AI bots
Take one action in the run's web browser
Rails carries out one action of the run’s browser tool (D-530 to D-535) in a throwaway box it makes on the first action and deletes when the run ends. The bot’s owner must have switched on Use a web browser (browse_web). Every page is public; private addresses are refused. Passwords and card numbers are typed only from one of the bot’s secrets, named in secret, and only into a page on that secret’s host; plain text holding a card number is refused. An action that may submit a form, sign in, order or pay runs only with confirmed, which the runtime sends once the bot’s act_on_websites policy let it through; dry_run says whether an action is one. The answer never holds a typed secret or a card number, and is marked untrusted.
POST
/
api
/
company
/
v2026-10
/
bots
/
{bot_id}
/
runs
/
{run_id}
/
browser
/
actions
Take one action in the run's web browser
curl --request POST \
--url https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"browser_action": {
"action": "navigate",
"url": "https://shop.example.com/"
}
}
'import requests
url = "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions"
payload = { "browser_action": {
"action": "navigate",
"url": "https://shop.example.com/"
} }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({browser_action: {action: 'navigate', url: 'https://shop.example.com/'}})
};
fetch('https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'browser_action' => [
'action' => 'navigate',
'url' => 'https://shop.example.com/'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions"
payload := strings.NewReader("{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}"
response = http.request(request)
puts response.read_body{
"browser": {
"ok": true,
"url": "https://shop.example.com/",
"title": "Shop",
"text": "Spring sale on now.",
"text_truncated": false,
"elements": [
{
"ref": "e1",
"role": "link",
"name": "Cart"
}
]
},
"restarted": false,
"untrusted": true,
"status": 200,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-27T16:10:00Z"
}
}{
"message": "Invalid credentials."
}{
"message": "Not authorized."
}{
"error": {
"message": "Run not found",
"details": {}
},
"status": 404,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-26T15:32:08Z"
}
}{
"error": {
"message": "The run is not open",
"details": {
"type": "run_closed"
}
},
"status": 409,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-26T15:32:08Z"
}
}Authorizations
The session token of an admin of your company. Company API, partner and droplet installation tokens are refused.
Path Parameters
The bot's id.
The id of one of the bot's runs.
Body
application/json
Show child attributes
Show child attributes
Response
The page after the action, a dry run, or why it was refused.
Either browser, the driver's answer, or refused, why Rails did not take the action.
Response metadata on every body. List endpoints add pagination.
Show child attributes
Show child attributes
The page after the action (ok, url, title, text, elements with refs), a refusal from the page (ok: false, error, reason), an action that needs approval (needs_approval), or a dry run (dry_run, consequential, reason, target, page_host, mode). Typed secrets and card numbers are replaced by placeholders.
The box was lost and made again, so the earlier page is gone.
Show child attributes
Show child attributes
⌘I
Take one action in the run's web browser
curl --request POST \
--url https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"browser_action": {
"action": "navigate",
"url": "https://shop.example.com/"
}
}
'import requests
url = "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions"
payload = { "browser_action": {
"action": "navigate",
"url": "https://shop.example.com/"
} }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({browser_action: {action: 'navigate', url: 'https://shop.example.com/'}})
};
fetch('https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'browser_action' => [
'action' => 'navigate',
'url' => 'https://shop.example.com/'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions"
payload := strings.NewReader("{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/company/v2026-10/bots/{bot_id}/runs/{run_id}/browser/actions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"browser_action\": {\n \"action\": \"navigate\",\n \"url\": \"https://shop.example.com/\"\n }\n}"
response = http.request(request)
puts response.read_body{
"browser": {
"ok": true,
"url": "https://shop.example.com/",
"title": "Shop",
"text": "Spring sale on now.",
"text_truncated": false,
"elements": [
{
"ref": "e1",
"role": "link",
"name": "Cart"
}
]
},
"restarted": false,
"untrusted": true,
"status": 200,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-27T16:10:00Z"
}
}{
"message": "Invalid credentials."
}{
"message": "Not authorized."
}{
"error": {
"message": "Run not found",
"details": {}
},
"status": 404,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-26T15:32:08Z"
}
}{
"error": {
"message": "The run is not open",
"details": {
"type": "run_closed"
}
},
"status": 409,
"meta": {
"request_uuid": "7e2c9b41-3f8a-4d15-b6e0-9a4c21d7f583",
"timestamp": "2026-10-26T15:32:08Z"
}
}