TronBrowser.dev
Open-source, privacy-first, AI-native web browser — de-googled, built on
Ungoogled Chromium.
Principles: no telemetry by default · no ads · no sponsored tabs · no
affiliate injection · user-owned data · Chrome-extension compatible · self-hostable.
Website · Releases · PRD · Distribution
Install
curl -fsSL https://tronbrowser.dev/install.sh | sh
Then use the agent-friendly tron CLI:
tron <url> # open URL(s) in TronBrowser
tron --tor [url] # route through Tor (hides your IP, reaches .onion) — see note
tron upgrade # update to the latest release (no-ops if current)
tron remove # uninstall (keeps your profile)
tron version
--tor is a convenience feature, not anonymity. It hides your IP and lets
you reach .onion sites from your everyday browser, using a separate wiped
profile. It is not Tor-Browser-grade: Chromium's fingerprinting surface
isn't hardened. If your safety depends on it, use the real
Tor Browser — it's much safer. Requires the
tor daemon installed. Details: docs/tor-onion-mode.md.
🤘 Pit in the AI sidebar resolves Moshpit names (.eggs, .moshpit, …) for
the current session with one click — no root, nothing on the machine changes,
clearnet names untouched. For every app on the box run moshcode dns enable
instead. Details: docs/moshpit-pit-toggle.md.
Also packaged for macOS · Windows · Debian/Ubuntu (.deb) · Fedora/RHEL (.rpm) ·
Arch (AUR) · Gentoo · NixOS · Snap · Flatpak · AppImage · FreeBSD — and arm64
Linux phones (Librem 5 / PinePhone / Ubuntu Touch). See
distribution/.
Status — honest version: the native Ungoogled-Chromium fork binary (own
branding/icon) isn't compiled yet (it's a ~50 GB build). Today tron runs an
Ungoogled Chromium / Chromium on your system (never Google Chrome) in an
isolated TronBrowser profile, with the de-googling done by the bundled
extension. Same install/CLI; the native binary drops in later with no
change for users.
What you get today
- De-googled new tab — TronBrowser page, pit.world
as the default search in both the address bar and the new tab (no logs, no
cookies, resolves Moshpit names; DuckDuckGo, Kagi, NeoSearch and Xprivo
available with
tron search <engine>), quick links.
- RSS reader on the new tab — seeded from your OPML; add/remove feeds and
import/export OPML in Settings.
- AI sidebar (bring your own keys) — Anthropic, OpenAI, Google/Gemini,
DeepSeek, Perplexity, Kimi, Qwen, or local (Ollama/LM Studio/vLLM).
- CoinPay OAuth login (not Google) — anonymous, optional email; settings sync
to the cloud SQLite (Turso) or your own self-hosted backend.
- Keeps all Chromium features: extensions, profiles, bookmarks, history, PWAs,
DevTools.
tron automate — an MCP server for agents: Obscura renders pages first
(fast, light), the Chromium session takes over for full-JS pages and bot
walls. Stdio for a local host, HTTP with an OpenMCP descriptor for a catalog.
The same relay runs hosted at tronbrowser.dev/mcp/tron (keyless
fetch_page + screenshot_page, listed on openmcp.logicsrc.com). See
docs/mcp.md.
Monorepo
| Path | Contents |
|---|
apps/ | desktop (Chromium fork pipeline + launcher + AI-sidebar extension), web (tronbrowser.dev site), mobile (Expo/EAS, Phase 2), docs |
packages/ | ai-core, model-providers, browser-core, workflow-engine, agent-runtime, auth, payments (x402/CoinPay), sync, storage, sdk, plugins, ui, shared |
services/ | api, worker, scheduler, sync-server |
distribution/ | package-manager manifests for every channel |
Develop
Requirements: Node 24+, pnpm 9+.
pnpm install
pnpm typecheck && pnpm test && pnpm build
Secrets/env via Doppler (project tronbrowser):
doppler setup then doppler run -- <cmd> injects TRONBROWSER_DB_URL etc.
.env.example documents everything; .env is a gitignored fallback.
Database (Turso/libSQL) uses tracked migrations:
doppler run -- pnpm db:migrate # apply pending migrations
pnpm db:status # applied vs pending
Build the Chromium fork (heavy)
The Ungoogled-Chromium fork pipeline lives in
apps/desktop/chromium/ (pinned versions, GN args,
branding, patch series, guarded fetch/build scripts). It needs ~50 GB and a
capable machine; see its README and
ADR 0001.
Release
Tag-driven, per-platform CI/CD (one repo, not 50):
pnpm version:set 0.1.4 && git tag v0.1.4 && git push origin v0.1.4
release.yml builds linux/macos/windows artifacts (+ .deb/.rpm/AppImage) and
publishes a GitHub Release; submit-packages.yml refreshes the package managers.
Milestones
| Milestone | Status |
|---|
| M0 | Monorepo scaffold | ✅ done |
| M1 | Chromium fork | 🟡 pipeline + launcher + de-googled extension shipped; native binary not yet compiled |
| M2 | AI sidebar | ✅ done (BYOK, streaming, side panel) |
| M3 | Browser agents | ⬜ |
| M4 | Cloud services | 🟡 DB schema + sync client + migrations done; auth/sync API + web login not yet deployed |
| M5 | Mobile (React Native) | 🟡 Expo app linked to EAS (Phase 2 stub) |
| M6 | Plugins | ⬜ |
| M7 | Agent swarms | ⬜ |
License
MIT © Profullstack, Inc.
