nThe recording alone contains everything needed: agent-browser embeds text response bodies (JSON\u002FHTML\u002FJS) in the HAR by default, so endpoint shapes can be studied offline after the browser is closed.\n\n## Workflow\n\n```\n1. Record     Start HAR capture, drive the flows you want in the client\n2. Identify   Find the real API endpoints among the noise\n3. Extract    Pull request shapes, response schemas, and auth material\n4. Generate   Write the client, one function per flow\n5. Verify     Call every endpoint for real before declaring done\n```\n\n## 1. Record\n\n```bash\nagent-browser network har start          # embeds text response bodies by default\n# ... drive the site: search, open a detail page, paginate, etc. ...\nagent-browser network har stop \u002Ftmp\u002Fsite.har\n```\n\n- Exercise **every flow the client should support**, and run each one at least twice with different inputs (two search terms, two detail pages). Diffing the recorded URLs reveals which parts are parameters.\n- If the site needs login, log in **before** starting the HAR so credentials don't land in the recording unnecessarily. The session cookies are exported separately in step 3.\n- `--content all` embeds binary bodies too (base64); `--content none` disables embedding. Per-body cap is 2 MB.\n\nWhile the session is still open, `agent-browser network requests` and `network request \u003Cid>` give the same data interactively — but only the HAR survives navigation and browser close, so prefer it for anything multi-page.\n\n## 2. Identify endpoints\n\nQuery the HAR with `jq`:\n\n```bash\n# All JSON API calls: method, URL, status\njq -r '.log.entries[]\n  | select(.response.content.mimeType | test(\"json\"))\n  | \"\\(.request.method) \\(.response.status) \\(.request.url)\"' \u002Ftmp\u002Fsite.har\n```\n\nIgnore analytics and infrastructure noise: telemetry endpoints (`\u002Fcollect`, `\u002Ftrack`, `\u002Fbeacon`, `\u002Flog`), third-party domains (google-analytics, segment, sentry, datadog, intercom, hotjar), and static assets. The real API is usually first-party, JSON, and correlates with the actions you performed.\n\n## 3. Extract shapes and auth\n\n```bash\n# Full detail for one endpoint: request headers, POST body, response body\njq '.log.entries[] | select(.request.url | test(\"api\u002Fsearch\"))\n  | {request: {method: .request.method, headers: .request.headers,\n     postData: .request.postData.text},\n     response: .response.content.text}' \u002Ftmp\u002Fsite.har\n```\n\n- **Response schema**: read `.response.content.text` — this is the real payload, use it to derive types.\n- **Auth**: compare request headers across endpoints. Look for `authorization`, `cookie`, `x-csrf-token`, `x-api-key`, and site-specific `x-*` headers. Replay only the ones that matter — test by omission in step 5.\n- **Cookies**: export the live session with `agent-browser cookies get --json > cookies.json` for the client to load at runtime. Never hardcode cookie values into generated source.\n\n## 4. Generate the client\n\n- One function per recorded flow (`search(query)`, `getItem(id)`), typed from the observed response bodies.\n- Auth material (cookies, bearer tokens) loads from a file or environment variable, with a clear error telling the user to re-run the browser login when it expires.\n- Reproduce the headers the API actually requires — some sites 403 without a matching `user-agent`, `referer`, or `x-requested-with`.\n- Keep pagination, sort, and filter parameters that appeared in the recorded query strings as function options.\n\n## 5. Verify\n\nCall every generated function against the live API and compare the response shape with the recording. Common failures:\n\n| Symptom | Cause | Fix |\n|---------|-------|-----|\n| 401\u002F403 | Expired or missing session | Re-login via agent-browser, re-export cookies |\n| 403\u002F419 on writes | CSRF token is per-session or per-form | Fetch the token endpoint first, or keep that flow browser-driven |\n| Works then breaks | Signed\u002Fexpiring request params | Fall back to the browser for that step; derive the rest |\n| Different shape than HAR | A\u002FB tests or geo-dependent responses | Re-record and treat the union as optional fields |\n\n## Caveats\n\n- Internal APIs are unversioned and change without notice — keep the HAR so the client can be re-derived.