AI browser agent · runs on your machine

Your own hand in the browser.

Yad does tasks on any website for you. You say what you want in plain words, and it clicks and types in your own browser, with your own logins. Your passwords stay with you, and you choose which AI does the thinking.

Set it up once. Windows only for now. You need both parts, in this order.

1The hand

The Chrome extension you watch clicking and typing inside your browser.

Add to Chrome

2The brain

A small free app (the companion) on your own computer. It runs the AI you choose, doing the thinking Chrome will not let the extension do on its own, so your logins and passwords never leave your machine.

Install the companion (Windows)

Both parts are free, open source, and run only on your own computer. See how it works

localhost:3747 Connected

Your task Compare these 3 laptops and add the best one to my cart

step 1 · readFound all three on the page
step 2 · compareWeighed price, memory and reviews
step 3 · actAdded the best value one to your cart

‖ Paused. I never check out or pay without you.

Runs on your own machine

The thinking happens locally, next to the browser you already use.

Open source

The code is public. You can read exactly what it does before you trust it.

No account, no sign up

There is no login and no server storing your data. You just install and go.

The honest part

You are handing an AI your browser. Where does your password go?

Most AI agents run in a cloud browser, on someone else's server, with a copy of your logins. Yad does not. It works in your real browser, on your machine. Your passwords and card numbers are masked before anything is sent, and you decide what leaves.

Pick a local model and the page content stays on your computer. Pick a cloud model and only what is needed to plan the next step goes out. Your call, every time.

Your key gets the same treatment. The first time you paste it in, it goes once to the small companion app on your own computer, which locks it immediately with Windows' own built-in encryption, tied to your Windows account, and the extension never shows the raw key again. Every AI call also counts against a daily limit you set, and a one-click Stop button blocks all further calls at once. Both settings survive a restart, and if either one is ever missing or corrupted, Yad defaults to blocking AI calls rather than allowing them.

You type"Reply to this email"

↓ masked first

Stays on your machinePasswords, card numbers, your files

Local modelNothing leaves at all

Cloud modelOnly the step to plan

// local-first. you decide what goes out.

What is under the hood

Small, honest, and it learns.

Not a demo toy. Yad remembers what works, notices when it is stuck, and finds another way.

Repeats cost nothing

The first run figures it out. Every run after that reuses the exact same cached actions, zero further AI calls. No credits quietly draining on a task you already solved, the complaint people voice about Bardeen, HARPA, and Genspark. Run the same task a hundred times and the AI meter doesn't move past the first.

action-cache · 0 model calls on a hit

A recovery brain

When a site trips it up, Yad learns the fix and reuses it next time. Proven fixes spread from one site to the next, in three layers, without you setting anything up.

site-exact → same-signal → same-class · promoted automatically

Works on any site

Your real, logged in browser. No fake cloud copy of your accounts.

acts in your session, so sites treat it like you

Notices when stuck

Eight signals catch a loop or a dead end, then it tries another way.

repeat · state-loop · no-progress · goal-drift · +4

You choose the AI

Cloud for power, or a local model so nothing leaves your computer.

bring your own key, or run fully local

It remembers

Selectors and past runs are stored, on your device, so it gets better.

selector-store · run-history · all local

Locked, capped, and stoppable

Your AI key is encrypted the moment you paste it, locked with Windows' own built-in encryption and tied to your Windows account, and the extension never shows it again. A daily spending cap and a one-click Stop button keep any task, automatic or not, from running past the limit you set.

dpapi-encrypted key · daily cap · one-click stop

Get started

Running in three steps.

Yad has two free parts: the Chrome extension you see, and a small companion app that runs on your own computer. You install both once, then you are set. The companion is Windows only for now.

STEP 1

Add the extension

Install Yad from the Chrome Web Store. It is free.

STEP 2

Run the companion

Download the small companion and run it once. No unpacking, no setup. It connects itself from then on.

Download the companion (Windows)

STEP 3

Type a task

Open the side panel, say what you want, and watch it work.

Same site, same problemtier 1

Any site, same signaltier 2

Any site, same classtier 3

// proven by 2+ sites → promoted on its own

The memory

It gets better the more it is used.

