> ## Documentation Index > Fetch the complete documentation index at: https://docs.anchorbrowser.io/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Anchor Browser is cloud browser infrastructure for AI agents and automation: browser sessions you control over CDP or REST, natural-language web tasks, versioned automation tasks, managed authentication into third-party web apps (identities with MFA), persistent volumes and profiles, recordings, live view, batch sessions, webhooks, and network options including residential proxies, extra stealth, and captcha solving for sites that block standard browsers. AI agents should start at https://docs.anchorbrowser.io/for-agents, then get an API key with Agent Access at https://docs.anchorbrowser.io/quickstart/agent-access — no dashboard account required. Read those two pages before authentication or API calls. # Create Authentication Flow > Creates a new authentication flow for an application. ## OpenAPI ````yaml /openapi.yaml post /v1/applications/{applicationId}/auth-flows openapi: 3.1.0 info: title: AnchorBrowser API version: 1.0.0 description: > Anchor Browser ([anchorbrowser.io](https://anchorbrowser.io)) provides cloud browsers built for AI agents and automation. Use this API to launch and control browser sessions, run natural-language web tasks, authenticate into third-party web apps with managed identities, and capture recordings — reliably and at scale, without operating browser infrastructure yourself. ## Core resources - **Sessions** (`/v1/sessions`): launch configurable cloud browsers — residential proxies, stealth browsing, captcha solving, profiles, extensions, recording — and connect over CDP with Playwright, Puppeteer, or any CDP client. - **AI tools** (`/v1/tools/perform-web-task`): state a goal in natural language and the built-in agent completes it inside the browser. Related tools fetch webpages, take screenshots, render PDFs, and execute code in a session. - **Tasks** (`/v1/task`): create, version, deploy, and monitor repeatable browser automations built to run reliably in production. - **Applications and identities** (`/v1/applications`, `/v1/identities`): managed authentication into third-party web apps — including multi-step logins and TOTP-based 2FA — so agents can act on behalf of users. - **Profiles** (`/v1/profiles`): persist cookies and login state across sessions. - **OS-level control** (`/v1/sessions/{sessionId}/mouse`, `/keyboard`, `/clipboard`): raw input for flows that resist DOM automation. - Plus batch sessions for running browser fleets in parallel, session recordings, webhooks, events, extensions, client certificates, and billing usage. ## Authentication Pass an API key in the `anchor-api-key` header on every request. Create keys at [app.anchorbrowser.io](https://app.anchorbrowser.io) under API Access. AI agents that have no key yet can obtain one autonomously through the unauthenticated [agent-access flow](https://docs.anchorbrowser.io/quickstart/agent-access) (`POST /v1/agent-access`). ## For AI agents and LLMs - Docs: [docs.anchorbrowser.io](https://docs.anchorbrowser.io), with a machine-readable index at [/llms.txt](https://docs.anchorbrowser.io/llms.txt) and the full corpus at [/llms-full.txt](https://docs.anchorbrowser.io/llms-full.txt). - MCP server for hosted browser control: `https://api.anchorbrowser.io/mcp`. - Official SDKs: `anchorbrowser` on [npm](https://www.npmjs.com/package/anchorbrowser) and [PyPI](https://pypi.org/project/anchorbrowser/). `DELETE` operations terminate sessions or permanently remove resources (profiles, identities, extensions); `GET` operations are safe and read-only. servers: - url: https://api.anchorbrowser.io description: API server security: [] paths: /v1/applications/{applicationId}/auth-flows: post: tags: - Applications summary: Create Authentication Flow description: | Creates a new authentication flow for an application. parameters: - name: applicationId in: path required: true description: The ID of the application schema: type: string format: uuid requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CreateAuthFlowRequest' examples: createAuthFlow: summary: Create an authentication flow with username/password value: name: Standard Login description: Username and password authentication is_recommended: true methods: - username_password custom_fields: [] responses: '201': description: authentication flow created successfully content: application/json: schema: $ref: '#/components/schemas/CreateAuthFlowResponse' '400': description: Invalid request parameters content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '500': description: Failed to create authentication flow content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - api_key_header: [] components: schemas: CreateAuthFlowRequest: type: object required: - name - methods properties: name: type: string description: Name of the authentication flow description: type: string description: Description of the authentication flow is_recommended: type: boolean description: Whether this is the recommended authentication flow methods: type: array items: type: string enum: - username_password - authenticator - custom minItems: 1 description: Authentication methods in this flow custom_fields: type: array items: $ref: '#/components/schemas/CustomFieldDefinition' description: Custom fields for this authentication flow CreateAuthFlowResponse: type: object properties: id: type: string format: uuid description: Unique identifier for the authentication flow name: type: string description: Name of the authentication flow description: type: string nullable: true description: Description of the authentication flow is_recommended: type: boolean description: Whether this is the recommended authentication flow methods: type: array items: type: string description: Authentication methods in this flow custom_fields: type: array items: $ref: '#/components/schemas/CustomFieldDefinition' description: Custom fields for this authentication flow created_at: type: string format: date-time description: Timestamp when the authentication flow was created updated_at: type: string format: date-time description: Timestamp when the authentication flow was last updated ErrorResponse: type: object properties: error: type: object properties: code: type: integer message: type: string CustomFieldDefinition: type: object required: - name properties: name: type: string description: Name of the custom field securitySchemes: api_key_header: type: apiKey in: header name: anchor-api-key description: > API key for your Anchor Browser account, sent as the `anchor-api-key` header on every request. Create one at [app.anchorbrowser.io](https://app.anchorbrowser.io) (API Access), or obtain one programmatically via the unauthenticated agent-access flow (`POST /v1/agent-access`). ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.