Given it has "logins" to tools without APIs (browser-based access), how do they handle 2FA, session persistence, and ToS violations for services that don't allow bot access?

Our browser is interactive, in the sense that one could click around the browser, as well as the agent. Usually for 2FA logins, Almanac would hand it over to the human, who'd complete login, and then continue.

We use Browserbase for the browser and session persistence is inbuilt.

For ToS violations, this is a limitation. Accessing sites that don't allow for bot access could result in account ban/suspension. Simply using Browserbase under the hood does not remove this risk.