Agents get safer sign-ins and a legal database of their own

Credentials without exposure

The week's most consequential change is about trust. Browserbase's 1Password partnership lets an agent request access to a specific login, pause while the user approves it on their own device, and then have 1Password autofill the credentials directly into the browsing session — the agent never handles the password itself. It runs through the Browserbase extension system, and sessions can be configured with zero data retention and no recording. For anyone running agents against sites behind a login, that closes one of the messiest gaps in automation: credential handling moves out of the prompt and into a vault the operator already trusts.

A legal corpus for agents

Firecrawl spent the week widening what agents can search. Its new Government & Legal Index covers statutes, regulations, local codes, and court opinions across roughly 30 million US government pages, free to search from ChatGPT, Claude, or the API. It also plugged a different dataset into agent workflows, offering 1,000 free monthly credits toward 270M+ company and people records in Alexandria, a useful complement for enrichment and prospecting tasks. To ground that work, Firecrawl benchmarked the leading company enrichment providers against hundreds of US companies, showing where each one is accurate and where the data simply goes missing — worth reading before you pick a provider for a pipeline.

Stagehand gets more interoperable

Stagehand's week split between new integrations and hardening. On the integration side, Stagehand 4.3 now works with the official OpenAI and Anthropic SDKs via toolset integrations in both TypeScript and Python, and new model IDs from OpenAI, Anthropic, Google, Groq, and Cerebras can be passed through without waiting for a library release. The same update adds page.waitForFunction() for waiting on page conditions, authenticated CDP gateways via custom headers and a separate extensionCdpUrl, getExtensionArchive() for exporting the extension as a ZIP, and WebMCP support on newer Chromium builds.

The rest of Stagehand's week was repair work that matters to anyone running it in production. In the v3 line, pages with a shadow root now fall back to XPath instead of failing outright, newer Claude models no longer get forced into the done tool, CAPTCHA awareness options are honored for local attachments, and the nullable act action schema got additionalProperties: false. The standalone browse command was also removed from v3 — a small breaking change to note if any of your scripts still call it. Taken together with 1Password autofill, the collection is converging on the same idea: agents that can do real work in real browsers, with credentials and page structures handled deliberately rather than by luck.