Skip to content
Back to skills

Tinyfish Browser

ASecurity

Spin up a remote browser session via the TinyFish Browser API and get a CDP URL for driving it. Use when you need an automatable Chromium session (Playwright/Puppeteer) that auto-expires after ~1h idle.

  • 67 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 3, 2026
ai-agentsbashapi

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 3, 2026

npx -y skills add OpenCoven/coven --skill tinyfish-browser --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Tinyfish Browser?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Tinyfish Browser
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/opencoven-tinyfish-browser/badge)](https://www.skillsdirectory.com/skills/opencoven-tinyfish-browser)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: tinyfish-browser
description: Spin up a remote browser session via the TinyFish Browser API and get a CDP URL for driving it. Use when you need an automatable Chromium session (Playwright/Puppeteer) that auto-expires after ~1h idle.
homepage: https://docs.tinyfish.ai/browser-api
requires:
  env:
    - TINYFISH_API_KEY
---

# TinyFish Browser

Create a remote Chromium browser session. Returns a `session_id`, a `cdp_url` for driving the browser over the DevTools Protocol, and an authenticated `base_url` for polling session state.

Requires: `TINYFISH_API_KEY` environment variable.

## Pre-flight Check (REQUIRED)

Before calling the API, verify the key is present:

```bash
[ -n "$TINYFISH_API_KEY" ] && echo "TINYFISH_API_KEY is set" || echo "TINYFISH_API_KEY is NOT set"
```

If the key is not set, stop and ask the user to add it. Get one at <https://agent.tinyfish.ai/api-keys>. Do NOT fall back to other browser tools.

## Create a Session

```bash
curl -X POST "https://api.browser.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://example.com" }'
```

## Helper Script

`scripts/browser.sh <url>` wraps the curl call:

```bash
scripts/browser.sh https://example.com
```

## Response Shape

```json
{
  "session_id": "sess_abc123",
  "cdp_url": "wss://browser.tinyfish.ai/devtools/browser/…",
  "base_url": "https://api.browser.tinyfish.ai/sessions/sess_abc123"
}
```

## Using the Session

- `cdp_url` is a DevTools Protocol websocket — connect with Playwright/Puppeteer/chrome-remote-interface to drive the page.
- `base_url` is an **authenticated** polling endpoint (requires the `X-API-Key` header). It is NOT browsable in a normal web view.

## Session Lifecycle

Sessions auto-close after ~1 hour of idleness. There is no explicit terminate endpoint — avoid creating one session per user action; reuse sessions keyed by target URL when possible.

Files in this skill

  • SKILL.md1.9 KB
  • scripts/browser.sh590 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.