Giving an Agent Access to Logged-In Websites: Sessions, Permissions, and Automation Boundaries
Authenticated browser state is not a convenience setting; it is a credential that can impersonate its owner. Use a dedicated low-privilege account and isolated profile, separate reading from reversible writes and high-risk transactions, and leave MFA plus final submission to a human.