{ "slug": "steel", "name": "Steel", "url": "https://steel.dev", "domain": "steel.dev", "category": "browser-infrastructure", "category_name": "Browser infrastructure", "tested_at": "2026-10-12", "run": "20261012T212018Z", "draft": false, "reviewed": true, "owner_verified": null, "origin": "editorial", "history": [ { "run": "20261005T150619Z", "date": "2026-10-05", "level": 4, "engine": { "runner": "omp", "model": "claude-opus-5-5", "driver": 2, "signed": true, "inbox": [ "agentdrives.com" ], "robots": "start" } }, { "run": "20261012T212018Z", "date": "2026-10-12", "level": 5, "engine": { "runner": "omp", "model": "claude-opus-5-5", "driver": 4, "signed": true, "inbox": [ "agentdrives.com" ], "robots": "obey" }, "why": "product" }, { "run": "20261012T212018Z", "date": "2026-10-13", "level": 4, "why": "rules", "rules_date": "2026-10-13", "methodology": 14 } ], "level": 4, "level_name": "Runs on its own", "level_selfhost": null, "entry": "self-start", "door": { "passed": 2, "tries": 2, "self_start": true }, "badges": [ "agent-can-buy" ], "stages": [ { "key": "in", "label": "Access", "state": "yes", "text": "Gets in on its own: pay per call, sign-up in a browser", "way": "pay_per_call" }, { "key": "work", "label": "Use", "state": "yes", "text": "Work done: 100% of the core" }, { "key": "pay", "label": "Pay", "state": "part", "text": "Pays per call for part of it: paid $0.01 a call (x402), 12 Oct", "value": "partial", "route": "agent_rail", "per_call": { "caps": [ "cap-04" ], "core": 8, "share": 12 } }, { "key": "leave", "label": "Leave", "state": "yes", "text": "Nothing to cancel; deletes its data, but the login stays", "at": "delete", "left": "data_only" } ], "outcomes": [ { "key": "find", "label": "Find", "state": "yes", "text": "Docs agents can read: llms.txt, an OpenAPI and an MCP server; a docs page for each core task", "have": [ "llms_txt", "openapi", "mcp" ], "docs": "complete" }, { "key": "access", "label": "Access", "state": "yes", "text": "Gets in on its own: pay per call, sign-up in a browser", "way": "pay_per_call", "stage": "in" }, { "key": "use", "label": "Use", "state": "yes", "text": "Work done: 100% of the core", "stage": "work" }, { "key": "pay", "label": "Pay", "state": "part", "text": "Pays per call for part of it: paid $0.01 a call (x402), 12 Oct", "value": "partial", "route": "agent_rail", "per_call": { "caps": [ "cap-04" ], "core": 8, "share": 12 }, "stage": "pay" }, { "key": "leave", "label": "Leave", "state": "yes", "text": "Nothing to cancel; deletes its data, but the login stays", "at": "delete", "left": "data_only", "stage": "leave" } ], "access": [ { "key": "pay_per_call", "label": "Pay per call", "routes": [ "pay_per_call" ], "minutes": 0.5, "core": "1/8" }, { "key": "browser_signup", "label": "Sign-up in a browser", "routes": [ "magic_link" ], "minutes": 5, "core": "8/8" } ], "minutes": 0.5, "next": { "to": 5, "text": "Next: let an agent buy credits or a plan without a person" }, "stop": "delete", "core": "8/8", "scores": { "coverage": 87, "reliability": 79, "resilience": 89, "setup": 100, "surface_coverage": null, "docs_accuracy": null, "docs_completeness": null }, "parts": { "holds_up": 84, "docs_match": null, "setup": 100, "security": null, "standards": [ { "standard": "MCP", "state": "current", "behind": null, "value": "2026-07-28" }, { "standard": "MCP discovery", "state": "current", "behind": null, "value": "ok" }, { "standard": "OpenAPI", "state": "behind", "behind": 2, "value": "3.0.3" } ] }, "reliability_method": "pass^k", "resilience": { "parts": { "error_legibility": 79, "recovery": 89, "idempotency": 100 }, "summary": { "error_legibility": "mixed", "recovery": "good", "idempotency": "safe", "rate_limits": "none-seen", "notes": "400/401/404 answers name the fix and link the docs; duplicate creates answer 500 or 504 instead of 409 (no duplicates made), and a missing route answers 421 text/plain. 15 quick reads all passed (limit 60/min)." } }, "stress": [ { "capability": "Scrape a page to HTML/markdown without managing a session", "probe": "missing required url", "outcome": "400 {\"message\": \"url must be a valid URL including the scheme, e.g. https://example.com.\", \"error\": \"Bad Request\"}", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "bad enum value", "outcome": "400 {\"message\": \"device is not one of the supported values. Use one of the documented values and retry.