Its own web browser.
Not a window onto the web app: a real browser the agents drive. It navigates, signs in where you already have access, works through a task across sites, and reads pages a crawler is refused — the same route the extension takes, on your own machine.