What is an agentic browser?
An agentic browser is a real web browser driven by an AI agent that browses sites on a person's behalf: it loads pages, runs JavaScript, clicks and fills in forms. Because it uses a normal browser, it can look like a human visitor. Some, like ChatGPT agent's cloud browser, prove their identity with Web Bot Auth signatures.
At a glance
- Type
- AI agent operating a real browser for a user
- Examples
- ChatGPT agent (OpenAI cloud browser), Google-Agent, Anthropic-hosted browsers (Claude-Agent)
- Runs JavaScript
- Yes, so it can appear in client-side analytics as a person
- How it identifies itself
- Varies: a Web Bot Auth signature, a user-agent token, or nothing
- How to verify
- Verify the signature (RFC 9421) or match the source IP to the operator's list
- Standard
- Web Bot Auth, built on HTTP Message Signatures (RFC 9421). Still an IETF draft
How to spot it
- Signed: look for
Signature,Signature-InputandSignature-Agentheaders. ChatGPT agent sendsSignature-Agent: "https://chatgpt.com"; some Google-Agent requests sendhttps://agent.bot.goog. Verify the signature against the operator’s published keys. - Declared: a normal browser user agent plus a token such as
Claude-AgentorGoogle-Agent. Confirm the source IP is on that operator’s list (for Claude-Agent,claude.com/.well-known/sail). - Hidden: some agentic browsers send no marker at all. They can only be told apart by behavior, so keep the full request headers in your server logs.
Related terms
Quick answers
Is an agentic browser a crawler?
No. A crawler fetches pages on its own schedule. An agentic browser acts for one person in real time, often on pages that need interaction.
Can I tell an agentic browser from its user agent?
Not always. Some add a token such as Claude-Agent or Google-Agent. ChatGPT agent's browser can look like ordinary Chrome, so its signature is the reliable signal.
Does every Google-Agent request carry a signature?
No. Google says its Web Bot Auth support is experimental and it does not sign every request. Fall back to an IP check.