\n- Respect the site's terms of service and rate limits; add delays for bulk fetching.\n- HAR files contain live session credentials (cookies, tokens, POST bodies). Treat them like secrets: keep them out of version control and delete them when done.\n",{"data":37,"body":39},{"name":4,"description":6,"allowed-tools":38},"Bash(agent-browser:*), Bash(npx agent-browser:*)",{"type":40,"children":41},"root",[42,51,57,62,69,82,88,166,215,236,242,255,319,354,360,424,510,516,577,583,588,693,699,717],{"type":43,"tag":44,"props":45,"children":47},"element","h1",{"id":46},"derive-an-api-client-from-a-recorded-session",[48],{"type":49,"value":50},"text","Derive an API client from a recorded session",{"type":43,"tag":52,"props":53,"children":54},"p",{},[55],{"type":49,"value":56},"Driving a browser is the right tool for the first visit and the wrong tool for the hundredth. This skill records a site's network traffic once while you use it, then turns the captured requests into a standalone client (script, CLI, or library) that talks to the site's internal API directly.",{"type":43,"tag":52,"props":58,"children":59},{},[60],{"type":49,"value":61},"The recording alone contains everything needed: agent-browser embeds text response bodies (JSON\u002FHTML\u002FJS) in the HAR by default, so endpoint shapes can be studied offline after the browser is closed.",{"type":43,"tag":63,"props":64,"children":66},"h2",{"id":65},"workflow",[67],{"type":49,"value":68},"Workflow",{"type":43,"tag":70,"props":71,"children":75},"pre",{"className":72,"code":74,"language":49},[73],"language-text","1. Record     Start HAR capture, drive the flows you want in the client\n2. Identify   Find the real API endpoints among the noise\n3. Extract    Pull request shapes, response schemas, and auth material\n4. Generate   Write the client, one function per flow\n5. Verify     Call every endpoint for real before declaring done\n",[76],{"type":43,"tag":77,"props":78,"children":80},"code",{"__ignoreMap":79},"",[81],{"type":49,"value":74},{"type":43,"tag":63,"props":83,"children":85},{"id":84},"_1-record",[86],{"type":49,"value":87},"1. Record",{"type":43,"tag":70,"props":89,"children":93},{"className":90,"code":91,"language":92,"meta":79,"style":79},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","agent-browser network har start          # embeds text response bodies by default\n# ... drive the site: search, open a detail page, paginate, etc. ...\nagent-browser network har stop \u002Ftmp\u002Fsite.har\n","bash",[94],{"type":43,"tag":77,"props":95,"children":96},{"__ignoreMap":79},[97,131,140],{"type":43,"tag":98,"props":99,"children":102},"span",{"class":100,"line":101},"line",1,[103,109,115,120,125],{"type":43,"tag":98,"props":104,"children":106},{"style":105},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[107],{"type":49,"value":108},"agent-browser",{"type":43,"tag":98,"props":110,"children":112},{"style":111},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[113],{"type":49,"value":114}," network",{"type":43,"tag":98,"props":116,"children":117},{"style":111},[118],{"type":49,"value":119}," har",{"type":43,"tag":98,"props":121,"children":122},{"style":111},[123],{"type":49,"value":124}," start",{"type":43,"tag":98,"props":126,"children":128},{"style":127},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[129],{"type":49,"value":130},"          # embeds text response bodies by default\n",{"type":43,"tag":98,"props":132,"children":134},{"class":100,"line":133},2,[135],{"type":43,"tag":98,"props":136,"children":137},{"style":127},[138],{"type":49,"value":139},"# ... drive the site: search, open a detail page, paginate, etc. ...\n",{"type":43,"tag":98,"props":141,"children":143},{"class":100,"line":142},3,[144,148,152,156,161],{"type":43,"tag":98,"props":145,"children":146},{"style":105},[147],{"type":49,"value":108},{"type":43,"tag":98,"props":149,"children":150},{"style":111},[151],{"type":49,"value":114},{"type":43,"tag":98,"props":153,"children":154},{"style":111},[155],{"type":49,"value":119},{"type":43,"tag":98,"props":157,"children":158},{"style":111},[159],{"type":49,"value":160}," stop",{"type":43,"tag":98,"props":162,"children":163},{"style":111},[164],{"type":49,"value":165}," \u002Ftmp\u002Fsite.har\n",{"type":43,"tag":167,"props":168,"children":169},"ul",{},[170,184,196],{"type":43,"tag":171,"props":172,"children":173},"li",{},[174,176,182],{"type":49,"value":175},"Exercise ",{"type":43,"tag":177,"props":178,"children":179},"strong",{},[180],{"type":49,"value":181},"every flow the client should support",{"type":49,"value":183},", and run each one at least twice with different inputs (two search terms, two detail pages). Diffing the recorded URLs reveals which parts are parameters.",{"type":43,"tag":171,"props":185,"children":186},{},[187,189,194],{"type":49,"value":188},"If the site needs login, log in ",{"type":43,"tag":177,"props":190,"children":191},{},[192],{"type":49,"value":193},"before",{"type":49,"value":195}," starting the HAR so credentials don't land in the recording unnecessarily. The session cookies are exported separately in step 3.",{"type":43,"tag":171,"props":197,"children":198},{},[199,205,207,213],{"type":43,"tag":77,"props":200,"children":202},{"className":201},[],[203],{"type":49,"value":204},"--content all",{"type":49,"value":206}," embeds binary bodies too (base64); ",{"type":43,"tag":77,"props":208,"children":210},{"className":209},[],[211],{"type":49,"value":212},"--content none",{"type":49,"value":214}," disables embedding. Per-body cap is 2 MB.",{"type":43,"tag":52,"props":216,"children":217},{},[218,220,226,228,234],{"type":49,"value":219},"While the session is still open, ",{"type":43,"tag":77,"props":221,"children":223},{"className":222},[],[224],{"type":49,"value":225},"agent-browser network requests",{"type":49,"value":227}," and ",{"type":43,"tag":77,"props":229,"children":231},{"className":230},[],[232],{"type":49,"value":233},"network request \u003Cid>",{"type":49,"value":235}," give the same data interactively — but only the HAR survives navigation and browser close, so prefer it for anything multi-page.",{"type":43,"tag":63,"props":237,"children":239},{"id":238},"_2-identify-endpoints",[240],{"type":49,"value":241},"2. Identify endpoints",{"type":43,"tag":52,"props":243,"children":244},{},[245,247,253],{"type":49,"value":246},"Query the HAR with ",{"type":43,"tag":77,"props":248,"children":250},{"className":249},[],[251],{"type":49,"value":252},"jq",{"type":49,"value":254},":",{"type":43,"tag":70,"props":256,"children":258},{"className":90,"code":257,"language":92,"meta":79,"style":79},"# All JSON API calls: method, URL, status\njq -r '.log.entries[]\n  | select(.response.content.mimeType | test(\"json\"))\n  | \"\\(.request.method) \\(.response.status) \\(.request.url)\"' \u002Ftmp\u002Fsite.har\n",[259],{"type":43,"tag":77,"props":260,"children":261},{"__ignoreMap":79},[262,270,293,301],{"type":43,"tag":98,"props":263,"children":264},{"class":100,"line":101},[265],{"type":43,"tag":98,"props":266,"children":267},{"style":127},[268],{"type":49,"value":269},"# All JSON API calls: method, URL, status\n",{"type":43,"tag":98,"props":271,"children":272},{"class":100,"line":133},[273,277,282,288],{"type":43,"tag":98,"props":274,"children":275},{"style":105},[276],{"type":49,"value":252},{"type":43,"tag":98,"props":278,"children":279},{"style":111},[280],{"type":49,"value":281}," -r",{"type":43,"tag":98,"props":283,"children":285},{"style":284},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[286],{"type":49,"value":287}," '",{"type":43,"tag":98,"props":289,"children":290},{"style":111},[291],{"type":49,"value":292},".log.entries[]\n",{"type":43,"tag":98,"props":294,"children":295},{"class":100,"line":142},[296],{"type":43,"tag":98,"props":297,"children":298},{"style":111},[299],{"type":49,"value":300},"  | select(.response.content.mimeType | test(\"json\"))\n",{"type":43,"tag":98,"props":302,"children":304},{"class":100,"line":303},4,[305,310,315],{"type":43,"tag":98,"props":306,"children":307},{"style":111},[308],{"type":49,"value":309},"  | \"\\(.request.method) \\(.response.status) \\(.request.url)\"",{"type":43,"tag":98,"props":311,"children":312},{"style":284},[313],{"type":49,"value":314},"'",{"type":43,"tag":98,"props":316,"children":317},{"style":111},[318],{"type":49,"value":165},{"type":43,"tag":52,"props":320,"children":321},{},[322,324,330,332,338,339,345,346,352],{"type":49,"value":323},"Ignore analytics and infrastructure noise: telemetry endpoints (",{"type":43,"tag":77,"props":325,"children":327},{"className":326},[],[328],{"type":49,"value":329},"\u002Fcollect",{"type":49,"value":331},", ",{"type":43,"tag":77,"props":333,"children":335},{"className":334},[],[336],{"type":49,"value":337},"\u002Ftrack",{"type":49,"value":331},{"type":43,"tag":77,"props":340,"children":342},{"className":341},[],[343],{"type":49,"value":344},"\u002Fbeacon",{"type":49,"value":331},{"type":43,"tag":77,"props":347,"children":349},{"className":348},[],[350],{"type":49,"value":351},"\u002Flog",{"type":49,"value":353},"), third-party domains (google-analytics, segment, sentry, datadog, intercom, hotjar), and static assets. The real API is usually first-party, JSON, and correlates with the actions you performed.",{"type":43,"tag":63,"props":355,"children":357},{"id":356},"_3-extract-shapes-and-auth",[358],{"type":49,"value":359},"3. Extract shapes and auth",{"type":43,"tag":70,"props":361,"children":363},{"className":90,"code":362,"language":92,"meta":79,"style":79},"# Full detail for one endpoint: request headers, POST body, response body\njq '.log.entries[] | select(.request.url | test(\"api\u002Fsearch\"))\n  | {request: {method: .request.method, headers: .request.headers,\n     postData: .request.postData.text},\n     response: .response.content.text}' \u002Ftmp\u002Fsite.har\n",[364],{"type":43,"tag":77,"props":365,"children":366},{"__ignoreMap":79},[367,375,391,399,407],{"type":43,"tag":98,"props":368,"children":369},{"class":100,"line":101},[370],{"type":43,"tag":98,"props":371,"children":372},{"style":127},[373],{"type":49,"value":374},"# Full detail for one endpoint: request headers, POST body, response body\n",{"type":43,"tag":98,"props":376,"children":377},{"class":100,"line":133},[378,382,386],{"type":43,"tag":98,"props":379,"children":380},{"style":105},[381],{"type":49,"value":252},{"type":43,"tag":98,"props":383,"children":384},{"style":284},[385],{"type":49,"value":287},{"type":43,"tag":98,"props":387,"children":388},{"style":111},[389],{"type":49,"value":390},".log.entries[] | select(.request.url | test(\"api\u002Fsearch\"))\n",{"type":43,"tag":98,"props":392,"children":393},{"class":100,"line":142},[394],{"type":43,"tag":98,"props":395,"children":396},{"style":111},[397],{"type":49,"value":398},"  | {request: {method: .request.method, headers: .request.headers,\n",{"type":43,"tag":98,"props":400,"children":401},{"class":100,"line":303},[402],{"type":43,"tag":98,"props":403,"children":404},{"style":111},[405],{"type":49,"value":406},"     postData: .request.postData.text},\n",{"type":43,"tag":98,"props":408,"children":410},{"class":100,"line":409},5,[411,416,420],{"type":43,"tag":98,"props":412,"children":413},{"style":111},[414],{"type":49,"value":415},"     response: .response.content.text}",{"type":43,"tag":98,"props":417,"children":418},{"style":284},[419],{"type":49,"value":314},{"type":43,"tag":98,"props":421,"children":422},{"style":111},[423],{"type":49,"value":165},{"type":43,"tag":167,"props":425,"children":426},{},[427,445,492],{"type":43,"tag":171,"props":428,"children":429},{},[430,435,437,443],{"type":43,"tag":177,"props":431,"children":432},{},[433],{"type":49,"value":434},"Response schema",{"type":49,"value":436},": read ",{"type":43,"tag":77,"props":438,"children":440},{"className":439},[],[441],{"type":49,"value":442},".response.content.text",{"type":49,"value":444}," — this is the real payload, use it to derive types.",{"type":43,"tag":171,"props":446,"children":447},{},[448,453,455,461,462,468,469,475,476,482,484,490],{"type":43,"tag":177,"props":449,"children":450},{},[451],{"type":49,"value":452},"Auth",{"type":49,"value":454},": compare request headers across endpoints. Look for ",{"type":43,"tag":77,"props":456,"children":458},{"className":457},[],[459],{"type":49,"value":460},"authorization",{"type":49,"value":331},{"type":43,"tag":77,"props":463,"children":465},{"className":464},[],[466],{"type":49,"value":467},"cookie",{"type":49,"value":331},{"type":43,"tag":77,"props":470,"children":472},{"className":471},[],[473],{"type":49,"value":474},"x-csrf-token",{"type":49,"value":331},{"type":43,"tag":77,"props":477,"children":479},{"className":478},[],[480],{"type":49,"value":481},"x-api-key",{"type":49,"value":483},", and site-specific ",{"type":43,"tag":77,"props":485,"children":487},{"className":486},[],[488],{"type":49,"value":489},"x-*",{"type":49,"value":491}," headers. Replay