What is Skyvern?
Skyvern automates work on websites by showing screenshots and page structure to a vision-capable language model, which decides what to click, type, download or extract. It comes three ways: a Python and TypeScript SDK that adds act, extract and validate calls to a Playwright page; a self-hosted server with a web UI and a workflow builder that chains tasks, loops, file parsing, emails and HTTP calls; and Skyvern Cloud, a hosted version with proxies and CAPTCHA solving.
The repository is licensed under AGPL-3.0, and the README says the anti-bot measures used in the cloud are left out of it. Release v1.0.56 shipped on 14 October 2026.
It handles logins with stored credentials, Bitwarden or a custom credential service, and supports 2FA by TOTP, email and SMS. Workflows can be triggered from Zapier, Make.com and n8n, and an MCP server exposes it to other agents.
How much does Skyvern cost?
| Plan | Price | What you get |
|---|---|---|
| Self-hosted | Free | AGPL-3.0, your own model keys |
| Cloud Free | $0 | 5,000 credits, 1 concurrent run |
| Hobby | $29/month | 30,000 credits, 10 concurrent runs |
| Pro | $149/month | 150,000 credits, 25 concurrent runs, residential proxy, 2FA |
| Enterprise | Custom | 100 concurrent runs, HIPAA, SOC 2 report |
Self-hosted code free under AGPL-3.0. Skyvern Cloud: Free $0 (5,000 credits, about 170 actions); Hobby $29/month (30,000 credits, about 1,200 actions); Pro $149/month (150,000 credits, about 6,200 actions); Enterprise custom.
Is Skyvern worth it?
Skyvern is aimed squarely at the jobs robotic process automation used to own: logging into a supplier portal, filling an insurance quote form, downloading every invoice newer than a date. Where Browser Use is a library for developers and Stagehand a scripting SDK, Skyvern ships the surrounding product as well: a workflow builder with loops and validation steps, credential storage, TOTP and SMS 2FA handling, live viewport streaming and a task history UI. For an operations team rather than an engineering team, that difference matters more than any benchmark.
The benchmarks are the company's own. Skyvern reports 85.8% on WebVoyager for its 2.0 release and 64.4% on WebBench, a benchmark it published, and claims the lead on write tasks such as form filling and downloads. Nobody independent has reproduced those figures in the sources we found, so treat them as a direction rather than a ranking.
The licence deserves a careful read. AGPL-3.0 means a company that modifies Skyvern and offers it to customers over a network must publish its changes, which rules it out as a quiet embedded component for many SaaS vendors. The README also states that the anti-bot measures in Skyvern Cloud are not in the repository. Self-hosters get the agent; they do not get the stealth, proxy network or CAPTCHA solving that hard sites need. Self-hosted telemetry is on by default and goes to PostHog with the OS, Python version and Skyvern version; SKYVERN_TELEMETRY=false turns it off.
The cloud is priced in credits. Hobby at $29 buys 30,000 credits, which the pricing page equates to about 1,200 actions, and Pro at $149 about 6,200, so an action costs roughly 2.4 cents on either plan. A workflow that takes 20 actions per invoice portal and runs across 300 portals a month needs about 6,000 actions, which just fits Pro. Overage pricing is not published, and SOC 2 reports and HIPAA sit on Enterprise only.
Where it earns its place
An accounts-payable lead at a 200-person distributor
Download monthly invoices from 80 supplier portals
Build one workflow with a login block, a filter step and a loop that downloads each invoice to block storage, with credentials in Bitwarden. On Pro at $149 the roughly 6,200 included actions cover about 77 actions per portal a month.
An insurance broker's operations analyst
Fill the same quote form on a dozen carrier sites
Pass the client details as the task goal and a JSON schema for the returned premium. The README's own examples include GEICO and a Chilean insurer; carriers with strong bot defences will need the cloud's proxies and CAPTCHA solving.
