stealthy-auto-browse

Browser automation in Docker built for QA against anti-bot stacks, compatibility testing of detection libraries (CreepJS, BrowserScan, Pixelscan, Cloudflare), and defensive security research where standard headless browsers produce false-positive blocks. Uses Camoufox (custom Firefox, no CDP signals) + PyAutoGUI for OS-level input.

For installation, configuration, and container setup, see references/setup.md.

Security & safety

Authorized targets only. This tool is built for QA/testing against sites and systems you own or have written authorization to test — not for scraping or automating third-party sites without permission. See "Authorized Use Only" below before pointing it at anything.
Data capture is powerful — scope it. get_text, get_html, get_interactive_elements, eval, and the screenshot/save_screenshot actions can extract full page content, DOM structure, and rendered pixels in one call. Only capture what the authorized test actually needs; don't sweep pages outside scope just because the API makes it easy.
Dialogs auto-accept by default — this can approve destructive actions. confirm(), beforeunload, and permission prompts are accepted automatically unless you called handle_dialog with accept: false first. An agent must disable or scope auto-accept (call handle_dialog with accept: false before any step that might raise a dialog) whenever it is acting on a stateful site (one with real data, real accounts, or irreversible actions behind a confirm prompt), and must never drive this tool against a site where an accidental confirm would be harmful. See "Dialogs" below.
No auth when AUTH_TOKEN is unset. With it empty the HTTP API and MCP surface are UNAUTHENTICATED — anyone who can reach the port gets full browser control (navigation, input, cookies, screenshots, script execution). NEVER expose such an instance beyond localhost; set AUTH_TOKEN and bind to 127.0.0.1 or put it behind an authenticating proxy. See references/setup.md.
Loaders execute automatically on matching URLs. Only mount loader YAML you wrote or audited — see "Page Loaders" below.

Authorized Use Only

This tool is intentionally hard to fingerprint as automation. That makes it dangerous if misused. Only use it for: