Cloak Browser MCP

Name: Cloak Browser MCP
Author: devinwang

by devinwangversion 0.2.0i★ –iRuns on your computer

Registry nameio.github.devinwang/cloak-browser-mcp

Install

Overview

Description from the maker (original English)

Playwright-compatible MCP server on CloakBrowser stealth Chromium: 86 tools, humanized input.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Web & browsers
You need to fill in: CLOAKBROWSER_LICENSE_KEY

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: CLOAKBROWSER_LICENSE_KEY

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "cloak-browser": {
      "command": "npx",
      "args": [
        "-y",
        "@devinwangd/cloak-browser-mcp"
      ],
      "env": {
        "CLOAKBROWSER_LICENSE_KEY": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add cloak-browser --env CLOAKBROWSER_LICENSE_KEY=your-value -- npx -y @devinwangd/cloak-browser-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "cloak-browser": {
      "command": "npx",
      "args": [
        "-y",
        "@devinwangd/cloak-browser-mcp"
      ],
      "env": {
        "CLOAKBROWSER_LICENSE_KEY": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "cloak-browser": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@devinwangd/cloak-browser-mcp"
      ],
      "env": {
        "CLOAKBROWSER_LICENSE_KEY": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

CLOAKBROWSER_LICENSE_KEY secret env
Optional CloakBrowser Pro license key. Leave unset to use the free binary.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account devinwang, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Web & browsersi

More stars than 0% of the other 879 servers in this category
Published to the registry more recently than 66% of the other 879 servers in this category
Basic checks equal to or better than 100% of the other 879 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Cloak Browser MCP safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: CLOAKBROWSER_LICENSE_KEY

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.2.0) reached the registry 17 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Browser Use, Chrome DevTools MCP, MCP Server Browser

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Browser Use

by browser-use

Lets AI do web tasks for you, such as filling forms, searching and extracting data, in the maker’s cloud browsers or on your computer.

Computer or cloud★ 120,087MITUpdated 17 days ago

Install

Chrome DevTools MCP

by ChromeDevTools

Lets AI use Chrome’s developer tools to inspect pages, find what makes them slow and spot errors. Made by the Chrome DevTools team.

Runs on your computer★ 54,821Apache-2.0Updated 15 days ago

Install

MCP Server Browser

by bytedance

MCP server for browser use access

Runs on your computer★ 39,550Apache-2.0Updated 14 months ago

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

cloak-browser-mcp

A Model Context Protocol (MCP) server backed by CloakHQ/CloakBrowser — a source-patched Chromium that passes Cloudflare Turnstile, reCAPTCHA v3, FingerprintJS, BrowserScan, and 30+ other bot detection services without runtime JS injection.

Drop-in replacement for @playwright/mcp with 86 tools: every Playwright MCP tool except browser_annotate (see Not implemented), plus a Cloak-exclusive stealth/profile/audit layer.

Works with Claude Code, Cursor, VS Code, Codex, Gemini CLI, Windsurf, or any MCP client.

Why CloakBrowser over vanilla Playwright?
Quick start
Capabilities (--caps)
CloakBrowser-exclusive tools
CLI flags
Tool inventory
Target syntax for interaction tools
Example flows
Security model
Changelog
License

Why CloakBrowser over vanilla Playwright?

	`@playwright/mcp`	`cloak-browser-mcp`
Chromium	Stock	Source-patched (58 C++ patches)
`navigator.webdriver`	`true` (leaks)	absent
Cloudflare Turnstile	Fails	Auto-pass
reCAPTCHA v3 score	~0.1	~0.9
Humanized mouse / keyboard	None	Bézier curves, typo correction
Persistent profiles	Manual	First-class CLI flag + management tools
GeoIP-aware emulation	None	Auto timezone/locale from proxy exit IP
Stealth audit / detection probe	None	Built-in `cloak_stealth_audit` + `cloak_detection_test`

When you don't need stealth, @playwright/mcp is faster and lighter — use that. When the site has any bot detection (Cloudflare, DataDome, PerimeterX, FingerprintJS) — use this.

Quick start

1. Install once

The wrapper installs from npm; the CloakBrowser Chromium binary (~200 MB) downloads on first use into ~/.cloakbrowser/.

Requires Node.js ^20.19.0 || >=22.12.0 (the minimum CloakBrowser itself needs).

The binary comes in two tiers. Without a key you get the free binary. Set CLOAKBROWSER_LICENSE_KEY in the MCP server's environment to use a CloakBrowser Pro license; CLOAKBROWSER_RELEASE_CHANNEL (stable or preview) and CLOAKBROWSER_VERSION are read by the CloakBrowser library too. See cloakbrowser.dev for what each tier includes. cloak_binary_info reports the active tier.

npm install -g @devinwangd/cloak-browser-mcp

Or run on demand without installing:

npx @devinwangd/cloak-browser-mcp --caps all

After install, the binary on PATH is cloak-browser-mcp (unscoped) — that's what you reference in MCP client configs below.

2. Wire into your MCP client

Claude Code (`~/.claude.json` or project `.mcp.json`)

"mcpServers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": ["--caps", "all"] } } }

Cursor / VS Code (`.cursor/mcp.json` or `.vscode/mcp.json`)

"servers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": ["--caps", "all"] } } }

Persistent profile + proxy + humanized inputs

"mcpServers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": [ "--caps", "all", "--profile-dir", "/Users/me/.cloak-browser-mcp/profiles/work", "--proxy", "http://user:pass@proxy.example.com:8080", "--timezone", "Europe/London", "--locale", "en-GB", "--geoip", "--humanize", "--viewport", "1920x1080", "--allowed-domains", "*.example.com,*.cloudflare.com" ] } } }

3. Use it

In Claude Code:

"Open example.com, click the search box, search for 'hello', take a screenshot."

The agent will call browser_navigate → browser_snapshot → browser_click → browser_type → browser_take_screenshot.

Capabilities (`--caps`)

Cap	Tools	Use when
(always)	navigation, interaction, page state	Standard browsing
`network`	request inspection, route mocking, offline simulation	Debugging APIs, testing failure modes
`storage`	cookies, localStorage, sessionStorage, storage state export/import	Auth state persistence, session replay
`vision`	pixel-coordinate mouse	Bypassing accessibility tree for canvas / SVG apps
`pdf`	`browser_pdf_save`	Snapshotting pages as PDF
`testing`	`verify_*` + `generate_locator`	Codegen for Playwright tests
`devtools`	highlight, tracing, video, resume	Debugging agent decisions
`config`	`get_config`, `close`, `run_code_unsafe`	Introspection + (with `--enable-unsafe-eval`) arbitrary JS
`humanize`	`cloak_humanize_set`	Tuning humanized input parameters

--caps all enables everything (except run_code_unsafe, which additionally requires --enable-unsafe-eval).

CloakBrowser-exclusive tools (always on)

Tool	Purpose
`cloak_set_fingerprint`	Override canvas seed, GPU vendor/renderer, screen size, hardware concurrency, device memory, UA brand, platform, storage quota
`cloak_set_timezone`	Live timezone via CDP (no relaunch)
`cloak_set_locale`	Override `navigator.language` and `Accept-Language`
`cloak_set_geolocation`	Set coords, or auto-resolve from proxy exit IP
`cloak_set_proxy`	Switch proxy mid-session
`cloak_detection_test`	Load a known probe (CreepJS, FingerprintJS, BrowserScan, SannySoft, Cloudflare Turnstile) and dump results
`cloak_stealth_audit`	Programmatic check: `navigator.webdriver`, plugin count, WebGL vendor, languages, UA, chrome.runtime, canvas hash, `$cdc_*` CDP signals
`cloak_request_signal_inspect`	Capture per-request TLS / header signals for a single URL
`cloak_persistent_profile_create` / `list` / `delete`	Manage `~/.cloak-browser-mcp/profiles/`
`cloak_binary_info` / `cloak_binary_update`	Inspect / refresh the CloakBrowser Chromium binary

CLI flags

Flag	Value	Default	Notes
`--caps`	`all` or any subset	(none)	Enables capability-gated tools
`--profile-dir`	Absolute path	(ephemeral)	Persistent user-data dir
`--headless` / `--headed`	(boolean)	headed (visible)	Pass `--headless` for batch/CI runs.
`--proxy`	http(s)/socks5 with inline auth	none
`--timezone`	IANA tz	system	e.g. `America/New_York`
`--locale`	BCP-47	system	e.g. `en-US`
`--user-agent`	string	(cloak default)
`--viewport`	e.g. `1920x1080`	1280×720
`--geoip`	boolean	off	Auto resolve geolocation from proxy IP
`--humanize`	boolean	off	Enable Bézier mouse + typo-correcting keyboard
`--fingerprint-seed`	int	random	Deterministic canvas/WebGL noise
`--allowed-domains`	host patterns	(open)	Whitelist for `browser_navigate`
`--blocked-domains`	host patterns	(none)	Blocklist for `browser_navigate`
`--enable-unsafe-eval`	boolean	off	Required for `browser_run_code_unsafe`
`--upload-allow-dir`	path	(none)	Restrict file-upload source paths
`--download-dir`	path	(cwd)	Where downloaded files land
`--max-pages`	int	20	Concurrent tab cap
`--self-test`	boolean	off	Print the tool list and exit

Tool inventory

Tools are grouped by capability. The "always-on" sections are exposed regardless of --caps; capability-gated sections require the matching --caps entry.

Always-on

Navigation

Tool	Required	Optional	Notes
`browser_navigate`	`url`	`waitUntil`, `timeoutMs`	Subject to `--allowed-domains` / `--blocked-domains`. Returns a fresh `[eN]` snapshot.
`browser_navigate_back`	—	—	History back in the active tab.
`browser_tabs`	`action` (`list`/`new`/`switch`/`close`)	`index`, `id`, `url`	Manage tabs by id (`t1`,…) or 0-based index.

Interaction

Tool	Required	Optional	Notes
`browser_click`	`target`	`element`, `doubleClick`, `button`, `modifiers`	`target` is a `eN` ref or a Playwright selector.
`browser_type`	`target`, `text`	`element`, `submit`, `slowly`	`slowly:true` triggers per-character typing; combine with `--humanize`.
`browser_hover`	`target`	`element`
`browser_drag`	`startTarget`, `endTarget`	`startElement`, `endElement`
`browser_drop`	`target`	`paths`, `data`	File paths via `setInputFiles`; arbitrary MIME data via synthetic DataTransfer.
`browser_select_option`	`target`, `values`	`element`
`browser_press_key`	`key`	—	Page-level key press (e.g. `Control+A`, `ArrowDown`).
`browser_handle_dialog`	`accept`	`promptText`	Responds to the most recently captured dialog.
`browser_file_upload`	`paths`	—	Paths constrained by `--upload-allow-dir` if set.
`browser_fill_form`	`fields`	—	Each field has `target` + `value` (+ optional `kind`).
`browser_scroll`	—	`target`, `direction`, `amount`	Element-scoped or page-level.

Page state

Tool	Required	Optional	Notes
`browser_snapshot`	—	—	Accessibility tree with `[eN]` refs for interactable nodes.
`browser_find`	`text` or `regex`	`filename`	Searches the snapshot instead of returning all of it. Each match is shown under its path from the root with a few lines of context, up to 20 matches. `regex` is case-sensitive unless written as `/pattern/i`.
`browser_emulate_media`	—	`colorScheme`, `reducedMotion`, `forcedColors`, `contrast`, `media`	Omitted parameters are left unchanged; `null` clears an override back to the system setting.
`browser_take_screenshot`	—	`element`, `target`, `type`, `fullPage`, `quality`, `saveAs`	Image is returned inline; optionally saved to disk.
`browser_console_messages`	—	`level`, `limit`	Buffered console + pageerror.
`browser_wait_for`	—	`timeMs`, `text`, `textGone`, `selector`, `state`, `timeoutMs`
`browser_resize`	`width`, `height`	—
`browser_evaluate`	`function`	`element`, `target`	Function source must be an arrow or function expression.

CloakBrowser-exclusive

Tool	Required	Optional	Notes
`cloak_set_fingerprint`	—	`seed`, `gpuVendor`, `gpuRenderer`, `screenWidth`, `screenHeight`, `hardwareConcurrency`, `deviceMemoryGB`, `uaBrand`, `uaBrandVersion`, `platform`, `storageQuotaMB`	Some flags only take effect on next launch — call `browser_close` then any tool to relaunch.
`cloak_set_timezone`	`timezone`	—	Live via CDP.
`cloak_set_locale`	`locale`	—	Sets navigator.language + Accept-Language header.
`cloak_set_geolocation`	—	`latitude`, `longitude`, `accuracy`, `fromProxyIp`	`fromProxyIp` calls ipapi.co/json/ via current proxy.
`cloak_set_proxy`	`proxy`	—	Recreates the context.
`cloak_detection_test`	—	`suite`, `customUrl`	Suites: `creepjs`, `fingerprintjs`, `browserscan`, `sannysoft`, `cloudflare-turnstile`.
`cloak_stealth_audit`	—	—	Programmatic audit.
`cloak_request_signal_inspect`	`url`	—	Returns TLS details, response status, request headers, response headers.
`cloak_persistent_profile_create`	`name`	—	Creates `~/.cloak-browser-mcp/profiles/` .
`cloak_persistent_profile_list`	—	—
`cloak_persistent_profile_delete`	`name`, `confirm=true`	—
`cloak_binary_info`	—	—
`cloak_binary_update`	—	—

Capability-gated

`--caps network` — browser_network_requests, browser_network_request, browser_route, browser_route_list, browser_unroute, `browse

Only the beginning is shown; read the rest in the repo

Cloak Browser MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Web & browsersi

Common questions

Alternatives

Browser Use

Chrome DevTools MCP

MCP Server Browser

README from the maker

cloak-browser-mcp

Table of contents

Why CloakBrowser over vanilla Playwright?

Quick start

1. Install once

2. Wire into your MCP client

Claude Code (~/.claude.json or project .mcp.json)

Cursor / VS Code (.cursor/mcp.json or .vscode/mcp.json)

Persistent profile + proxy + humanized inputs

3. Use it

Capabilities (--caps)

CloakBrowser-exclusive tools (always on)

CLI flags

Tool inventory

Always-on

Navigation

Interaction

Page state

CloakBrowser-exclusive

Capability-gated

Claude Code (`~/.claude.json` or project `.mcp.json`)

Cursor / VS Code (`.cursor/mcp.json` or `.vscode/mcp.json`)

Capabilities (`--caps`)