only the ones that matter — test by omission in step 5.",{"type":43,"tag":171,"props":493,"children":494},{},[495,500,502,508],{"type":43,"tag":177,"props":496,"children":497},{},[498],{"type":49,"value":499},"Cookies",{"type":49,"value":501},": export the live session with ",{"type":43,"tag":77,"props":503,"children":505},{"className":504},[],[506],{"type":49,"value":507},"agent-browser cookies get --json > cookies.json",{"type":49,"value":509}," for the client to load at runtime. Never hardcode cookie values into generated source.",{"type":43,"tag":63,"props":511,"children":513},{"id":512},"_4-generate-the-client",[514],{"type":49,"value":515},"4. Generate the client",{"type":43,"tag":167,"props":517,"children":518},{},[519,539,544,572],{"type":43,"tag":171,"props":520,"children":521},{},[522,524,530,531,537],{"type":49,"value":523},"One function per recorded flow (",{"type":43,"tag":77,"props":525,"children":527},{"className":526},[],[528],{"type":49,"value":529},"search(query)",{"type":49,"value":331},{"type":43,"tag":77,"props":532,"children":534},{"className":533},[],[535],{"type":49,"value":536},"getItem(id)",{"type":49,"value":538},"), typed from the observed response bodies.",{"type":43,"tag":171,"props":540,"children":541},{},[542],{"type":49,"value":543},"Auth material (cookies, bearer tokens) loads from a file or environment variable, with a clear error telling the user to re-run the browser login when it expires.",{"type":43,"tag":171,"props":545,"children":546},{},[547,549,555,556,562,564,570],{"type":49,"value":548},"Reproduce the headers the API actually requires — some sites 403 without a matching ",{"type":43,"tag":77,"props":550,"children":552},{"className":551},[],[553],{"type":49,"value":554},"user-agent",{"type":49,"value":331},{"type":43,"tag":77,"props":557,"children":559},{"className":558},[],[560],{"type":49,"value":561},"referer",{"type":49,"value":563},", or ",{"type":43,"tag":77,"props":565,"children":567},{"className":566},[],[568],{"type":49,"value":569},"x-requested-with",{"type":49,"value":571},".",{"type":43,"tag":171,"props":573,"children":574},{},[575],{"type":49,"value":576},"Keep pagination, sort, and filter parameters that appeared in the recorded query strings as function options.",{"type":43,"tag":63,"props":578,"children":580},{"id":579},"_5-verify",[581],{"type":49,"value":582},"5. Verify",{"type":43,"tag":52,"props":584,"children":585},{},[586],{"type":49,"value":587},"Call every generated function against the live API and compare the response shape with the recording. Common failures:",{"type":43,"tag":589,"props":590,"children":591},"table",{},[592,616],{"type":43,"tag":593,"props":594,"children":595},"thead",{},[596],{"type":43,"tag":597,"props":598,"children":599},"tr",{},[600,606,611],{"type":43,"tag":601,"props":602,"children":603},"th",{},[604],{"type":49,"value":605},"Symptom",{"type":43,"tag":601,"props":607,"children":608},{},[609],{"type":49,"value":610},"Cause",{"type":43,"tag":601,"props":612,"children":613},{},[614],{"type":49,"value":615},"Fix",{"type":43,"tag":617,"props":618,"children":619},"tbody",{},[620,639,657,675],{"type":43,"tag":597,"props":621,"children":622},{},[623,629,634],{"type":43,"tag":624,"props":625,"children":626},"td",{},[627],{"type":49,"value":628},"401\u002F403",{"type":43,"tag":624,"props":630,"children":631},{},[632],{"type":49,"value":633},"Expired or missing session",{"type":43,"tag":624,"props":635,"children":636},{},[637],{"type":49,"value":638},"Re-login via agent-browser, re-export cookies",{"type":43,"tag":597,"props":640,"children":641},{},[642,647,652],{"type":43,"tag":624,"props":643,"children":644},{},[645],{"type":49,"value":646},"403\u002F419 on writes",{"type":43,"tag":624,"props":648,"children":649},{},[650],{"type":49,"value":651},"CSRF token is per-session or per-form",{"type":43,"tag":624,"props":653,"children":654},{},[655],{"type":49,"value":656},"Fetch the token endpoint first, or keep that flow browser-driven",{"type":43,"tag":597,"props":658,"children":659},{},[660,665,670],{"type":43,"tag":624,"props":661,"children":662},{},[663],{"type":49,"value":664},"Works then breaks",{"type":43,"tag":624,"props":666,"children":667},{},[668],{"type":49,"value":669},"Signed\u002Fexpiring