\", \"error\": \"Bad Request\"}", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "unknown id in own namespace", "outcome": "404 {\"message\": \"Session not found. It may have ended, expired, or belong to a different organization. Check the session id, or list your sessions to confirm it exists.\", \"error\": \"Not Found\", \"linkTo", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Release/stop a browser session", "probe": "release unknown session", "outcome": "404 {\"message\": \"Session not found\"}", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "wrong API key", "outcome": "401 {\"error\": \"Unauthorized\", \"message\": \"Invalid Steel API key. The key sent in the 'steel-api-key' header does not match any account. Create or rotate a key at https://app.steel.dev/settings/api-key", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Store and auto-inject login credentials (incl. TOTP) into a session", "probe": "repeat a create", "outcome": "201 then 500 {\"message\": \"Steel hit an unexpected server error while processing this request. Retry shortly; if it persists, contact support with the request details.\", \"error\": \"Internal Server Error", "grade": "vague", "idempotent": "yes", "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "repeat create with the same custom sessionId", "outcome": "201, then 504 \"error code: 504\" (text/plain, after a long wait); the session itself was not duplicated", "grade": "vague", "idempotent": "n/a", "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "burst of 15 GET /v1/sessions", "outcome": "15 x 200; no rate-limit headers on GET (X-RateLimit-Limit 60 / Remaining / Reset seen earlier on a POST /v1/sessions 403); plan limit 60 requests per minute", "grade": "clear", "idempotent": null, "rate_limit": "none-seen" }, { "capability": "Persist and reuse a browser profile (cookies, auth, extensions, settings) across sessions", "probe": "interrupt a persistProfile session right after create", "outcome": "session released; its profile ec9e9236 still reaches READY (consistent, no half state)", "grade": "clear", "idempotent": null, "rate_limit": null }, { "capability": "Create a cloud browser session", "probe": "revoked key", "outcome": "401 {\"error\": \"Unauthorized\", \"message\": \"Invalid Steel API key. The key sent in the 'steel-api-key' header does not match any account. Create or rotate a key at https://app.steel.dev/settings/api-key", "grade": "clear", "idempotent": null, "rate_limit": null } ], "surface_audit": null, "coverage_core": 100, "after_wall": null, "coverage_source": "computed", "driver": { "version": 4, "model": "claude-opus-5-5", "profile": "full", "assisted": false, "handoff": false, "prompt_sha": "b52e4dcfa2c5", "kb_version": "3+overlay-1353601952", "identity": "e8a92f24a9a8" }, "methodology": 15, "rules_date": "2026-10-15", "engine": { "runner": "omp", "model": "claude-opus-5-5", "driver": 4, "signed": true, "inbox": [ "agentdrives.com" ], "robots": "obey" }, "same_level_drives": 2, "drives": 2, "works_assisted": null, "freshness": "fresh", "nothing_to_pay": false, "core_gated": false, "profiles": {}, "agent_check": null, "agent_pass": null, "who_gets_in": { "server": { "state": "in" }, "signed": { "state": "page", "kind": "signup", "at": "2026-10-15" }, "browser": { "state": "in", "measured": false }, "our_key": "pending", "robots": null, "tip": false }, "ladder": { "docs": { "status": "headless", "note": "llms.txt with agent instructions, every page as .md and via Accept: text/markdown, OpenAPI 3.0.3 found through /.well-known/api-catalog." }, "signup": { "status": "browser", "note": "Continue with Email on app.steel.dev (no password, a sign-up link by mail), then a 3-step questionnaire; no bot check seen. No sign-up API.", "way": "pay_per_call" }, "verify": { "status": "browser", "note": "The sign-up link arrived in under a minute and was opened in the browser; it lasts 10 minutes." }, "credentials": { "status": "browser", "note": "API keys are made in the dashboard. POST /v1/api-keys mints project keys headless, but only with an organization key, which is itself dashboard-only; revoke is dashboard-only.", "via": "" }, "first_call": { "status": "headless", "note": "GET /v1/sessions with the steel-api-key