It doesn't just chat — it browses, clicks, and gets things done.
Give FlowWiseAI a goal in plain English. It reasons step-by-step, drives a real browser to navigate, click, type, and extract data — and pauses for your approval before anything sensitive.
Watch it think, then act.
FlowWiseAI streams every step in real time — its reasoning, the actions it takes in the browser, and what it observes back.
Built to do real work on the web.
Not a chatbot with browsing bolted on — an agent designed from the ground up to operate a browser safely and transparently.
Real browser control
Navigates, clicks, types, and extracts from live websites — not just a chat box pretending to act.
Multi-model
Runs on local models via Ollama or cloud models like Grok (xAI). Pick speed, cost, or privacy.
Human-in-the-loop safety
Asks for your approval before purchases, logins, form submissions, or OTP entry. You stay in control.
Live task streaming
Watch the agent's reasoning and browser actions in real time as they happen, step by step.
Goal-driven
Describe what you want in plain English. The agent figures out the steps and executes them.
Encrypted & local
Credentials, sessions, and task history are encrypted at rest and stay on your own machine — never uploaded to a server.
From plain English to done.
Three steps. You set the goal and stay in control; the agent handles the busywork in a real browser.
Give it a goal
Type what you want done in plain English — research a topic, compare prices, fill a form, or pull structured data.
The agent reasons and acts
It thinks step-by-step (Thought → Action → Observation) and drives a real browser to navigate, click, type, and extract.
You approve sensitive steps
Before any purchase, login, submission, or OTP entry, it pauses and waits for your explicit confirmation.
See how the agent thinks.
Follow the arrows: each loop the agent plans, reasons, checks, acts, browses, and remembers. Click any block for detail.
It thinks before it acts.
A Thought → Action → Observation loop picks the next move from what it actually sees on the page.
Point it at the tedious stuff.
Anywhere you'd otherwise click through tabs by hand, FlowWiseAI can take the wheel.
Web research
Gather, read, and synthesize information across many sites into one answer.
Price comparison
Check the same item across multiple retailers and surface the best deal.
Automated form-filling
Complete repetitive web forms accurately, pausing before any submission.
Structured data extraction
Pull clean, structured records from messy pages — ready to export.
Your secrets stay yours.
Encrypted at rest, hidden from the model, scoped to each site, and gated behind your approval — security is built into every layer.
Encrypted vault at rest
- A DPAPI-encrypted vault binds every login, API key, and profile to your OS user and machine.
- It's the same mechanism Chrome and Edge use — no master password to type each session.
- On non-Windows systems a Fernet (AES-128-CBC + HMAC) vault is the fallback.
Secrets in memory only
- Decrypted secrets exist only in memory while a request runs — never written to disk.
- The model never sees real secrets; they're passed as placeholders like amazon_password.
- The browser fills the real value at typing time and redacts it from the model's history.
Scoped & write-only
- Every credential is domain-scoped — only offered on its own matching site.
- That scoping is the recommended defense against prompt-injection exfiltration.
- A write-only API returns only has_password / has_value flags, never the secret itself.
Keys & network
- Provider API keys stay server-side, resolved from the vault and proxied over HTTPS.
- Local-first: with local Ollama your site passwords never leave the machine.
- The backend binds to localhost (127.0.0.1) and isn't exposed to the network.
Human-in-the-loop
- Confirm before ordering — explicit Yes/No with the exact item and total before any payment.
- OTP and 2FA codes are never guessed — the agent pauses, asks you, and uses it once.
- Missing logins are requested mid-run and saved encrypted — accounts are never invented.
Repo hygiene
- vault.enc, the Fernet key, *.db, and .env are all kept out of version control.
- No secrets are hardcoded, placed in .env, or printed to logs.
- Credentials live only in the encrypted vault — nowhere else in the codebase.
Stop describing the web. Start using it.
Point FlowWiseAI at a goal and watch it work — safely, transparently, and on your terms.