request params",{"type":43,"tag":624,"props":671,"children":672},{},[673],{"type":49,"value":674},"Fall back to the browser for that step; derive the rest",{"type":43,"tag":597,"props":676,"children":677},{},[678,683,688],{"type":43,"tag":624,"props":679,"children":680},{},[681],{"type":49,"value":682},"Different shape than HAR",{"type":43,"tag":624,"props":684,"children":685},{},[686],{"type":49,"value":687},"A\u002FB tests or geo-dependent responses",{"type":43,"tag":624,"props":689,"children":690},{},[691],{"type":49,"value":692},"Re-record and treat the union as optional fields",{"type":43,"tag":63,"props":694,"children":696},{"id":695},"caveats",[697],{"type":49,"value":698},"Caveats",{"type":43,"tag":167,"props":700,"children":701},{},[702,707,712],{"type":43,"tag":171,"props":703,"children":704},{},[705],{"type":49,"value":706},"Internal APIs are unversioned and change without notice — keep the HAR so the client can be re-derived.",{"type":43,"tag":171,"props":708,"children":709},{},[710],{"type":49,"value":711},"Respect the site's terms of service and rate limits; add delays for bulk fetching.",{"type":43,"tag":171,"props":713,"children":714},{},[715],{"type":49,"value":716},"HAR files contain live session credentials (cookies, tokens, POST bodies). Treat them like secrets: keep them out of version control and delete them when done.",{"type":43,"tag":718,"props":719,"children":720},"style",{},[721],{"type":49,"value":722},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":724,"total":881},[725,736,748,760,767,784,796,809,822,835,847,866],{"slug":108,"name":108,"fn":726,"description":727,"org":728,"tags":729,"stars":25,"repoUrl":26,"updatedAt":735},"automate browser interactions for AI agents","Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to \"open a website\", \"fill out a form\", \"click a button\", \"take a screenshot\", \"scrape data from a page\", \"test this web app\", \"login to a site\", \"automate browser actions\", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[730,733,734],{"name":731,"slug":732,"type":15},"Agents","agents",{"name":13,"slug":14,"type":15},{"name":23,"slug":24,"type":15},"2026-07-20T05:55:17.314329",{"slug":737,"name":737,"fn":738,"description":739,"org":740,"tags":741,"stars":25,"repoUrl":26,"updatedAt":747},"agentcore","run browser automation on AWS Bedrock","Run agent-browser on AWS Bedrock AgentCore cloud browsers. Use when the user wants to use AgentCore, run browser automation on AWS, use a cloud browser with AWS credentials, or needs a managed browser session backed by AWS infrastructure. Triggers include \"use agentcore\", \"run on AWS\", \"cloud browser with AWS\", \"bedrock browser\", \"agentcore session\", or any task requiring AWS-hosted browser automation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[742,743,746],{"name":13,"slug":14,"type":15},{"name":744,"slug":745,"type":15},"AWS","aws",{"name":23,"slug":24,"type":15},"2026-07-17T06:08:33.665276",{"slug":749,"name":749,"fn":750,"description":751,"org":752,"tags":753,"stars":25,"repoUrl":26,"updatedAt":759},"core","navigate and interact with web pages","Core agent-browser usage guide. Read this before running any agent-browser commands. Covers the snapshot-and-ref workflow, navigating pages, interacting with elements (click, fill, type, select), extracting text and data, taking screenshots, managing tabs, handling forms and auth, waiting for content, running multiple browser sessions in parallel, and troubleshooting common failures. Use when the user asks to interact with a website, fill a form, click something, extract data, take a screenshot, log into a site, test a web app, or automate any browser task.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[754,755,756],{"name":731,"slug":732,"type":15},{"name":23,"slug":24,"type":15},{"name":757,"slug":758,"type":15},"Navigation","navigation","2026-07-26T05:47:42.378419",{"slug":4,"name":4,"fn":5,"description":6,"org":761,"tags":762,"stars":25,"repoUrl":26,"updatedAt":27},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[763,764,765,766],{"name":20,"slug":21,"type":15},{"name":13,"slug":14,"type":15},{"name":23,"slug":24,"type":15},{"name":17,"slug":18,"type":15},{"slug":768,"name":768,"fn":769,"description":770,"org":771,"tags":772,"stars":25,"repoUrl":26,"updatedAt":783},"dogfood","perform exploratory testing on web applications","Systematically explore and test a web application to find bugs, UX issues, and other problems. Use when asked to \"dogfood\", \"QA\", \"exploratory test\", \"find issues\", \"bug hunt\", \"test this app\u002Fsite\u002Fplatform\", or review the quality of a web application. Produces a structured report with full reproduction evidence -- step-by-step screenshots, repro videos, and detailed repro steps for every issue -- so findings can be handed directly to the responsible teams.