<div align="center"> <img src="assets/branding/xenon-icon.png" alt="Xenon Browser icon" width="104" height="104">

Xenon Browser

The Windows browser you share with your AI agents.

Everyday Chromium browsing for you, a native control layer for MCP agents,<br>and you decide what each agent can reach.

Download for Windows · Get started · User guide · Agent guide · MCP reference

English · 简体中文

</div>

<p align="center">_{An agent filling a synthetic trip planner in its own Research workspace. The teal outline and the toolbar chip show who controls the tab. <a href="docs/screenshots/README.md">How these were captured</a>.}</p>

Why Xenon

• You decide what agents can reach. You pair each MCP host yourself, and it starts read-only. Client and workspace settings choose which workspaces, saved accounts and files it may use, and Xenon's native code enforces those choices.
• People and agents share tabs safely. Every tab has one owner, shown by its outline color. Click or type on an agent's page and that agent pauses. Hand a live tab to an agent, or take it back, without reloading it.
• Agents work in parallel. Several paired hosts, or several workers behind one host, can each work on their own tabs. Workspaces keep separate cookies and storage.
• Secrets stay native. Saved passwords live in an encrypted vault and are filled by native code; MCP never returns them. Agents cannot start passkey prompts, open other apps or share your screen.
• Bring your own model. Xenon has no built-in LLM and needs no model API key. Your local stdio MCP host supplies the model.

What's new in 0.1.7

0.1.7 replaces the withdrawn 0.1.6 and is the first release with these changes since 0.1.5.

• H.264 and AAC video, decoded by Windows. MP4 video and streams play alongside WebM. Your graphics hardware decodes H.264 and Windows Media Foundation decodes AAC; Xenon contains no decoder of its own for either.
• Smoother video beside busy tabs. Animated background tabs no longer stall the video you are watching, and covered tabs paint once per second unless an agent is working in them.
• Agents can ask for your help. With the new xenon_attention tool, an agent stuck on a CAPTCHA, MFA or an approval can make its tab pulse orange and, if you allow it, show a Windows notification that opens the tab.
• A smarter address box. Suggestions from your history and bookmarks with inline completion, your choice of search engine, and a site-information button for the certificate, cookies and site settings.
• Everyday essentials. Full screen (F11), site icons on tabs, a bookmark manager with folders, searchable history, Clear browsing data, a Settings window, and bookmark and history import from Chrome, Edge and other Chromium browsers.
• Better with Windows. Make Xenon your default browser, open mailto: and meeting links in their apps, and share your screen in video calls, each after a native prompt.

Read the 0.1.7 notes or all release notes.

Screenshots

| Dark theme | Xenon Controls | | --- | --- | | | | | The same live page in Xenon's charcoal shell. Web pages follow the theme too. | Workspaces, connected agents, tab ownership, session restore, and sharing and file controls. |

Features

Browse the way you are used to

• Chrome/Edge-style toolbar. Back, forward and reload; an address box with suggestions and a site-information button; find, zoom, full screen, downloads, printing/PDF and site permissions.
• Tabs grouped by workspace in a resizable sidebar. Drag tabs to reorder them, between windows or into a new window. A right-click menu duplicates, pins, mutes, moves and closes tabs, and Chromium keyboard shortcuts work.
• Your data, your way. A bookmark manager with folders, searchable history, Clear browsing data, import from Chromium browsers or a bookmark file, and Settings for the search engine, theme and language.
• Extensions. Unpacked Manifest V3 Chromium extensions added in Controls run in persistent workspaces after a restart. Agents cannot install, configure or read them.
• English and Simplified Chinese, System/Light/Dark themes, and a short welcome tour.

Work alongside agents

• Isolated workspaces. Persistent workspaces keep separate cookies and local storage. Create, rename, configure or share them with paired clients, and close all of a workspace's tabs with one confirmed command after agent work. Human-only private workspaces use memory-only profiles.
• One owner per tab. Each tab/control group has one writable owner, and an agent owns the tabs it creates. Live handoff moves a tab and its popups to another authorized worker or to you, leaving the loaded page, form state, scroll position and connections in place.
• You can always step in. Clicking, typing, scrolling or dragging on an agent's page pauses that agent but keeps its ownership. Queued actions are canceled, and the agent needs fresh evidence before it continues. Take ownership keeps control with you.
• Grounded page evidence. Bounded observations of the rendered text in the current viewport, page-only screenshots, and element- or coordinate-based actions that are rejected when the page has changed.
• Scoped files and recovery. Native file and folder grants with opaque upload handles, workspace download metadata, worker reconnect and retirement, and an operation journal for checking uncertain actions without replaying them.

Stay in control

• Saved accounts. A Windows DPAPI-encrypted vault shared across workspaces, CSV import from Chrome, Edge and Firefox, Chrome-style Save/Update bubbles and a fill list under the login field. Agents sign in only with opaque account IDs you grant for the exact HTTPS origin. Accounts are Default (granted to a client or workspace as one group) or Sensitive (granted one at a time).
• Xenon Controls has Clients, Workspaces, Passwords, Extensions and Developer mode sections. Revoke access, manage resources, answer website dialogs you triggered, or Stop all agents for the current run. Locking Windows locks the vault and stops agent control.
• Updates on your terms. A per-user installer and a portable ZIP, with native update checks from the fixed release repository and size/SHA-256 verification. Installing always needs your decision and a normal browser shutdown.

The selected page's outline is teal when an available agent owns it, orange while your input pauses the agent, and gray when you own it or the agent is unavailable. A tab whose agent asks for help pulses orange in the sidebar.

Quick start

1. Install. Download the unsigned Windows installer and its .sha256 file from the latest release, verify the checksum, and choose an empty, writable program folder on a local fixed drive. Get started has the exact commands. The package includes Node and the MCP adapter.
2. Open Xenon Browser from the Start menu. A new installation asks for English or 简体中文, then offers a quick tour that you can skip. Revisit it with Menu → Help → Quick tour.
3. Open Xenon Controls with Ctrl+Shift+X, the sliders button in the toolbar, or the page's context menu.
4. Pair your MCP host by following pairing and host setup. Keep the generated pairing file private, and pair each independently trusted host separately.
5. Grant access. Configure the client's permissions, then share an existing workspace or allow automatic workspace creation. Agent interaction needs both the client policy and the workspace to allow it.

New clients start read-only, with automatic workspace creation off and quotas of four connected workers and four automatic workspaces. The client policy sets the ceiling, and each workspace can narrow it. Sharing a workspace never grants vault access.

Once interaction and automatic workspaces are allowed, ask your agent:

Use Xenon to open https://example.com in a new workspace, inspect the visible page, and tell me its heading. Keep the tab open and retire the worker when finished.

The usual sequence is xenon_worker_create → xenon_tab_create → xenon_observe, then evidence-bound actions as needed and xenon_worker_retire. Retiring frees worker capacity and keeps the tabs, workspaces and website state; the retired worker cannot resume.

Prefer a portable copy? Verify the ZIP's checksum, extract the whole archive, and run Xenon.exe. Keep the executable, DLLs, resources, locales, adapter and bundled Node runtime together.

MCP tools

Xenon exposes 27 tools through a strict TypeScript MCP stdio adapter. Replies include structured JSON and JSON text, and screenshots also include MCP image content. The agent guide has copyable host instructions, and the MCP reference covers parameters, evidence and errors.

| Tools | Purpose | | --- | --- | | xenon_worker_create, xenon_workers, xenon_worker_resume, xenon_worker_retire | Create, list, reconnect and retire logical workers. | | xenon_workspaces | List workspaces already granted to the paired client. | | xenon_tabs, xenon_tab_create, xenon_tab_close | List, open and close scoped tabs. | | xenon_control_status, xenon_control | Inspect ownership; acquire, release or hand off control using its current generation. | | xenon_activity | Read trusted human-activity and pause metadata without typed values or page text. Supporting hosts can also subscribe to xenon://control/activity. | | xenon_attention | Ask the person to come to a tab you own: its border pulses orange, and an opt-in Windows notification opens it. Clear the request when done. | | xenon_observe, xenon_screenshot | Get bounded viewport evidence and page-only images, with document identity and freshness checks. | | xenon_inspect | Capture rendered nodes, a permitted page screenshot and control status under one observationId. Evidence that changes during capture is withheld; this is a validated capture interval, not an atomic snapshot. | | xenon_navigate, xenon_interact, xenon_wait, xenon_dialog | Navigate, perform finite gestures, wait for rendered text, and answer agent-controlled JavaScript dialogs. Native security prompts stay with the human. | | xenon_batch | Run up to 16 observed fill/select/check/click actions in one call, with guarded targets and per-step outcomes. | | xenon_accounts, xenon_login | List granted account metadata and request protected si