Every fix Yad finds is saved and matched back the next time the same kind of problem shows up. A trick learned on one site can rescue a run on a site it has never seen. All of it lives on your machine, in plain readable files.

For the builders

It is scriptable, too.

The companion runs a small local API. Send it a goal, it does the run.

POST localhost:3747/goal

// tell Yad what to do, in your own scripts
POST http://localhost:3747/goal
{
  "goal": "Find the cheapest flight to Lisbon on Friday",
  "sync": true,
  "autonomy": "auto",
  "maxSteps": 15
}

Straight answers

The questions people actually ask.

Does my data leave my computer? +

You choose. With a local model, nothing leaves. With a cloud model, the page text and your task go to that provider to plan the next step. Your passwords and card numbers are masked before anything is sent, either way.

Do I need an account? +

No. Yad runs on your machine. There is no sign up, and no server of ours storing your data.

Is it really free? +

Yes, and open source. You bring your own AI key, or run a local model for free. Nothing is hidden behind a paywall.

How is Yad different from other free, open-source browser agents? +

Nanobrowser is the closest comparison: also free, also open source, also bring-your-own-key. The real difference is what happens to the key and the money once you've handed it over. Yad encrypts your key on your device the moment you paste it, using Windows' own built-in encryption, and proves it with a public test log. It caps how much your key can spend per day and gives you a one-click Stop button that survives a restart. It hard-blocks payment and checkout pages from ever being acted on automatically. And it publishes a full account of an adversarial code review plus live attack attempts run against its own running code, successes and all. As far as we've found, no other free browser agent, Nanobrowser included, documents that level of detail about what happens to your key and your spend. Read the receipts on the Security page.

Will it get me a perfect answer on the first try? +

Depends on the AI you bring. The free default model is genuinely good at clicking, filling forms, and repeating tasks. On harder jobs, like pulling exact structured data off a messy page, a stronger model does noticeably better. If your first task is that kind of extraction and the free model disappoints, don't judge the whole tool by it: switch to a sharper model in Settings (still free options exist, like a bigger Groq or OpenRouter model) and try again.

Where does my API key go, and is it safe? +

Your key stays with you. You paste it once, and from then on it lives in two places only: your own browser and the small Yad app on your own computer, both encrypted with Windows' own lock. It is never uploaded to a Yad account and we keep no copy of it. The one place it is ever sent is straight to the AI provider you chose yourself, such as Groq, Google, or OpenRouter. We are the messenger, never the holder.

Is my key encrypted on disk? +

Yes. The moment you paste your key, Yad's companion, the small app on your own computer, locks it with Windows' own built-in encryption (DPAPI) so only your Windows account can unlock it. The browser extension never keeps the readable key either, only that encrypted lock. For extra peace of mind, use a dedicated key with a spending cap, which Yad backs up with a daily limit and a one-click stop button.

Can Yad quietly drain my key? +

No. Yad counts every AI call and holds it under a daily limit that you set, and there is a Stop button that blocks all calls at once. An automatic task can never keep using your key without limit, so you stay in control the whole time.

How do I turn my key off completely? +

Revoke the key in your provider's dashboard. That is the real off switch and it works instantly. You can then clear Yad's settings and uninstall if you like.

What will it not do? +

It will not check out, pay, or place orders without you. It will not store your browsing history or your files, and it will not sell or share your data.

How do I keep everything local? +

Turn on local mode and pick a local model. Then the page content stays on your machine and the cloud is never touched.

Can I use it for my company or heavier work? +

Yes. The free local brain covers everyday tasks. For a whole team, heavier or sensitive work, or a setup tuned to how you work, email info@mergefix.com and we set it up with you.

For teams and heavier work

Bigger jobs, or a whole company?

The free local brain handles everyday tasks right on your own machine. Running Yad across a team, on heavier or sensitive work, or want it tuned to how you work? We set that up with you. Tell us what you need.

Talk to us

Put your hand back in the browser.

Add to Chrome Read the privacy policy

Free. Open source. Your data stays with you.