Stagehand
Open-source browser agent SDK by Browserbase with act, extract, observe and agent primitives in TypeScript and Python.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-18
Stagehand is an open-source browser automation SDK from Browserbase, a venture-backed infrastructure company specialising in headless browser hosting. The project is well-documented with active development on GitHub, distributed via npm and PyPI with standard package management. However, it grants extensive browser control capabilities including full DOM manipulation, form filling, navigation, and screenshot capture. As an autonomous agent SDK, it can execute arbitrary actions on websites based on AI decisions, which presents significant trust surface area. The maintainer is a legitimate commercial entity but smaller than major cloud vendors. Supply chain is standard for modern JavaScript/Python tooling. No known security incidents, but the broad permissions inherent to browser automation require careful consideration of use cases and target sites.
Green flags
- Open source with MIT licence, full code visibility on GitHub
- Active development by legitimate commercial entity (Browserbase)
- Distributed via standard npm and PyPI with versioned releases
- Comprehensive documentation and examples in repository
- Clear API design with act, extract, observe primitives
Red flags
- Full browser control allows arbitrary website interaction and data extraction
- Autonomous agent can make decisions without explicit user approval per action
- Requires API keys to external LLM services, expanding attack surface
- Can execute JavaScript in browser context with full DOM access
Permissions requested
Pricing
Platforms
Review
Best for developers who need resilient browser automation and are willing to write code. Skip it if you want a no-code agent or need to interact with heavily protected sites. The SDK model rewards iteration but demands technical fluency.
Good at
- Natural-language instructions adapt to minor UI changes without rewriting selectors
- Open-source with TypeScript and Python support, auditable and extensible
- Tight integration with Browserbase for local dev and hosted deployment
- Composable primitives (act, extract, observe) that work well independently
- Real browser automation, handles JavaScript-heavy sites better than headless scrapers
Watch out
- Ambiguous instructions can fail silently or target the wrong element
- Agent mode can loop indefinitely with vague goals, needs careful prompting
- No built-in CAPTCHA or anti-bot handling, stops at protected sites
- Requires coding; not suitable for non-technical users
- Error messages are terse, debugging often requires browser DevTools
Use cases
- web automation
- natural-language browser scripts
- agent tooling