header -> 200.", "route": "account" }, "first_action": { "status": "headless", "note": "Created a cloud browser session with the Node SDK, drove it over CDP with Playwright and released it." }, "pay": { "status": "headless", "grade": "P4", "rails": [ "x402 v2 on x402.steel.dev (Base, Solana USDC), scrape/screenshot/pdf only", "Stripe Projects (documented, not tried)", "Stripe Elements card form in the dashboard" ], "rail_ids": [ "x402", "stripe-projects", "stripe-elements" ], "first_party": true, "rail_scope": "side", "trial_path": "free tier", "3ds": "none", "route": "agent_rail", "checkout": { "reached": "card_form", "processor": "stripe_elements", "captcha": "invisible", "three_ds": "not_seen", "card_form": true, "phone_field": "none", "wallets": [ "google_pay", "other" ], "rail_offer": "none", "price": "250.00", "currency": "USD", "period": "month", "plan": "Scale", "last_button": "Save payment method" }, "person": null, "ours": "no_card", "note": "We paid one x402 v2 call ($0.01 USDC on Base, tx 0xdd2f191a...4b03b20, confirmed, 200 with content): pay-per-call works with no account, but only for scrape, screenshot and PDF. Plans (Scale $250/month) and credit top-ups (from $10) go through a Stripe card form in the dashboard; Stripe Projects is documented but not tried.", "paid": { "rail": "x402", "network": "eip155:8453", "testnet": false, "tx": "0xdd2f191a36d78ce0595ed35cb081b4834a07f02f04d66904c6cdabbeb4b03b20", "amount": 0.01, "currency": "USD", "at": "2026-10-12T21:20:49Z", "source": "pay_tx.json" }, "per_call": { "caps": [ "cap-04" ], "paid_caps": [ "cap-04" ], "core": 8, "share": 12, "proof": "route" } }, "cancel": { "status": "n/a", "note": "Nothing to cancel: our agent used it pay-per-call.", "docs_note": "Nothing to cancel: no plan, paid balance, or card trial was started on this drive (Launch stays $0 + usage; the one x402 call was a single pay-per-call purchase that does not renew). The docs have no cancel/downgrade page; the dashboard's \"Manage billing\" button (Stripe portal) was not opened.", "docs_grade": "", "nothing": "pay_per_call" }, "delete": { "status": "blocked", "note": "Delete organization (hold to delete) removed the org's sessions, profiles, credentials and keys: the project key and org key then answered 401. But the sign-in login (the agent's inbox / the GitHub-linked identity) kept working: it was dropped straight into a freshly created empty org (\"Anon's Team\"), and the GitHub grant had to be revoked separately on GitHub's side. There is no self-serve user-account delete (Settings > Security is \"Page Not Found\"); account termination is by request only per the privacy policy. Deleted: org data and keys. Stayed: the user's login.", "left": "data_only", "account": true } }, "routes": [ { "route": "pay_per_call", "offered": "documented", "tried": true, "not_tried": null, "result": "in", "wall": null, "person": "none", "brings": "wallet", "fresh": true, "minutes": 0.5 }, { "route": "stripe_projects", "offered": "documented", "tried": false, "not_tried": "no_kit", "result": null, "wall": null, "person": null, "brings": null, "fresh": null, "minutes": null }, { "route": "device_login", "offered": "documented", "tried": true, "not_tried": null, "result": "not_reached", "wall": null, "person": "none", "brings": "nothing", "fresh": false, "minutes": 1 }, { "route": "sso_enterprise", "offered": "documented", "tried": false, "not_tried": "assisted_only", "result": null, "wall": null, "person": null, "brings": null, "fresh": null, "minutes": null } ], "checkout": { "reached": "card_form", "processor": "stripe_elements", "captcha": "invisible", "three_ds": "not_seen", "phone_field": "none", "wallets": [ "google_pay", "other" ], "rail_offer": "none", "period": "month", "card_form": true, "price": "250.00", "currency": "USD", "plan": "Scale", "last_button": "Save payment method" }, "docs": { "at": "2026-10-12", "read": 211, "listed": 218, "sampled": false, "overall": "complete", "getting_started": "found", "auth": "found", "errors": "found", "examples": "good", "freshness": "fresh", "newest": "2026-10-12", "core_pages": "10 of 10", "capabilities": "covered" }, "claims": { "claimed": 19, "tried": 16, "held": 15, "broken": 0, "unclear": 1, "not_tried": 3, "undocumented_works": 2 }, "pay_options": { "checked": "2026-10-12", "source": "probe", "options": [ { "id": "stripe-projects", "name": "Stripe Projects", "kind": "agent-rail", "first_party": true, "lead": false, "networks": [], "testnet": false }, { "id": "x402", "name": "x402", "kind": "agent-rail", "first_party": true, "lead": false, "networks": [ "Base", "Solana" ], "testnet": false } ], "agentic": [ "stripe-projects", "x402" ], "paid": { "rail": "x402", "network": "eip155:8453", "testnet": false, "tx": "0xdd2f191a36d78ce0595ed35cb081b4834a07f02f04d66904c6cdabbeb4b03b20", "amount": 0.01, "currency": "USD", "at": "2026-10-12T21:20:49Z" }, "exercised": true, "detected_grade": null, "trial": { "no_card": null, "card_required": null, "free_plan": true }, "owner_fixes": [ { "title": "Sell the plan or credits over the rail, not only side endpoints", "how": "Let the paid call buy what the product sells, so the rail covers the whole product." } ] }, "surfaces": { "api": true, "openapi": true, "cli": true, "sdk": true, "mcp": "official", "llms_txt": true, "webhooks": false, "sandbox": false }, "surface_notes": { "api": "REST, 75 operations, steel-api-key header", "openapi": "3.0.3 at api.steel.dev/sdk-openapi.json via RFC 9727 api-catalog; no profile delete, no key revoke", "mcp": "official, stdio, 16 tools, 28 Jul 2026 server/discover", "cli": "steel 0.4.4, --json everywhere", "sdk": "steel-sdk (Node 0.18.0, Python)" }, "can_do": [ "Start a cloud Chrome session, drive it with Playwright over CDP and release it", "Scrape a page to HTML or markdown, take a screenshot or a PDF with one call", "Store a login for a site and have Steel fill and submit the form in a session without the agent seeing the password", "Save a browser profile (cookies, localStorage) and start later sessions logged in", "Upload, list, download and delete files in a session or for the whole org", "Load its own Chrome extension into sessions", "Read a session's agent traces, logs, cost and HLS replay", "Run the same work from the CLI (steel browser ..., --json) or the official MCP server", "Pay per scrape/screenshot/PDF call with x402 USDC, no account" ], "cannot_do": [ { "what": "Solve CAPTCHAs or use Steel proxies on the free credits", "why": "needs at least $10 in paid balance (403)" }, { "what": "Sign up or get its first key without a browser", "why": "email-link sign-up and key creation are dashboard-only; POST /v1/api-keys needs an org key from the dashboard" }, { "what": "Delete a profile", "why": "no DELETE in the API (421 No route); profiles expire after 30 days unused" }, { "what": "Delete its own account", "why": "Delete organization keeps the login and makes a new empty org; user deletion is by request" }, { "what": "Revoke a key by API", "why": "dashboard only; DELETE /v1/api-keys/{id} -> 403 \"API keys cannot manage API keys\"" } ], "blockers": [ "Sign-up and the first API key need a browser (email link + dashboard)", "CAPTCHA solving and proxies need $10+ paid balance, bought with a card in the dashboard" ], "tips_for_owner": [ "Let an agent sign up and get a key headless", "Let x402 or Stripe Projects fund the wallet", "Add DELETE for profiles and API keys", "Let users delete their own account", "Make the auth-context round trip lossless", "Return 409 on duplicate creates, not 5xx", "Update the x402 and forge docs" ], "tips_for_agents": [ "Send the key in the steel-api-key header, not Authorization: Bearer", "Retry GET /v1/sessions/{id} once if it 404s right after create", "Use --json on every CLI command; forge templates are playwright-ts, playwright-py, ...", "Profile PATCH must be multipart/form-data", "When reusing GET /context, rewrite localStorage keys to https://origin", "The MCP server refuses a fresh session when saved profiles exist: pass guest=true or a profile_id", "The dashboard shows a new key once; copy it in the same step" ], "selfhost": { "install": { "status": "skipped", "minutes": 0, "note": "no docker in the drive sandbox (steel-browser Docker image, Railway template, steel dev install)" } }, "summary": "An agent can do almost all of Steel through its API, SDK, CLI or official MCP server: sessions over CDP, scrape/screenshot/PDF, profiles, stored logins, files and extensions all worked and read back. Getting in needs a browser (email link sign-up and a dashboard key), CAPTCHA solving and proxies need $10 of paid