A Python engineer with a flaky Playwright suite
Stop selector changes from breaking login and checkout scripts
Keep page.click('#submit') but add a prompt argument, so Skyvern falls back to the model only when the selector fails. Model cost is paid only on the broken steps.
Before you commit
- Setup
- pip install "skyvern[all]" on Python 3.11 to 3.13, then skyvern quickstart, which uses SQLite at ~/.skyvern/data.db by default; Docker Compose brings up Postgres, API and UI on localhost:8080. Windows needs Rust and the C++ build tools. A known 1.0.31 install bug is fixed in 1.0.32.
- Integrations
- OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Gemini, Ollama, OpenRouter and OpenAI-compatible endpoints via LiteLLM; Bitwarden and a custom HTTP credential service; Zapier, Make.com and n8n; an MCP server; Python and TypeScript SDKs.
- Data and privacy
- Self-hosted, pages and screenshots go to the model provider you configure. Telemetry goes to PostHog unless SKYVERN_TELEMETRY=false. The cloud page states SOC 2 Type II and HIPAA, with the report and HIPAA listed for Enterprise. Exposing a local browser through the tunnel without --api-key gives anyone with the URL full control of it, the README warns. No published security advisories.
- Cost at scale
- Self-hosted cost is a small server plus model tokens for every step, since each one sends the page to the model. Cloud actions cost about $0.024 each on Hobby and Pro, with 10 and 25 concurrent runs; Pro adds SMS numbers at $10 a month each.
- Limits
- About 288 open issues and pull requests. Conditional workflow blocks are still listed as coming soon. 1Password and LastPass integrations are unchecked in the README, though the pricing page lists 1Password on Pro. Retention terms for the cloud are not published.
What's good
- Workflow builder, credential vault and 2FA in the open-source edition
- SDK mixes Playwright selectors with AI fallbacks per call
- Works with OpenAI, Anthropic, Gemini, Bedrock, Azure, Ollama and any OpenAI-compatible endpoint
- Can drive your own Chrome over CDP, with logins intact
What's not
- AGPL-3.0 limits embedding in closed hosted products
- Anti-bot measures are cloud-only
- Telemetry on by default in self-hosted installs
- Cloud overage pricing not published
Best for
Operations and RPA teams automating form filling, logins and downloads across many websites that have no API.
Skyvern alternatives
Skyvern: common questions
- Is Skyvern worth it?
- Skyvern is the open browser agent most clearly built for back-office form work, though its licence and its cloud-only anti-bot layer push serious users towards paying. We rate it 4.2 out of 5.
- How much does Skyvern cost?
- Self-hosted code free under AGPL-3.0. Skyvern Cloud: Free $0 (5,000 credits, about 170 actions); Hobby $29/month (30,000 credits, about 1,200 actions); Pro $149/month (150,000 credits, about 6,200 actions); Enterprise custom.
- What are the downsides of Skyvern?
- AGPL-3.0 limits embedding in closed hosted products; anti-bot measures are cloud-only; telemetry on by default in self-hosted installs; cloud overage pricing not published.
- Who is Skyvern best for?
- Operations and RPA teams automating form filling, logins and downloads across many websites that have no API.
- How much does Skyvern cost for a team or in production?
- Self-hosted cost is a small server plus model tokens for every step, since each one sends the page to the model. Cloud actions cost about $0.024 each on Hobby and Pro, with 10 and 25 concurrent runs; Pro adds SMS numbers at $10 a month each.
- Is Skyvern safe for company data?
- Self-hosted, pages and screenshots go to the model provider you configure. Telemetry goes to PostHog unless SKYVERN_TELEMETRY=false. The cloud page states SOC 2 Type II and HIPAA, with the report and HIPAA listed for Enterprise. Exposing a local browser through the tunnel without --api-key gives anyone with the URL full control of it, the README warns. No published security advisories.
- What are the best Skyvern alternatives?
- The closest alternatives we have reviewed are Browser Use, Stagehand and Magentic-UI (MagenticLite).
Answers checked Oct 26, 2026.
Make Skyvern? Show this rating on your site
