vibheksoni/stealth-browser-mcp
GitHubThe only browser automation that bypasses anti-bot systems. AI writes network hooks, clones UIs pixel-perfect via simple chat.
Teams whose requirements match this repository’s core capability.
Review deployment and security evidence before production adoption.
What matters before you adopt it
Security evidence without the noise
Trust remains a decision signal; CVEs and scanner evidence explain what is driving the risk.
CVE-2026-32871CRITICALfastmcp: FastMCP: Authenticated Server-Side Request Forgery via path traversal in OpenAPI path parametersFix 3.2.0CVE-2025-69196HIGHfastmcp: FastMCP: Improper token issuance due to incorrect resource parameter handlingFix 2.14.2CVE-2026-27124HIGHFastMCP: FastMCP OAuthProxy: FastMCP OAuthProxy: Unauthorized actions due to improper consent validation in GitHub OAuthFix 3.2.0GHSA-c2jp-c369-7pvxHIGHFastMCP Auth Integration Allows for Confused Deputy Account TakeoverFix 2.13.0GHSA-rcfx-77hg-w2wvHIGHFastMCP updated to MCP 1.23+ due to CVE-2025-66416Fix 2.14.0CVE-2025-62800MEDIUMFastMCP vulnerable to reflected XSS in client's callback pageFix 2.13.0View trust evidence & security findings▼
Architecture from code7 modules · 0 edges▼
Modules and dependency edges extracted from repository code. This is code evidence, not README inference.
Architecture evidence details
flowchart TD
%% stealth-browser-mcp — high-level architecture (DRAFT, refine me)
n0["src · 25 files"]
n1["src/js · 7 files"]Nearby repositories worth comparing before adoption.
Undetectable browser automation for AI agents via MCP. Stealth Chrome DevTools with smart profile management, anti-detection arg filtering, and CDP access.
Native Safari browser automation for AI agents. 97 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.
One command for every interface—search, run, and inspect real software across APIs, browsers, desktops, local tools, and MCP.