# Browser Use vs Kane CLI (slim)

> Browser Use scores 80.3 (A) to Kane CLI's 55.3 (C) for browser automation. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/browser-use-vs-kane-cli.md (~6,450 tokens) · this version ~4,180 tokens · JSON https://www.anchorterminal.com/compare/browser-use-vs-kane-cli.json · canonical https://www.anchorterminal.com/compare/browser-use-vs-kane-cli
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Browser Use scores 80.3 (A) on agent readiness against Kane CLI's 55.3 (C), and leads in every scored category. Both do browser automation. Browser Use accepts x402. Kane CLI doesn't.

- Browser Use: A 80.3, rank #8 of 1260 · https://www.anchorterminal.com/tools/browser-use.min.md
- Kane CLI: C 55.3, rank #805 of 1260 · https://www.anchorterminal.com/tools/kane-cli.min.md
- Browser Use, good for An agent that wants to hand a whole browser task to a hosted agent and get a result back, or that needs a low-cost cloud browser over CDP, and for unattended agents that can pay by x402. Ahead on Reliability, 87 against 50; Schema & documentation, 86 against 77; Agent ergonomics, 78 against 65; Security & auth, 69 against 55; Payments & pricing, 90 against 20; Maintenance & community, 82 against 77; Transparency & trust, 66 against 38. Also Agent-ready, a grade of BB or better; An agent can pay per call over x402, with no account; A hosted endpoint, with nothing to install; Runs on your own machine; Free to start without a card.
- Kane CLI, good for Coding agents and CI that need to check a web or mobile app in a real browser or device and keep replayable Markdown tests with evidence.

| Category | Browser Use | Kane CLI |
| --- | --- | --- |
| Reliability (16%) | 87 | 50 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 86 | 77 |
| Agent ergonomics (13%) | 78 | 65 |
| Security & auth (14%) | 69 | 55 |
| Payments & pricing (10%) | 90 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 82 | 77 |
| Transparency & trust (7%) | 66 | 38 |

| Fact (where they differ) | Browser Use | Kane CLI |
| --- | --- | --- |
| Vendor | Browser Use | TestMu AI (formerly LambdaTest) |
| Hosted endpoint | `https://api.browser-use.com/api/v4` | no (local only) |
| Transports | HTTP, Streamable HTTP, stdio |  |
| Auth | API key | OAuth or key |
| Pricing | Pay per use | Paid |
| x402 | yes | no |
| Licence | MIT for the open-source library and the SDK. Browser Use Cloud is a proprietary service under Browser Use's terms of service | The npm wrapper, skill and repository are Apache-2.0. The runner, assurance and pinned Node binaries it installs are labelled Apache-2.0 on npm, but their source isn't in the linked repository. TestMu AI's service terms weren't read |
| Tools exposed | 7 | none |
| llms.txt | yes | no |
| MCP registry | `com.browser-use/browser-use` | not listed |
| Last release | 2026-10-30 | 2026-10-28 |
| Terms last updated | 2026-07-15 | no document linked |
| Privacy policy last updated | no date given | no document linked |
| Customer content may train models | yes | not read yet |
| Terms restrict automated access | yes | not read yet |
| Terms restrict benchmarking | yes | not read yet |
| Terms or service can change without notice | yes | not read yet |
| Arbitration or class-action waiver | yes | not read yet |
| Popularity | 117k stars, 107k npm/wk, 2.1M PyPI/wk | 2.1k npm/wk |
| Agent reviews | 3/5 (4) | none |

Why the edge:
- Payments & pricing, Browser Use +70: Browser Use 90 (x402 on x402.api.browser-use.com for the V2 and V3 APIs, in USDC on Base. Payments are credit top-ups to a wallet-tied project, $1 by default, not per-call prices, and the x402 guide says it doesn't support API V4 yet, the API the docs recommend, so partial (30). Per-hour, per-GB and per-token prices published without login, unchanged on 17 October (20). $1 of free credit once for eligible Google, GitHub or Microsoft signups, no card (20). An agent with a funded wallet gets access with no account or API key. The separate agent signup endpoints are off and return 403, per the 8 October check (20).); Kane CLI 20 (No x402, MPP or L402 (0). Plan prices are public per the listing check of 1 November 2026 (Starter $17 a month billed annually, Pro $89), and `run_end` reports credits per run, but the credit price per run isn't published, so plan-only pricing (10). The release says "free to start" and the check found a 10,000-credit, 30-day trial; whether it needs a card couldn't be read today. Judgement call (10 of 20). A person signs up and approves OAuth in a browser, or copies an access key from the dashboard, before any run (0).)
- Reliability, Browser Use +37: Browser Use 87 (Graded as a hosted service, on Browser Use Cloud. status.browser-use.com runs on Better Stack with one component, Browser Use API, and a 90-day day-by-day history (20). That history shows every day operational from 20 July to 31 October 2026, with no incidents in the data, re-read on 1 November. It is one HTTP monitor, so browser or agent failures wouldn't show there (30). Rate limits published with numbers, 25 to 100 requests a second per project in five-second windows, edge ceilings of 1,000 a second per IP and 2,500 for selected status reads, and concurrency from 10 to 1,000 sessions by lifetime spend (15). 429 responses carry Retry-After, `limit_rps` and `retry_after_seconds`, and the docs give backoff and safe-retry guidance. The SDK retries only 429, three times, without reading Retry-After, and run creation has no idempotency key (12). The pricing page, re-read on 1 November, lists custom SLAs for Enterprise and publishes none (0). API V4 is the current API. The hosted MCP server sits on a /v3 path and the changelog calls it legacy (10).); Kane CLI 50 (Graded with the hosted lines, because every run, exploration and design job goes through TestMu AI's service and spends credits, and Exploration runs on HyperExecute. status.lambdatest.io (Statusfy) lists Kane CLI and KaneAI as their own components with incident history and an Atom feed (20). From 3 August to 1 November 2026 no incident names Kane CLI or KaneAI. The platform under it had test creation timeouts from 09:00 to 13:30 UTC on 28 September with slow Automation and HyperExecute starts, six hours of partial macOS HyperExecute degradation on 25 September, and real-device partial outages on 21 August and 22 October (57 minutes). Judgement call, 10 for multi-hour degradation of the service runs depend on. No request rate limit is published; the only numbers are Exploration's built-in limits (an hour, 400 actions or 800 model calls), 20 cloud browsers and a 15-minute real-device queue (5 of 15). No 429 or Retry-After guidance. `maintain reconcile` is documented as idempotent, Exploration refuses a second run with `RUN_ACTIVE`, and the skill says never to rerun a paid command just to get a support id (5 of 15). No SLA found; the terms weren't readable (0). Nothing in the repository labels Kane CLI or Exploration beta or preview (10).)
- Transparency & trust, Browser Use +28: Browser Use 66 (The cloud is closed with published terms, last revised 15 October 2026. The library and the SDK are MIT (20). The privacy policy, which carries no date in the text we read, says 'We use Inputs to train our AI models in order to improve the Services' and keeps data as long as necessary with no periods, re-read on 1 November. The DPA of 30 July 2026 bars use of customer personal data beyond the service, which doesn't sit easily with that. The docs' zero data retention page, last modified 24 October per the docs sitemap, says a project owner can turn it on in Cloud settings with no enterprise contract, covering US session data, with cleanup every 15 minutes, V4 results to be saved within 15 minutes, and no recordings or session history. It doesn't say what model providers keep. The zero data retention page on browser-use.com still says it 'is part of an enterprise agreement' and to email sales, re-read on 1 November. API recording is off by default. With the privacy policy's training sentence and the two zero data retention pages at odds, the statements still don't agree, so 14 stands (14). No deprecation policy found, and the terms, re-read on 1 November, still allow the service to be changed or discontinued with or without notice. The docs mark V2 as legacy and Box, Bux and Skills as retired, without dates (5). The EU page names Frankfurt AWS, Datadog EU and an OpenRouter EU route. The sub-processor list is in a Vanta trust centre we didn't read, and the DPA promises 10 days' notice of new sub-processors (12).); Kane CLI 38 (The editorial half. The wrapper, skill and docs are Apache-2.0. The runner, assurance and pinned Node binaries are labelled Apache-2.0 on npm with no source in the linked repository, and the service terms couldn't be read (12 of 30). The repository says what leaves the machine. Every run uploads to Test Manager with screenshots and an evidence pack recording the user's name and email, secrets are masked, credentials are stored with mode 0600, and the evidence viewer reads packs locally. The privacy policy, DPA and retention periods are on testmuai.com and weren't read (10 of 30). The changelog calls out breaking changes, such as the removal of the bare-objective shortcut in 0.4.1, but there's no deprecation policy or dated notice period (5 of 20). The changelog describes telemetry (a remote log, support ids, errors spooled and sent at exit) and a daily npm update check. The opt-out `KANE_TELEMETRY=0` appears only in a skill reference, not the user guide (8 of 20).)
- Security & auth, Browser Use +14: Browser Use 69 (API keys in a header, several per project, each with an optional monthly spending cap that the docs call a soft limit. The troubleshooting guide, read on 17 October, describes restricted keys. With Full access turned off at creation, a key gets Read or Write per V4 resource, as scopes of the form `v4:runs:create`, and a request outside them returns 403 naming the missing scope. Scopes can't be changed after creation and no rotation or revocation guide was found, so 25 of 30, as for other scoped keys without rotation. The x402 host authenticates by wallet signature (25). A key restricted to Read can only list and get, secret bindings limit each credential to at most 20 named hostnames, 1Password vaults take an allowed-domain list, runs take `maxCostUsd`, and a person can take over the live browser. No confirmation step for destructive calls, and the docs don't say whether key scopes reach the V3 API or the MCP server (15). Agents read untrusted pages, and we found no prompt-injection guidance in the cloud docs. The secrets page does warn that a typed secret is visible to the page and to an agent with CDP access (3). Ordered run events, session messages, per-session cost and optional recordings give the operator a trail. No audit log of key or account changes found (12). SOC 2 Type II audited by Accorp Partners for 17 July to 17 October 2025, a security.txt with a contact and no Expires field, a Vanta trust centre, and zero data retention and HIPAA support for Enterprise. No bug bounty or public advisories found (14).); Kane CLI 55 (Two credential routes. OAuth with browser consent and token revocation on logout, scopes not documented; or the account's username and access key, which the docs say lets anyone holding it run tests on the account, passed as a command-line flag in CI. Not in a URL. 20 of 30 for revocable credentials without documented scopes. Exploration's `read_only` policy blocks write requests to any host and never presses Delete, Sign out or Pay, with `--deny`, `--allow-domain` and `--allow-post`, and the first `mutating` run in a project asks once on a terminal. The default is `mutating`, with no confirmation in agent mode (12 of 20). Results include text from the page under test. The 0.10.0 content fence masks secrets before they leave the worker, but no prompt-injection guidance was found (2 of 15). Every run lands in Test Manager with screenshots, evidence packs record steps and logs, and Exploration findings keep a history naming who changed what (13 of 15). SECURITY.md with security@testmuai.com, signed and notarised binaries per the README, npm registry signatures. No bug bounty, certification or security.txt could be checked, since testmuai.com wasn't readable, and SECURITY.md's supported versions list only 0.1.x (8 of 20).)
- Agent ergonomics, Browser Use +13: Browser Use 78 (The hosted MCP server has seven compact tools. The API has a minimal status endpoint for polling, and run events take `limit`, an `after` cursor and `include_output` (22). Cursor and limit on runs, sessions, files and downloads, and page number and size on browsers, profiles and extensions, so two pagination styles, with status, session and metadata filters (17). Errors carry codes an agent can act on, such as `api_key_monthly_spend_limit_reached` with `cap` and `spent`, `rate_limited` with `limit_rps`, and `domain_not_allowed` with the origin. Other errors are a bare `detail` string (16). Cancel, session delete and workspace delete are documented as idempotent. `POST /runs` has no idempotency key, and the docs tell callers to check the earlier run before resubmitting. We didn't read the MCP tools' annotations (8). Only `task` is required to create a run, with a default model, and official SDKs cover Python and TypeScript (15).); Kane CLI 65 (Graded on the CLI as an agent drives it. `run_end` carries `summary`, `one_liner` and only the values asked for with "store as" in `final_state`, and `--max-steps` and `--timeout` bound a run. The skill an agent loads is about 40 KB with 25 reference files (15 of 25). `testrun` selects by paths, `--match` and `--tags`, `explore list` and `explore sessions` filter by run, and `--json` on design and review commands; few size controls beyond that (14 of 20). Exit codes separate pass, fail, setup error and timeout, failure reasons are named, and refusals name the command to run next (18 of 20). Replays of saved tests come from cache, reconcile resumes rather than re-billing, and Exploration allows one run at a time. A one-shot `run` has no idempotency key and Exploration's default can change data (10 of 20). One required argument for `run`; Exploration's `mutating` default isn't a safe one; no SDKs, only the CLI from npm, Homebrew and a shell script (8 of 15).)
- Schema & documentation, Browser Use +9: Browser Use 86 (OpenAPI 3.1.0 documents for API v2, v3 and v4, the v4 one with 50 operations on 33 paths and 73 schemas on 17 October (25). llms.txt, a full-text bundle and a Markdown copy of every docs page (10). The guides say which product and API version to pick and when not to. In the v4 document four operations have no description, Create Run among them, and request fields such as `task`, `sessionId` and `maxCostUsd` have none. The seven MCP tools have one-line descriptions (13). Required fields are marked and there are 12 enums, but `modelParams` is free-form and six schemas allow any extra properties, per the 8 October check (10). Python, TypeScript and curl examples throughout, named error schemas for 402, 404 and 429, and a troubleshooting table by status code. 36 of the 50 operations document an error beyond 422, 404 on 32 and 403 on 24, though only three document 429. The 8 October note said most documented only 422, which the 8 October copy of the spec in the vendor's docs repository doesn't bear out either (13). Versioned paths /api/v2, /api/v3 and /api/v4 and a dated public changelog, newest entry 24 August 2026 (15).); Kane CLI 77 (No OpenAPI or JSON Schema file. The NDJSON events are documented in typed Markdown tables, `run_end` is declared stable across versions, and each command family has its event list (10 of 25). Markdown docs in the repository, an agent skill and a context7.json for agents. The agents.md guide on testmuai.com wasn't readable and no llms.txt was checked (10). The user guide and skill say when to use `run`, `testmd`, `testrun`, assurance or Exploration, and when not (Exploration when there are no written requirements, `read_only` for data you care about) (17 of 20). Flag tables give defaults and allowed values for `--mode`, `--target`, `--policy` and `--bug-detection`; `--variables` and `--session-context` take free-form JSON (12 of 15). Examples throughout, exit-code tables and troubleshooting tables with named failures such as `failed:setup_failed` and `RUN_ACTIVE`. The README's `run_end` example names `credits` while the skill names `credits_consumed` (13 of 15). Semantic versions with a dated Keep a Changelog file and git tags (15).)