The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Eyebrowse listing page.
A Python library and an MCP server for driving a real, hard-to-detect browser, so legitimate automation isn't false-flagged or IP-banned by Cloudflare, DataDome, Akamai, or PerimeterX. Built on CloakBrowser — a stealth Chromium (Chrome/146) that's a Playwright drop-in — so EyeBrowse gets the full Chrome DevTools Protocol: trusted cursorless clicks, deep network inspection, MHTML, PDF, and native video.

▶ Full-quality MP4: docs/demo.mp4 — an AI agent drives EyeBrowse over MCP: clears a Cloudflare check, then reads real docs (asyncio · httpx · MDN).
geoip + humanize on out of the box, novel fingerprint per launch); navigator.webdriver masked; viewport auto-sized to the spoofed screen. No puppeteer-extra band-aids — the anti-detection is compiled into the browser.[ref=…] handles; the model acts by ref (click/type/hover), not by brittle CSS or raw pixels. Cross-origin iframes, shadow DOM, popups — handled.Input.dispatchMouseEvent), raw Network/Performance/Emulation access, MHTML snapshots, PDF export, and native video — all reachable as tools.EyeBrowse + Session), mirrored 1:1 by a thin MCP server (85 browser_* tools) for Claude Code and any MCP client.session.page / .context / .browser for anything it doesn't wrap.Scope. EyeBrowse is a low-level browser engine — it holds no workflow logic. Consumers decide what to do; the engine provides what's possible.
Quickstart · Install · Features · Compare · Library · MCP · Proxy & identity · Extraction · Recording · How it works · Caveats · Tools · License
…or wire it into Claude Code (or any MCP client) — see Use over MCP.
From PyPI
From source (development)
Python 3.12 (pinned <3.13). Engine: cloakbrowser>=0.3 (stealth Chromium, Chrome/146), on
playwright 1.60 and mcp 1.27.
| 🥷 Stealth | CloakBrowser's patched-Chromium fingerprint spoofing (novel --fingerprint per launch); geoip + humanize by default; webdriver masked; viewport matched to the spoofed screen. |
| 🤖 LLM interaction | aria_snapshot(mode="ai") → ARIA tree + [ref] handles; click / type / hover / select / drag / file-upload / dialogs / keyboard; coordinate mouse too. |
| ⚡ CDP | trusted cursorless click by ref, raw CDP (Network / Performance / Emulation), MHTML capture, PDF export. |
| 🪟 Frames & DOM | cross-origin iframe routing by ref, shadow-DOM piercing, popup/new-tab switching, evaluate inside any frame. |
| 🗂 Multi-session | independent stealth sessions, each with its own context / identity / proxy. |
| 🌐 Network | inspect requests/responses (incl. XHR/fetch bodies & WebSocket frames), block URLs, mock responses, go offline, full HAR export. |
| 💾 State | cookies, localStorage & sessionStorage (CRUD), storage_state save/reload. |
| 🪪 Identity rotation | fresh fingerprint + isolated profile + paired proxy; pluggable residential ProxyProvider. |
| 🧩 Captcha | pluggable API-mode solvers (CapSolver / 2Captcha / CapMonster / NextCaptcha) + TOTP — no browser extension. |
| 📄 Extraction | Crawl4AI raw: feed → clean, token-efficient markdown (no LLM, no API keys). |
| 🎥 Capture | screenshots, Playwright tracing, and native video (.webm). |
| ✅ Verify & debug | assertions, element highlighting, locator generation, geolocation/header emulation. |
Full per-tool reference: docs/TOOLS.md (85 tools across 18 groups).
| EyeBrowse | Playwright MCP | browser-use | playwright-stealth | |
|---|---|---|---|---|
| Anti-detection compiled into the browser | ✅ | ❌ | ❌ | ⚠️ JS patches |
LLM-native ARIA [ref] interaction model | ✅ | ✅ | ✅ | ❌ |
| Ships an MCP server | ✅ (85 tools) | ✅ | ⚠️ partial | ❌ |
| One codebase: Python library and MCP | ✅ | MCP-only | lib-only | lib-only |
| Full CDP (trusted clicks · network · MHTML · PDF · video) | ✅ | ⚠️ partial | ❌ | ⚠️ partial |
| Captcha (API-mode) + TOTP | ✅ | ❌ | ❌ | ❌ |
| Proxy + identity rotation built in | ✅ | ❌ | ⚠️ partial | ❌ |
| Cross-origin iframes · shadow DOM · popups | ✅ | ✅ | ⚠️ partial | n/a |
Fair-use note: each project targets a different niche — this compares them on the axes EyeBrowse optimizes for (stealth + LLM-drivable + one library/MCP codebase), not as an overall ranking.
Run the included proof: uv run python examples/direct_usage.py.
EyeBrowse ships an MCP server (eyebrowse-mcp, FastMCP over stdio). Add it to any MCP client.
Claude Code (CLI):
Any MCP client (JSON config):
Then drive the loop: browser_navigate(url) → read the snapshot → act by ref
(browser_click / browser_type / …). A default session is auto-created, so most tools just
work. Full list: docs/TOOLS.md.
Runs proxyless by default (geoip still aligns locale/timezone to your real IP). Add a proxy
only when you want one:
Set a default once via EYEBROWSE_PROXY_* in .env, eb.set_static_proxy(...), or a custom
ProxyProvider for rotation. Over MCP: browser_new_session(proxy_url=…) /
browser_new_identity(proxy_url=…) / browser_set_proxy(…).
reCAPTCHA v3 / reputation gates are score-based and key off IP + session reputation — a fresh browser on a flagged IP fails regardless of stealth. Pair EyeBrowse with a clean residential proxy.
eb.extract() (or browser_extract) hands the rendered HTML to Crawl4AI's raw: feed and
returns clean, pruned markdown — no LLM is called and no LLM keys are ever read; the
consuming agent does any structuring.
Native video — Playwright records the whole session to a .webm, written on close. The path
is known up-front; the file finalizes when the session closes:
Over MCP: browser_new_session(record_video=True) → browser_video_path. Want a GIF for a README?
Convert the .webm with ffmpeg (ffmpeg -i demo.webm demo.gif). The demo at the top was captured
this way — see examples/make_demo.py.
The façade (EyeBrowse + Session) is the product; the MCP adapter is a thin 1:1 wrapper over
it. The high-level API is curated and LLM-friendly — not a reimplementation of all of Playwright
— and the raw page / context / browser objects are always one attribute away. The launcher
is the only engine-specific layer; everything else is plain Playwright.
Worth knowing:
evaluate runs in the page's main world (page globals reachable). To override a page's
widget globals and fire a site callback (e.g. for captcha), EyeBrowse injects a <script> so the
code runs in the page world — see captcha/inject.py.browser_storage_state → browser_har_export →
browser_new_session(storage_state=...). For the initiator-rich Chrome HAR (JS call stacks),
reach the Network.* domain via browser_cdp_send..webm — convert to GIF/MP4 with ffmpeg if you need another format.Build notes, version-pin rationale, and verified engine behavior live in CLAUDE.md.
EyeBrowse drives a real browser with anti-detection features. Use it only against sites you own or are explicitly authorized to automate, and within their terms and applicable law.
MIT © Evil-Bane
Found EyeBrowse useful? ⭐ Star the repo — it genuinely helps.
Built with Python · Playwright · CloakBrowser · FastMCP · the Model Context Protocol