Use My Browser

# Use My Browser

Operate the user's real Chrome browser through Tampermonkey script injection. The agent runs JavaScript directly in the page context — sharing all cookies, sessions, and login state.

Setup

```bash openclaw plugins install openclaw-tmwd --registry https://registry.npmjs.org ```

Then install the Tampermonkey userscript in Chrome. Green indicator at bottom-right = connected.

Tools

| Tool | Purpose | |------|---------| | `tmwd_status` | Check connection, list connected tabs | | `tmwd_switch` | Switch to tab matching URL pattern | | `tmwd_navigate` | Navigate current tab to URL | | `tmwd_newtab` | Open new tab | | `tmwd_text` | Get visible text of current page | | `tmwd_elements` | List interactive elements (buttons, links, inputs) | | `tmwd_scan` | Get simplified HTML | | `tmwd_exec` | Execute JavaScript in page context |

Workflow

Read a page

``` tmwd_status() # Verify connection tmwd_switch(pattern="github.com") # Switch to target tab tmwd_text(max_chars=5000) # Get page content ```

Navigate to URL

``` tmwd_navigate(url="https://example.com") tmwd_text() ```

Click / fill / interact

``` tmwd_exec(code="document.querySelector('#submit').click()")

tmwd_exec(code="var e=document.querySelector('#email'); e.value='[email protected]'; e.dispatchEvent(new Event('input',{bubbles:true}))") ```

Extract data

``` tmwd_exec(code="return document.querySelector('.content').innerText")

tmwd_exec(code="return Array.from(document.querySelectorAll('h2')).map(e=>e.textContent)") ```

Read table data

``` tmwd_exec(code="var rows=document.querySelectorAll('table tr'); var d=[]; rows.forEach(function(r){var c=[]; r.querySelectorAll('td,th').forEach(function(e){c.push(e.innerText.trim())}); if(c.length) d.push(c)}); return d") ```

Click by text match

``` tmwd_exec(code="var btns=document.querySelectorAll('button'); for(var i=0;i<btns.length;i++){if(btns[i].innerText.includes('Submit')){btns[i].click();break}}") ```

Fill form with multiple fields

``` tmwd_exec(code="var f={'#username':'admin','#email':'[email protected]'}; Object.keys(f).forEach(function(s){var e=document.querySelector(s); e.value=f[s]; e.dispatchEvent(new Event('input',{bubbles:true}))})") ```

JS Patterns Quick Reference

| Action | Code | |--------|------| | Click button | `document.querySelector('button.submit').click()` | | Fill input | `var e=document.querySelector('#input'); e.value='x'; e.dispatchEvent(new Event('input',{bubbles:true}))` | | Select dropdown | `var s=document.querySelector('select'); s.value='opt1'; s.dispatchEvent(new Event('change',{bubbles:true}))` | | Check checkbox | `var c=document.querySelector('[type=checkbox]'); c.checked=true; c.dispatchEvent(new Event('change',{bubbles:true}))` | | Scroll to bottom | `window.scrollTo(0, document.body.scrollHeight)` | | Scroll to element | `document.querySelector('#target').scrollIntoView()` | | Wait for element | `return !!document.querySelector('.loaded')` | | Get current URL | `return location.href` | | Go back | `history.back()` |

CSP Fallback

Some sites (X/Twitter, banking sites) block `eval()` via Content Security Policy. When `tmwd_exec` returns `csp_blocked: true`, fall back to the built-in `browser` tool:

1. ```
2. browser(action="open", profile="openclaw", url="<same-url>")
3. browser(action="snapshot", targetId=<targetId>)
4. ```

Built-in browser uses CDP which bypasses CSP, but runs in a separate instance (no user login state — login once, profile is persisted).

Rule: always try tmwd first, fall back only on failure.

Troubleshooting

| Problem | Fix | |---------|-----| | "No connected tabs" | Check green indicator in Chrome bottom-right | | Red indicator | Refresh the page, userscript auto-reconnects | | `el.click()` no effect | Try `el.dispatchEvent(new MouseEvent('click',{bubbles:true}))` | | CSP blocks eval | Use `tmwd_text` (no eval needed) or fall back to built-in browser |

Notes

• All JS runs in page context — shares cookies, localStorage, login state
• `el.click()` is DOM-level, does not move the mouse cursor
• Cross-origin iframes cannot be accessed (same-origin policy)
• If page refreshes, the userscript auto-reconnects with the same sessionId
• Use `return` in JS to send values back; without `return` there is no output
• For React/Vue apps, always use `dispatchEvent` after setting values — direct `.value=` alone won't trigger framework reactivity