Virgil — AI Browser Agent

Tell Virgil in plain language what to do in your browser — it reads the page, clicks, types and fills forms for you.

**An AI that actually does things in your browser — not just talks about them.** Virgil lives in a side panel next to your tabs. You tell it, in your own words, what you need done — and it does it, right there in the pages you already use. No copy-pasting between a chatbot and your work. It sees the page and acts on it, like a second pair of hands. **Real things people use it for every day:** - "Compare the price of this on three shops and tell me the cheapest" - "Reply to this email saying I'll be there Thursday" - "Fill this sign-up form with my details" - "Find the top 3 results for wireless headphones under $50 and open them" - "Summarise this long page in five bullet points" - "Go through my Drive and find my lesson plans / that invoice / the report" The clearer you say it, the further it reaches. You stay in control — you watch it work, and you stop it any time. **What Virgil can do** - Type into any search box and run the search - Click links, buttons and page elements - Fill out and submit forms - Open, switch and close tabs - Attach files to upload fields - Read, summarise or pull information out of the current page **How it works** Virgil reads the structure of your active tab (visible text + interactive elements) and sends it, together with your instruction, to our server, where an AI model decides the next action. Virgil then performs that action in the tab using Chrome's DevTools Protocol (CDP) — real, reliable clicks and keystrokes, not fragile pixel-guessing. --- ## Your data & privacy — in plain terms - **Only what's needed leaves your browser:** your typed instruction and the page content needed to act on it. Nothing is uploaded in the background. - **Passwords and browser-saved credentials are never transmitted.** - **Your memory is encrypted and we can't read it.** Virgil can remember what you taught it across sessions. That memory is sealed with a key that is generated on your device and never leaves it in readable form — on our server it's only unreadable ciphertext. Even we, the operators, cannot open it. If we ever need a small excerpt to fix a bug, the extension asks you first, in plain language, and never shares more than 15% — only with your explicit yes. - **You're already logged in:** Virgil works inside your existing browser session, so there's no separate login to any website. - Full policy: https://api.nm-streetwear.space/privacy ## Permissions — and exactly why each one is needed - **sidePanel** — the chat panel you use to talk to Virgil. - **tabs** — to see which tab is active and to open/switch tabs you ask for. - **activeTab / scripting** — to read the page you're on and perform the clicks and typing you requested. - **storage** — to keep local settings on your device: a random device id and your encryption key. - **debugger** — Virgil uses the Chrome DevTools Protocol for reliable, "real" input on pages that ignore synthetic events (some logins and web apps). Only during a task you started, never in the background. - **host permissions (all sites)** — because *you* decide which site Virgil works on; there is no fixed list of allowed sites. ## Expected behaviour (not a bug) - While Virgil runs a task, Chrome shows a banner: **"[Extension] is debugging this browser."** This is a normal Chrome security notice because Virgil uses the DevTools Protocol. It disappears when the task ends. ## How the `debugger` permission is used — step by step Virgil uses `chrome.debugger` only to drive the page like a real user would. Exactly what happens: 1. You type a task and press Run. 2. Virgil attaches the DevTools Protocol **to the active tab only**, and Chrome shows the "is debugging" banner. 3. Virgil dispatches the real click and keystroke events your task needs (CDP `Input` domain) — this is why it works on pages that ignore synthetic JavaScript events, e.g. some logins and web apps. 4. When the task finishes (or you stop it), Virgil **detaches** and the banner disappears. What it does **not** do: it never attaches without a task you started, never runs in the background, never does remote debugging, never attaches to other tabs, and does not read your browser history, saved passwords or network traffic. Attach → act on your task → detach. Nothing more. ## Pricing - **20 free tasks to try — no account, no card, no sign-up.** - 1 token = 1 completed task. Top up when you need more. ## Single purpose Virgil has one purpose: to carry out natural-language browser tasks — searching, clicking, filling forms, controlling tabs and reading pages — automatically in your active tab. ## v0.1.14 (current — 21.10.2026) **A face, three languages, and a little magic.** - **New look:** a dark, anthracite premium redesign built from scratch (no generic template), with Virgil's own pixel-art mascot as the face of the panel and the extension icons. - **Three languages:** full German, English and Spanish, with a one-tap language toggle in the panel header — your choice is remembered. - **Onboarding:** first run greets you — Virgil hops in, introduces himself, looks around, notes a couple of harmless facts about where you are, and shows you what to try first. - **EasterEgg — a beat from a video:** paste a YouTube link (or just have the video open) and Virgil builds you a real beat from it in about a minute — recognised, not ripped. A live progress chip, then playback with BPM and key. (Runs on our server; costs a couple of tokens.) - **Small touches:** a typing indicator while Virgil thinks, a welcome tab on fresh install, and a hidden easter egg (poke the little mascot five times…). - **Fix:** no longer opens a new tab on every prompt — Virgil reuses your working tab. - No new permissions added vs. the previous version. ## v0.1.13 (current — 19.10.2026) **Private by design: your memory is now encrypted and we can't read it.** - **Encrypted memory (vault):** what Virgil learns about you is now sealed with a key that is generated on your device and never stored on our server. On the server it's only unreadable ciphertext — even the operators cannot open it. - **Consent-gated debugging:** if we ever need to look at a piece of your memory to fix a bug, the extension now asks you first, in plain language, and never releases more than 15% — only with your explicit "yes". Every access is logged. - **Full transparency:** README + store listing now document every permission (including why `debugger` and all-sites access are needed) and the exact attach → act → detach flow. - No new permissions added vs. the previous version. ## v0.1.0 – 0.1.2 (Sep 2026, baseline) - First browser agent: side panel, natural-language tasks, Chrome DevTools Protocol "hands" (reliable, non-pixel clicks/typing), token paywall (free tasks to try, 1 token = 1 task). - Reads the active page, clicks, types, fills forms, controls tabs, summarises pages. - Self-recovery when a tab gets parked on a non-scriptable page (e.g. after a download): Virgil automatically switches to a working tab and continues instead of getting stuck. --- Store „What's new in this version": Virgil has a face now — a dark, premium redesign with his own pixel mascot, in German, English and Spanish (one tap to switch). First run walks you through everything. And a little magic: paste a YouTube link and Virgil builds you a real beat from it in about a minute. Plus a typing indicator, a welcome screen, and a hidden easter egg. No new permissions. By **nm-streetwear**, an independent AI lab in Germany.