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[773,774,777,780],{"name":23,"slug":24,"type":15},{"name":775,"slug":776,"type":15},"Debugging","debugging",{"name":778,"slug":779,"type":15},"QA","qa",{"name":781,"slug":782,"type":15},"Testing","testing","2026-07-17T06:07:41.421482",{"slug":785,"name":785,"fn":786,"description":787,"org":788,"tags":789,"stars":25,"repoUrl":26,"updatedAt":795},"electron","automate Electron desktop applications","Automate Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify, etc.) using agent-browser via Chrome DevTools Protocol. Use when the user needs to interact with an Electron app, automate a desktop app, connect to a running app, control a native app, or test an Electron application. Triggers include \"automate Slack app\", \"control VS Code\", \"interact with Discord app\", \"test this Electron app\", \"connect to desktop app\", or any task requiring automation of a native Electron application.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[790,791,792],{"name":731,"slug":732,"type":15},{"name":23,"slug":24,"type":15},{"name":793,"slug":794,"type":15},"Desktop","desktop","2026-07-17T06:08:28.007783",{"slug":797,"name":797,"fn":798,"description":799,"org":800,"tags":801,"stars":25,"repoUrl":26,"updatedAt":808},"slack","interact with Slack workspaces","Interact with Slack workspaces using browser automation. Use when the user needs to check unread channels, navigate Slack, send messages, extract data, find information, search conversations, or automate any Slack task. Triggers include \"check my Slack\", \"what channels have unreads\", \"send a message to\", \"search Slack for\", \"extract from Slack\", \"find who said\", or any task requiring programmatic Slack interaction.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[802,803,806],{"name":23,"slug":24,"type":15},{"name":804,"slug":805,"type":15},"Messaging","messaging",{"name":807,"slug":797,"type":15},"Slack","2026-07-17T06:08:27.679015",{"slug":810,"name":810,"fn":811,"description":812,"org":813,"tags":814,"stars":25,"repoUrl":26,"updatedAt":821},"vercel-sandbox","run browser automation in Vercel Sandbox","Run agent-browser + Chrome inside Vercel Sandbox microVMs for browser automation from any Vercel-deployed app. Use when the user needs browser automation in a Vercel app (Next.js, SvelteKit, Nuxt, Remix, Astro, etc.), wants to run headless Chrome without binary size limits, needs persistent browser sessions across commands, or wants ephemeral isolated browser environments. Triggers include \"Vercel Sandbox browser\", \"microVM Chrome\", \"agent-browser in sandbox\", \"browser automation on Vercel\", or any task requiring Chrome in a Vercel Sandbox.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[815,816,817,818],{"name":13,"slug":14,"type":15},{"name":23,"slug":24,"type":15},{"name":781,"slug":782,"type":15},{"name":819,"slug":820,"type":15},"Vercel","vercel","2026-07-17T06:08:28.349899",{"slug":823,"name":823,"fn":824,"description":825,"org":826,"tags":827,"stars":832,"repoUrl":833,"updatedAt":834},"deploy-to-vercel","deploy applications to Vercel","Deploy applications and websites to Vercel. Use when the user requests deployment actions like \"deploy my app\", \"deploy and give me the link\", \"push this live\", or \"create a preview deployment\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[828,831],{"name":829,"slug":830,"type":15},"Deployment","deployment",{"name":819,"slug":820,"type":15},28993,"https:\u002F\u002Fgithub.com\u002Fvercel-labs\u002Fagent-skills","2026-07-17T06:08:41.18374",{"slug":836,"name":836,"fn":837,"description":838,"org":839,"tags":840,"stars":832,"repoUrl":833,"updatedAt":846},"vercel-cli-with-tokens","manage Vercel projects via CLI","Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. \"deploy to vercel\", \"set up vercel\", \"add environment variables to vercel\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[841,844,845],{"name":842,"slug":843,"type":15},"CLI","cli",{"name":829,"slug":830,"type":15},{"name":819,"slug":820,"type":15},"2026-07-17T06:08:41.84179",{"slug":848,"name":848,"fn":849,"description":850,"org":851,"tags":852,"stars":832,"repoUrl":833,"updatedAt":865},"vercel-composition-patterns","implement scalable React composition patterns","React composition patterns that scale. Use when refactoring components with boolean prop proliferation, building flexible component libraries, or designing reusable APIs. Triggers on tasks involving compound components, render props, context providers, or component architecture. Includes React 19 API changes.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[853,856,859,862],{"name":854,"slug":855,"type":15},"Best Practices","best-practices",{"name":857,"slug":858,"type":15},"Frontend","frontend",{"name":860,"slug":861,"type":15},"React","react",{"name":863,"slug":864,"type":15},"UI Components","ui-components","2026-07-17T06:05:40.576913",{"slug":867,"name":867,"fn":868,"description":869,"org":870,"tags":871,"stars":832,"repoUrl":833,"updatedAt":880},"vercel-optimize","optimize Vercel project performance and costs","Use for Vercel cost and performance optimization on deployed projects, especially Next.js, SvelteKit, Nuxt, and limited Astro apps. Collect Vercel metrics, usage, project config, and code scan results first; investigate only metric-backed candidates; produce ranked recommendations grounded in verified files and version-aware Vercel\u002Fframework docs. Trigger for Vercel bill reduction, slow or expensive routes, caching opportunities, Function Invocations, Build Minutes, Fast Data Transfer, Core Web Vitals, Bot Management, Fluid compute, or cost breakdown requests.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[872,875,876,879],{"name":873,"slug":874,"type":15},"Cost Optimization","cost-optimization",{"name":829,"slug":830,"type":15},{"name":877,"slug":878,"type":15},"Performance","performance",{"name":819,"slug":820,"type":15},"2026-07-17T06:04:08.327515",100,{"items":883,"total":928},[884,890,896,902,909,916,922],{"slug":108,"name":108,"fn":726,"description":727,"org":885,"tags":886,"stars":25,"repoUrl":26,"updatedAt":735},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[887,888,889],{"name":731,"slug":732,"type":15},{"name":13,"slug":14,"type":15},{"name":23,"slug":24,"type":15},{"slug":737,"name":737,"fn":738,"description":739,"org":891,"tags":892,"stars":25,"repoUrl":26,"updatedAt":747},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[893,894,895],{"name":13,"slug":14,"type":15},{"name":744,"slug":745,"type":15},{"name":23,"slug":24,"type":15},{"slug":749,"name":749,"fn":750,"description":751,"org":897,"tags":898,"stars":25,"repoUrl":26,"updatedAt":759},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[899,900,901],{"name":731,"slug":732,"type":15},{"name":23,"slug":24,"type":15},{"name":757,"slug":758,"type":15},{"slug":4,"name":4,"fn":5,"description":6,"org":903,"tags":904,"stars":25,"repoUrl":26,"updatedAt":27},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[905,906,907,908],{"name":20,"slug":21,"type":15},{"name":13,"slug":14,"type":15},{"name":23,"slug":24,"type":15},{"name":17,"slug":18,"type":15},{"slug":768,"name":768,"fn":769,"description":770,"org":910,"tags":911,"stars":25,"repoUrl":26,"updatedAt":783},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[912,913,914,915],{"name":23,"slug":24,"type":15},{"name":775,"slug":776,"type":15},{"name":778,"slug":779,"type":15},{"name":781,"slug":782,"type":15},{"slug":785,"name":785,"fn":786,"description":787,"org":917,"tags":918,"stars":25,"repoUrl":26,"updatedAt":795},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[919,920,921],{"name":731,"slug":732,"type":15},{"name":23,"slug":24,"type":15},{"name":793,"slug":794,"type":15},{"slug":797,"name":797,"fn":798,"description":799,"org":923,"tags":924,"stars":25,"repoUrl":26,"updatedAt":808},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[925,926,927],{"name":23,"slug":24,"type":15},{"name":804,"slug":805,"type":15},{"name":807,"slug":797,"type":15},8]