Verification browser for coding agents: headless WebKit, DOM eval, screenshots, pixel-diff.
The io.github.hongnoul/hwatu MCP server is a verification browser for coding agents. It provides a headless WebKit environment with the ability to evaluate the DOM, capture screenshots, and perform pixel-diff comparisons. The goal is to verify rendered outputs programmatically using browser automation and image-based diffs.
๐ ๏ธ Key Features
Headless WebKit browser
DOM evaluation
Screenshot capture
Pixel-diff verification
๐ Use Cases
Verifying coding-agent generated web pages
Testing DOM-based changes via evaluation
Checking visual output with screenshot and pixel-diff comparisons
One static binary plus your distro's webkitgtk-6.0 (the installer
checks). On Arch: yay -S hwatu. From source: cargo build --release.
The installer installs binaries only. hwatu setup detects supported coding
agents and prints the available connections without changing their config.
Choose a client explicitly when you are ready:
sh
hwatu doctor
hwatu setup --client claude --scope project --dry-run
hwatu setup --client claude --scope project
hwatu demo
Install: download two binaries and check WebKitGTK.
Detect: find Claude Code, Cursor, Jcode, or a generic MCP workflow.
Connect: use Jcode's native socket, MCP, or the CLI fallback.
Verify: run a headless rendered smoke test with doctor or demo.
Hand off: materialize the same live session only when a human is needed.
Setup is previewable, idempotent, and reversible with the same client and
scope plus --undo. Project scope creates shareable configuration; user scope
keeps it personal. Claude Code asks each user to approve project-scoped MCP
servers when it next starts.
Manual MCP configuration remains one portable entry:
Push event subscriptions as JSON lines or MCP notifications (watch)
One-call page assertions with polling (expect)
Headless / background / focused as a per-window property, switchable live
Human hand-off: hwatu focus <id> drops the live session into your tiling WM
CAPTCHA / anti-bot detection with structured wait/resume (challenge)
MCP server, plain CLI, and a 1-line JSON socket protocol
A minimal WebKit browser for humans: native ad blocking, vim-style bar, crash restore
Why not Playwright or chrome-devtools-mcp?
There are three ways to give an agent a browser, and two of them are bad at it:
How it runs
What it costs the agent loop
Cold library (Playwright, launched per task)
engine starts when the script does
fast to call, slow to run: every check pays engine startup; no state survives between tasks
Warm browser (your Chrome + devtools-mcp)
a full human browser stays resident
resources spent on tabs, extensions, sync, UI you never render, and its windows steal your focus while you work
hwatu
"the coldest warm daemon": engine hot, everything else absent
8 ms spawns, 35 ms verified checks, invisible until you ask to see it (focus), interruptible in both directions
hwatu keeps exactly what makes checks instant (engine, GPU context,
compiled adblock, a prewarmed WebView) and nothing that serves a
human sitting in front of it. That's why it idles warm without a tab
bar, and why a kept-warm Playwright server driven the same way still
costs 341 ms per client to hwatu's 39 (benchmarks).
The second difference is what comes back. Playwright and
chrome-devtools-mcp are, at their core, automation
APIs: they let an agent drive a browser, then hand back raw
screenshots and DOM for the agent to eyeball.
hwatu is different. It is a verification browser: the measurement
primitives are built in, and the browser itself is a warm daemon
where a window costs 13 ms and headless is a window property, not a
launch mode.
That is why the loop looks like this, real commands, real output:
sh
hwatu --headless localhost:3000 # its window; you never see it
hwatu --headless staging.example.com # the reference
hwatu diff --id 2 --other 1 --heatmap /tmp/heat.png
# {"match_percent":85.13,"regions":[{"x":0,"y":160,"w":2048,...}]}
hwatu motion --id 1 # the reference's animations, as numbers# easing cubic-bezier(0.25,1,0.5,1), 300ms, marquee 29.78px/s ...# ...agent edits code...
hwatu diff --id 2 --other 1
# {"match_percent":97.49} # climbing beats guessing
We ran this loop against a clone of stripe.com's landing page: an
agent took it from 85.1% to 98.8% pixel match. Reproduce it:
scripts/demo/. A full verification pass (open, load,
eval, screenshot, close) is one command, one tool call, ~35 ms
median (benchmarks):
Generated HTML in hand and no server? hwatu render is the same
one-call pass with the markup as input: no temp file, no
python3 -m http.server:
sh
echo'<h1>generated</h1>' | hwatu render --stdin --shot=/tmp/gen.png
# {"rendered":true,"shot":"/tmp/gen.png","load_ms":5,"total_ms":28}# React to load, console, download, and window events without polling.
hwatu watch --kinds load,console
# {"event":"load","seq":1,"window_id":7,"data":{"state":"started",...}}
MCP clients can call subscribe_events for the same stream as
notifications/hwatu/event. Each connection gets a strictly monotonic
sequence starting at zero; closing or stalling the connection drops its
subscription without blocking the daemon.
The same pass through Playwright's warm in-process CDP connection,
its best case, is 82 ms and five API calls. Shaped like hwatu
actually runs (a fresh client each check against a kept-warm
engine), Playwright's pass is 341 ms vs hwatu's 39: hwatu is a
warm daemon by design, Playwright is a library you have to keep warm
yourself.
And when the agent hits a CAPTCHA or a judgment call, hwatu focus
materializes its live session, cookies and state intact, in your
tiling WM. You act for ten seconds. It takes back over. This is
the adjective no other tool gets to claim: interruptible.
Everywhere else, headless is decided at launch and a human can never
see the session at any price. In hwatu it's a window property,
switchable live, in both directions.
The speed follows from the same design decision: hwatu is a warm
daemon, not a library you launch. The engine, the GPU context, the
compiled adblock ruleset, and a prewarmed WebView outlive every
task, so a check starts from a hot pipeline instead of a cold
process. Playwright is a library and cold by nature. Keeping it
warm is something you build (a server process, connection
management, context pooling); hwatu ships warm as the default and
the only mode.
Verify pass as a warm service (fresh client per check)
341 ms
n/a
39 ms
Tool calls per verify pass
5
5
1
Pixel-diff score + regions + heatmap
๐ก 1
โ
โ
Animations as numbers, pinned mid-flight
โ 2
๐ก 3
โ
Headless โ headed on a live session
โ
โ
โ
Human hand-off mid-session, state intact
โ
โ
โ
No focus stealing at N parallel agents
๐ก 4
๐ก 4
โ
CAPTCHA detection + structured wait/resume
โ
โ
โ
No Node, no per-version browser download
โ
โ
โ
1 toHaveScreenshot compares against stored goldens: pass/fail for
test suites, not a score an agent can climb.
2 Standard practice is to disable animations or fast-forward to the
end state to avoid flakes.
3 Raw CDP can query animation state, but there is no numeric
summary of easing/velocity/keyframes.
4 Fine headless; every headed window pops and takes focus.
Comparison reflects each project at the time of writing;
corrections are welcome. Honest caveats: Playwright still wins
cold start (190 vs 435 ms, paid once per boot) and memory; hwatu
renders WebKit not Chromium (keep a Playwright matrix in CI for
engine-specific bugs), and it is Linux-only today. Full
head-to-head data and methodology:
docs/benchmarks.md.