Model Context Protocol · v1.2.0

Give your AI agent a browser that can’t be caught.

An MCP server for Claude, Codex, or any agent. It spawns real Chrome sessions that keep themselves logged in and slip past Cloudflare, Turnstile, and CAPTCHA — no fingerprints, no automation flags, no getting caught.

Watch it in action
256 tests passing30+ flags auto-stripped0 idle timeout
EVADESCloudflareTurnstileDataDomePerimeterXAkamai
[ ANTI-DETECTION ]

Run every bot probe. Every one says human.

Anti-bot systems fingerprint the browser itself — the webdriver flag, CDP runtime hooks, plugin arrays, WebGL vendor strings, canvas hashes. Stealth strips or masks every one, so the session looks like an ordinary Chrome user.

DETECTION SCORE
100EXPOSED
fingerprint_probe.jsidle
navigator.webdriverwaiting·
Runtime.enable (CDP)waiting·
navigator.pluginswaiting·
WebGL vendorwaiting·
canvas fingerprintwaiting·
user-agentwaiting·
navigator.languageswaiting·
› scanning browser fingerprint surface…
[ SEE IT WORK ]

One prompt in. The wall never noticed.

Real, unedited sessions. Pick a scenario — read the prompt, watch the run, see what came back.

🔒 protected.site — cloudflare turnstileREC
THE PROMPT
you ▸ “Grab my order history from the members area.”
WHAT CAME BACK
✓Cloudflare Turnstile passed cold — no solver, no clicks
✓navigator.webdriver stayed false the entire run
✓Order history exported in a single pass
[ WHY IT'S INVISIBLE ]

Three things the walls never get to see.

Built on nodriver over the Chrome DevTools Protocol. Every automation tell is stripped, masked, or replaced with a real user’s footprint.

01

Stealth arg filtering

Automatically strips the Chrome flags that scream “automation” — the Puppeteer and Playwright signatures anti-bot vendors fingerprint first.

--enable-automation--disable-gpu--use-mock-keychain
30+ flags stripped · navigator.webdriver stays false
02

Profiles that persist

A master / snapshot / clone strategy keeps you logged in across sessions. Clones exclude regenerable caches, so each is a few MB.

master → snapshot → clone
cookies + logins carried · MB per clone, not GB
03

Full DevTools control

nodriver gives your agent the complete CDP surface — navigate, inspect, intercept, and script a real Chrome, undetected.

DOM · network · JS · screenshots · cookies
12 MCP tools · 256 tests passing
[ QUICK START ]

Running in under a minute.

Add it to your MCP config, or install with pip. Python 3.11+ and Chrome are all you need.

claude_desktop_config.json
{
  "mcpServers": {
    "stealth-chrome-devtools-mcp": {
      "command": "uvx",
      "args": ["stealth-chrome-devtools-mcp==1.2.0"]
    }
  }
}
View on PyPI ↗Read the docs
[ ! ] RESPONSIBLE USE

Stealth automation is powerful. Use it for legitimate work — testing, QA, accessibility auditing, and automating tasks you’re authorized to perform. Respect each site’s Terms of Service, robots directives, and applicable law. On shared machines, point STEALTH_MCP_BROWSER_SESSION_ROOT inside your user profile so OS ACLs protect your logged-in session data.