balance bought by card, and pay-per-call x402 covers scrape, screenshot and PDF with no account.", "wall": "Email sign-up and dashboard-only API key", "plan_scope": "free plan (Launch, $30 one-time credits)", "robots_stop": null, "robots": null, "plain": { "summary": "Steel is a cloud browser API that lets an AI agent run real Chrome sessions, scrape pages, take screenshots/PDFs, and store logins and profiles. An agent did almost all of this entirely on its own through the API, SDK, CLI, or official MCP server. The one place it needed a human-style browser step was getting in at all: signing up (an emailed link) and the first API key both come from the web dashboard, and deleting the organization left the underlying login account still active.", "can_do": [ "Start a cloud browser session, click around and browse pages, then shut it down", "Grab a page as a screenshot, a PDF, or clean text with one call", "Save a login and have it auto-filled and submitted next time", "Keep a browser's cookies and sign-in state saved for reuse later", "Upload and manage files or browser extensions used during a session", "Watch a session live or review a recording and action log afterward", "Do all of the above through a command-line tool or the official AI-agent (MCP) connector", "Pay a tiny per-use fee automatically with no account at all, for basic scraping/screenshots/PDFs" ], "cannot_do": [ { "what": "Sign up and get its first API key without a browser", "why": "sign-up and key creation only happen in the web dashboard" }, { "what": "Use CAPTCHA-solving or proxy features on the free trial", "why": "those require adding at least $10 of paid balance by card" }, { "what": "Delete its account so the login itself stops working", "why": "deleting the organization wipes its data but the login still gets a fresh empty one" }, { "what": "Revoke its own API key or delete a saved browser profile by itself", "why": "both actions are dashboard-only; no API exists for them" } ] }, "plan_gated": [ { "capability": "Auto-solve CAPTCHAs", "plan": "Launch with $10+ paid balance, or Scale", "evidence": "POST /v1/sessions {solveCaptcha:true} -> 403 \"Launch requires at least $10 in paid balance to use CAPTCHA solving or Steel proxies...\"" }, { "capability": "Residential proxies with geo targeting", "plan": "Launch with $10+ paid balance, or Scale", "evidence": "session useProxy {geolocation:{country:'US'}} -> same 403" }, { "capability": "Dedicated static IP", "plan": "Scale ($5/IP)", "evidence": "Plans page: Dedicated IPs - on Launch, $5/IP on Scale" } ], "reply": null, "capabilities": [ { "id": "cap-01", "group": "Sessions", "capability": "Create a cloud browser session", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/sessions", "mcp": null, "cli": "steel browser start", "ui": "Dashboard > Sessions" }, "check": "GET /v1/sessions/{id} returns status live with a websocketUrl", "source": "https://docs.steel.dev/overview/sessions-api/overview; https://docs.steel.dev/overview/sessions-api/quickstart" }, { "id": "cap-02", "group": "Sessions", "capability": "Drive the session with Playwright/Puppeteer/Selenium over CDP", "weight": "core", "plan": "free", "surfaces": { "api": "wss://connect.steel.dev?apiKey=&sessionId=", "mcp": null, "cli": "steel browser open/click/fill/type", "ui": null }, "check": "page.goto/click calls change page.url and page.content inside the live session", "source": "https://docs.steel.dev/cookbook/playwright; https://docs.steel.dev/cookbook/puppeteer; https://docs.steel.dev/cookbook/selenium" }, { "id": "cap-03", "group": "Sessions", "capability": "Release/stop a browser session", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/sessions/{id}/release", "mcp": null, "cli": "steel browser stop", "ui": "Dashboard > Sessions" }, "check": "GET /v1/sessions/{id} status transitions to released/completed", "source": "https://docs.steel.dev/overview/sessions-api/session-lifecycle" }, { "id": "cap-04", "group": "Browser Tools", "capability": "Scrape a page to HTML/markdown without managing a session", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/scrape", "mcp": null, "cli": "steel scrape ", "ui": null }, "check": "response result.content.markdown/html contains the target page's text", "source": "https://docs.steel.dev/overview/browser-tools/overview; https://docs.steel.dev/llms.txt" }, { "id": "cap-05", "group": "Browser Tools", "capability": "Capture a screenshot of a page", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/screenshot", "mcp": null, "cli": "steel screenshot --full-page", "ui": null }, "check": "response is an image file matching the requested page", "source": "https://docs.steel.dev/overview/browser-tools/overview; https://docs.steel.dev/overview/steel-cli" }, { "id": "cap-06", "group": "Browser Tools", "capability": "Generate a PDF of a page", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/pdf", "mcp": null, "cli": "steel pdf ", "ui": null }, "check": "response is a PDF file whose text matches the target page", "source": "https://docs.steel.dev/overview/browser-tools/overview; https://docs.steel.dev/overview/steel-cli" }, { "id": "cap-07", "group": "Anti-bot", "capability": "Auto-solve CAPTCHAs encountered during a session", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/sessions {solveCaptcha: true}; GET /v1/sessions/{id}/captchas/status; POST /v1/sessions/{id}/captchas/solve", "mcp": null, "cli": "steel browser captcha solve", "ui": null }, "check": "GET captchas/status shows task status solved for the page's CAPTCHA task", "source": "https://docs.steel.dev/overview/captchas-api/overview" }, { "id": "cap-08", "group": "Anti-bot", "capability": "Route session traffic through residential or custom proxies with geo targeting", "weight": "core", "plan": "paid", "surfaces": { "api": "POST /v1/sessions {useProxy: {...}}", "mcp": null, "cli": null, "ui": null }, "check": "the page's reported IP/geolocation (e.g. an IP-echo site) matches the requested country/state/city", "source": "https://docs.steel.dev/overview/stealth/proxies" }, { "id": "cap-09", "group": "Persistence", "capability": "Persist and reuse a browser profile (cookies, auth, extensions, settings) across sessions", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/sessions {persistProfile}; POST/PATCH /v1/profiles", "mcp": null, "cli": "steel profile import/sync/list/delete", "ui": "Dashboard > Profiles" }, "check": "a new session started with profileId reuses prior login state (e.g. lands on an authenticated page without re-login)", "source": "https://docs.steel.dev/overview/profiles-api/overview" }, { "id": "cap-10", "group": "Persistence", "capability": "Store and auto-inject login credentials (incl. TOTP) into a session", "weight": "core", "plan": "free", "surfaces": { "api": "POST /v1/credentials; POST /v1/sessions {credentials: {}}", "mcp": null, "cli": "steel credentials create/list/update/delete", "ui": null }, "check": "session navigated to the credential's origin ends on a logged-in page (e.g. dashboard element present) without exposing the password", "source": "https://docs.steel.dev/overview/credentials-api/overview" }, { "id": "cap-11", "group": "Files", "capability": "Upload/download/list/delete files inside a live session", "weight": "secondary", "plan": "free", "surfaces": { "api": "POST/GET/DELETE /v1/sessions/{id}/files", "mcp": null, "cli": null, "ui": null }, "check": "GET /v1/sessions/{id}/files lists the uploaded file; a form upload in-session picks it up via setInputFiles", "source": "https://docs.steel.dev/overview/files-api/overview" }, { "id": "cap-12", "group": "Files", "capability": "Store files globally across the organization, reusable in any session", "weight": "secondary", "plan": "free", "surfaces": { "api": "POST/GET/DELETE /v1/files", "mcp": null, "cli": null, "ui": null }, "check": "GET /v1/files returns the uploaded file's path; a session referencing that path can mount it", "source": "https://docs.steel.dev/overview/files-api/overview" }, { "id": "cap-13", "group": "Extensions", "capability": "Upload a Chrome extension (zip/crx or Chrome Web Store URL) and inject into sessions", "weight": "secondary", "plan": "free", "surfaces": { "api": "POST /v1/extensions; POST /v1/sessions {extensionIds}", "mcp": null, "cli": null, "ui": null }, "check": "GET /v1/extensions lists the extension; a session created with its id loads it (verifiable via CDP/extension behavior)", "source": "https://docs.steel.dev/overview/extensions-api/overview" }, { "id": "cap-14", "group": "Observability", "capability": "Watch or embed a session live (view/control in real