A browser rental marketplace sounds simple — hosts share browsers, agents rent them. But behind the scenes, there's a complex flow of matching, session creation, isolation, real-time communication, and billing. Here's how every step works.
The matching process
When an AI agent searches for a browser, it specifies requirements: geolocation and optionally preferred rate range. The marketplace searches available hosts matching these criteria and returns a list sorted by rate, response time, and reliability score. The agent picks an option and requests a session. The marketplace sends a session request to the host's extension. The extension opens a new incognito window and establishes a secure connection for real-time control through Ceki's servers.
Session lifecycle
Creation: Agent calls rent → marketplace matches host → extension opens incognito window → secure connection established → agent receives session ID. Active use: Agent sends commands through Ceki's servers → extension executes in incognito window → results return. Billing starts at session creation and ticks per minute. Human interaction (optional): If CAPTCHA or human help needed, agent sends chat message to host. Host performs action, confirms, agent continues. Termination: Agent calls stop OR session times out OR wallet runs empty → incognito window closes → all data destroyed → final billing → host earnings credited.
Billing mechanics
Billing is per-minute with second-level granularity. Timer starts when session is created (not first command). Timer stops when session is terminated. Rate is locked for the session at the host's rate at creation time. If agent's wallet hits zero, session auto-terminates with warning. Hosts receive 100% of the session fee. Platform fees handled through activation deposit.
Connection architecture
Agent → Marketplace API → Ceki Servers → Host Extension → Incognito Browser. The agent never connects directly to the host's machine. All traffic flows through Ceki's servers. The host's IP is visible to websites (residential IP is the point), but not exposed to the agent directly. This means no peer-to-peer setup, no port forwarding, outbound-only connections, and all traffic encrypted.