Stealth Browser MCP is an MCP server that gives AI agents control of real Chrome, Chromium, or Microsoft Edge instances, aimed at sites that block ordinary automation with Cloudflare challenges, queue pages, anti-bot checks, and login walls. It drives the browser through nodriver and the Chrome DevTools Protocol (CDP) and exposes the result as MCP tools built on FastMCP.
The server exposes 98 tools in 11 sections: browser management, element interaction, element extraction, file extraction, network debugging, CDP functions, progressive cloning, cookies and storage, tabs, debugging, and dynamic hooks. You run the full set, a 21-tool minimal core, or a custom subset with individual sections turned off. An Xpool-safe mode drops the CDP function tools that trigger runtime detection.
Anti-bot results depend on the site, region, browser version, IP reputation, and detector version, and the project publishes them as point-in-time manual test snapshots. The server treats the MCP client as the security principal: it runs over local stdio by default, and HTTP transport takes an optional bearer token.
Compared with Playwright MCP, the project lists these differences:
| Feature | Stealth Browser MCP | Playwright MCP |
|---|---|---|
| Cloudflare / Queue-It style checks | Passes common JS challenges in testing | Commonly blocked |
| UI element cloning | CDP-accurate extraction | Limited |
| Network debugging | Full request and response inspection | Basic |
| Dynamic hook system | Restricted Python hooks | Not available |
| Total tools | 98, in 11 sections | About 20 |
Features
- Real browser instances: spawns and manages Chrome, Chromium, or Edge sessions with automatic executable discovery and idle reaping of unused instances
- Element cloning: extracts complete elements with CSS, DOM structure, events, animations, and assets through CDP, including progressive cloning for large elements
- Network inspection: lists captured requests and reads headers, payloads, and response bodies from the agent chat
- Dynamic hooks: restricted Python hooks intercept, block, redirect, fulfill, or modify request and response flows in real time
- CDP execution: runs page JavaScript, direct CDP commands, and pre-document scripts
- Text input: pastes large content through CDP, types with human-like keystrokes, or presses real keys as trusted CDP key events
- Modular tool surface: loads the full 98 tools, a 21-tool minimal core, or a custom set with sections disabled
- Agent skill: a bundled skill teaches agents the recommended tool order, state checks, network debugging flow, and browser cleanup
- Cookies, storage, and tabs: manages cookies, browser storage, and multiple tabs per instance