time)", "weight": "secondary", "plan": "free", "surfaces": { "api": null, "mcp": null, "cli": "steel browser live", "ui": "Dashboard > Sessions > Live View / embeddable iframe" }, "check": "the embedded live-session URL renders the current page state of the running session", "source": "https://docs.steel.dev/overview/sessions-api/embed-sessions/live-sessions" }, { "id": "cap-15", "group": "Observability", "capability": "Replay a recording of a past session", "weight": "secondary", "plan": "free", "surfaces": { "api": null, "mcp": null, "cli": null, "ui": "Dashboard > Sessions > Past Sessions" }, "check": "the past-session embed URL plays back recorded video matching the session's actions", "source": "https://docs.steel.dev/overview/sessions-api/embed-sessions/past-sessions" }, { "id": "cap-16", "group": "Observability", "capability": "View an agent trace timeline (actions synced to video) and export it", "weight": "secondary", "plan": "free", "surfaces": { "api": "GET agent traces timeline JSON", "mcp": null, "cli": null, "ui": "Dashboard > Session > Agent Traces" }, "check": "GET the session's agent-traces endpoint returns a JSON timeline of recorded actions; export produces markdown/JSON/ZIP", "source": "https://docs.steel.dev/overview/agent-traces/overview; https://docs.steel.dev/overview/agent-traces/api; https://docs.steel.dev/overview/agent-traces/timeline" }, { "id": "cap-17", "group": "Session config", "capability": "Let a human take control of a running agent session", "weight": "secondary", "plan": "free", "surfaces": { "api": null, "mcp": null, "cli": null, "ui": "Live Session embed with control handoff" }, "check": "input events from the embedded live view reach the remote browser while human control is active", "source": "https://docs.steel.dev/overview/sessions-api/human-in-the-loop" }, { "id": "cap-18", "group": "Session config", "capability": "Launch a session in mobile-device mode (mobile fingerprint, touch)", "weight": "secondary", "plan": "free", "surfaces": { "api": "POST /v1/sessions {mobile config}", "mcp": null, "cli": null, "ui": null }, "check": "the page's reported userAgent/viewport/touch support matches a mobile device profile", "source": "https://docs.steel.dev/overview/sessions-api/mobile-mode" }, { "id": "cap-19", "group": "Session config", "capability": "Launch a session in fullscreen/no-Chrome-UI mode at 1920x1080", "weight": "peripheral", "plan": "free", "surfaces": { "api": "POST /v1/sessions {fullscreen config}", "mcp": null, "cli": null, "ui": null }, "check": "a screenshot from the session shows no browser chrome and full 1920x1080 page content", "source": "https://docs.steel.dev/overview/sessions-api/fullscreen-mode" }, { "id": "cap-20", "group": "Session config", "capability": "Reuse an existing authenticated browser context/auth across sessions (cookies/local storage)", "weight": "secondary", "plan": "free", "surfaces": { "api": "session context export/import", "mcp": null, "cli": null, "ui": null }, "check": "a new session loaded with the captured context opens an already-authenticated page", "source": "https://docs.steel.dev/overview/sessions-api/reusing-auth-context" }, { "id": "cap-21", "group": "Session config", "capability": "Lease a dedicated static IP for sessions", "weight": "secondary", "plan": "paid", "surfaces": { "api": "dedicated IP config on session create", "mcp": null, "cli": null, "ui": null }, "check": "repeated sessions using the dedicated IP report the same egress IP address", "source": "https://docs.steel.dev/overview/sessions-api/dedicated-ips" }, { "id": "cap-22", "group": "Deployment", "capability": "Self-host the Steel browser runtime (Docker/Railway/cluster)", "weight": "secondary", "plan": "free", "surfaces": { "api": null, "mcp": null, "cli": "steel dev install / steel dev start", "ui": null }, "check": "self-hosted instance's /v1/health endpoint responds OK and sessions can be created against it via --api-url", "source": "https://docs.steel.dev/overview/self-hosting/docker; https://docs.steel.dev/overview/self-hosting/railway; https://docs.steel.dev/overview/self-hosting/clustering" }, { "id": "cap-23", "group": "CLI/Skills", "capability": "Scaffold a starter automation project from a template", "weight": "peripheral", "plan": "free", "surfaces": { "api": null, "mcp": null, "cli": "steel forge