
Eyebrowse
io.github.Evil-BanePublished by GitHub account Evil-Banev0.3.10Updated Oct 24, 2026
Stealthy, LLM-drivable browser engine — a Python library + 85-tool MCP server on stealth Chromium.
Overview
Eyebrowse is a local MCP server exposing 85 browser tools on a stealth Chromium engine, letting an assistant navigate, read pages as ARIA refs, and act on them.
- What you can do
- Navigate pages and read them as an ARIA tree with ref handles, then click, type, hover, select, drag, upload files and handle dialogs or keyboard input
- Work across cross-origin iframes, shadow DOM, popups and new tabs, and run evaluate inside any frame
- Inspect and control network traffic: view requests and responses, block URLs, mock responses, go offline, export HAR
- Manage browser state and identity: cookies and web storage, storage_state save/reload, multiple sessions, proxy and fingerprint rotation
- Capture output: screenshots, MHTML snapshots, PDF export, Playwright tracing and native webm video, plus clean markdown extraction
- Use raw Chrome DevTools Protocol calls, assertions, element…
- When to use it
- Useful when an assistant needs to drive a real browser end to end: reading rendered pages, filling forms, walking multi-step flows, or collecting page content as markdown. It is aimed at automation that must survive bot-detection checks, and at tasks needing CDP-level control such as network inspection, HAR capture or PDF and video output.
- Requirements
- Runs as a local stdio process (eyebrowse-mcp, installable from PyPI and runnable with uvx). Needs Python 3.12 (pinned below 3.13) and downloads a stealth Chromium binary on first launch. Desktop only. Optional proxy and captcha-solver credentials can be supplied through environment variables or per-session tool arguments.
Installation
In SourceWeft
- Open Eyebrowse in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
👁️ EyeBrowse
A stealthy, LLM-drivable browser engine — one codebase, two faces.
A Python library and an MCP server for driving a real, hard-to-detect browser, so legitimate automation isn't false-flagged or IP-banned by Cloudflare, DataDome, Akamai, or PerimeterX. Built on CloakBrowser — a stealth Chromium (Chrome/146) that's a Playwright drop-in — so EyeBrowse gets the full Chrome DevTools Protocol: trusted cursorless clicks, deep network inspection, MHTML, PDF, and native video.
[CI]
[PyPI]
[Python 3.12]
[License: MIT]
[MCP tools]
[Engine: CloakBrowser]
[Code style: Ruff]
[PRs welcome]
[EyeBrowse — an AI agent driving a stealth browser past Cloudflare, over MCP]
▶ Full-quality MP4: docs/demo.mp4 — an AI agent drives EyeBrowse over MCP: clears a Cloudflare check, then reads real docs (asyncio · httpx · MDN).
Why EyeBrowse?
- 🥷 Stealth by default — engine-level fingerprint spoofing (
geoip+humanizeon out of the box, novel fingerprint per launch);navigator.webdrivermasked; viewport auto-sized to the spoofed screen. Nopuppeteer-extraband-aids — the anti-detection is compiled into the browser. - 🤖 Built for LLMs — pages are read as an ARIA tree with
[ref=…]handles; the model acts by ref (click/type/hover), not by brittle CSS or raw pixels. Cross-origin iframes, shadow DOM, popups — handled. - ⚡ Chrome DevTools Protocol — trusted, cursorless clicks by node ref (
Input.dispatchMouseEvent), rawNetwork/Performance/Emulationaccess, MHTML snapshots, PDF export, and native video — all reachable as tools. - 🧰 Library and MCP from one codebase — a clean Python API (
EyeBrowse+Session), mirrored 1:1 by a thin MCP server (85browser_*tools) for Claude Code and any MCP client. - 🪟 Never boxed in — the curated high-level API doesn't hide Playwright: reach
session.page/.context/.browserfor anything it doesn't wrap. - 🔋 Batteries included — multi-session, proxy + identity rotation, API-mode captcha solvers, native video, full HAR capture, and clean-markdown extraction.
Scope. EyeBrowse is a low-level browser engine — it holds no workflow logic. Consumers decide what to do; the engine provides what's possible.
Contents
Quickstart · Install · Features · Compare · Library · MCP · Proxy & identity · Extraction · Recording · How it works · Caveats · Tools · License
Quickstart
…or wire it into Claude Code (or any MCP client) — see Use over MCP.
Install
From PyPI
From source (development)
Python 3.12 (pinned <3.13). Engine: cloakbrowser>=0.3 (stealth Chromium, Chrome/146), on
playwright 1.60 and mcp 1.27.
Features
Full per-tool reference: docs/TOOLS.md (85 tools across 18 groups).
How EyeBrowse compares
Fair-use note: each project targets a different niche — this compares them on the axes EyeBrowse optimizes for (stealth + LLM-drivable + one library/MCP codebase), not as an overall ranking.
Use as a library
Run the included proof: uv run python examples/direct_usage.py.
Use over MCP
EyeBrowse ships an MCP server (eyebrowse-mcp, FastMCP over stdio). Add it to any MCP client.
Claude Code (CLI):
Any MCP client (JSON config):
Then drive the loop: browser_navigate(url) → read the snapshot → act by ref
(browser_click / browser_type / …). A default session is auto-created, so most tools just
work. Full list: docs/TOOLS.md.
Proxy & identity (optional)
Runs proxyless by default (geoip still aligns locale/timezone to your real IP). Add a proxy
only when you want one:
Set a default once via EYEBROWSE_PROXY_* in .env, eb.set_static_proxy(...), or a custom
ProxyProvider for rotation. Over MCP: browser_new_session(proxy_url=…) /
browser_new_identity(proxy_url=…) / browser_set_proxy(…).
reCAPTCHA v3 / reputation gates are score-based and key off IP + session reputation — a fresh browser on a flagged IP fails regardless of stealth. Pair EyeBrowse with a clean residential proxy.
Extraction
eb.extract() (or browser_extract) hands the rendered HTML to Crawl4AI's raw: feed and
returns clean, pruned markdown — no LLM is called and no LLM keys are ever read; the
consuming agent does any structuring.
Recording
Native video — Playwright records the whole session to a .webm, written on close. The path
is known up-front; the file finalizes when the session closes:
Over MCP: browser_new_session(record_video=True) → browser_video_path. Want a GIF for a README?
Convert the .webm with ffmpeg (ffmpeg -i demo.webm demo.gif). The demo at the top was captured
this way — see examples/make_demo.py.
How it works
The façade (EyeBrowse + Session) is the product; the MCP adapter is a thin 1:1 wrapper over
it. The high-level API is curated and LLM-friendly — not a reimplementation of all of Playwright
— and the raw page / context / browser objects are always one attribute away. The launcher
is the only engine-specific layer; everything else is plain Playwright.
Caveats
Worth knowing:
evaluateruns in the page's main world (page globals reachable). To override a page's widget globals and fire a site callback (e.g. for captcha), EyeBrowse injects a<script>so the code runs in the page world — seecaptcha/inject.py.- HAR export closes the session — Playwright only flushes the HAR buffer when the context
closes. Use the checkpoint pattern:
browser_storage_state→browser_har_export→browser_new_session(storage_state=...). For the initiator-rich Chrome HAR (JS call stacks), reach theNetwork.*domain viabrowser_cdp_send. - Native video is
.webm— convert to GIF/MP4 with ffmpeg if you need another format.
Project layout
Build notes, version-pin rationale, and verified engine behavior live in CLAUDE.md.
Use responsibly
EyeBrowse drives a real browser with anti-detection features. Use it only against sites you own or are explicitly authorized to automate, and within their terms and applicable law.
License
MIT © Evil-Bane
Found EyeBrowse useful? ⭐ Star the repo — it genuinely helps.
Built with Python · Playwright · CloakBrowser · FastMCP · the Model Context Protocol
Source: README.md at commit 5250173
Tools
0Version history
1- v0.3.10LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts