RESOURCES / THE EVOLUTION BLOG
Browser extension AI agents: What They Are and How to Spot Them
Alisdair Faulkner
What is a browser extension agent?
A browser extension agent is an extension that a person installs in a normal browser so an AI can act on web pages for them. Some connect the browser to other AI tools. BrowserMCP, for example, lets AI apps control the browser through the Model Context Protocol (MCP). Others bring their own assistant.
The extension does its work from inside the page. It produces the clicks and the typing itself, and it can keep working while the person uses another window.
How are extension agents different from other agent types?
Extension agents and in-browser agents both run on the customer's real device and network. The difference is where the actions come from. An in-browser agent comes from the AI assistant and drives the browser. An extension agent is a separate add-on, often from a smaller developer, that acts inside the page and changes it as it goes.
Unlike a cloud agent, an extension agent never leaves the customer's device. Unlike an agent SDK, it needs no code. The person installs it and asks.
| WHERE THE BROWSER RUNS | IN-BROWSER AGENT | BROWSER EXTENSION AGENT | CLOUD AGENT | AGENT SDK |
| WHERE THE BROWSER RUNS | The person's computer | The person's computer | The vendor's cloud | A developer's computer or a hosted service |
| NETWORK | Home or office | Home or office | Cloud hosting | Varies |
| WHO CONTROLS THE ACTIONS | The AI assistant the person uses | A separately installed extension | A hosted service | A developer's code |
| HOW A TASK STARTS | The person asks in the browser | The person asks through the extension | The person asks in an app or chat | A script runs |
What are examples of extension agents that Darwinium detects?
| AGENT | MADE BY |
| BrowserMCP | BrowserMCP |
| Rtrvr.ai extension | Rtrvr |
Rtrvr also runs a cloud version of its agent, covered in the cloud agents post. An extension agent that does not match a known name is still classified as an agent.
What are the tells of a browser extension agent?
The device is real and often shows no risk signals, so device checks alone tend to pass these sessions. The signs are in the page:
- Clicks and input are created by script, not by a mouse, trackpad or keyboard.
- The page keeps getting input while the browser window is in the background.
- The extension leaves changes in the page.
That last sign needs care. Password managers, ad blockers and other everyday extensions also change pages, so it is never enough alone. Darwinium combines signs from different checks before it classifies a session.
Why does this matter?
Extension agents act inside a real customer's session, so they inherit that customer's trust. That suits legitimate use, like comparing prices or filling in a long form. It also means you cannot rely on a known device to tell you a person is the one acting. Knowing when an extension is driving lets you decide what it may do at checkout, login or account changes.
Frequently Asked Questions
Do browser extension agents trigger device or bot warnings?
Often not. They run on the customer's real device and network.
Can a browser extension agent work in the background?
Yes. It can keep entering data while the person uses another window.
How is an extension agent different from a normal extension?
A normal extension might fill a password or block ads. An extension agent uses AI to carry out whole tasks, clicking and typing through the page for the person.