Cloak Browser MCP

cloak-browser-mcp

A Model Context Protocol (MCP) server backed by CloakHQ/CloakBrowser — a source-patched Chromium that passes Cloudflare Turnstile, reCAPTCHA v3, FingerprintJS, BrowserScan, and 30+ other bot detection services without runtime JS injection.

Drop-in replacement for @playwright/mcp with 86 tools: every Playwright MCP tool except browser_annotate (see Not implemented), plus a Cloak-exclusive stealth/profile/audit layer.

Works with Claude Code, Cursor, VS Code, Codex, Gemini CLI, Windsurf, or any MCP client.

Table of contents

• Why CloakBrowser over vanilla Playwright?
• Quick start
• Capabilities (--caps)
• CloakBrowser-exclusive tools
• CLI flags
• Tool inventory
• Target syntax for interaction tools
• Example flows
• Security model
• Changelog
• License

Why CloakBrowser over vanilla Playwright?

When you don't need stealth, @playwright/mcp is faster and lighter — use that. When the site has any bot detection (Cloudflare, DataDome, PerimeterX, FingerprintJS) — use this.

Quick start

1. Install once

The wrapper installs from npm; the CloakBrowser Chromium binary (~200 MB) downloads on first use into ~/.cloakbrowser/.

Requires Node.js ^20.19.0 || >=22.12.0 (the minimum CloakBrowser itself needs).

The binary comes in two tiers. Without a key you get the free binary. Set CLOAKBROWSER_LICENSE_KEY in the MCP server's environment to use a CloakBrowser Pro license; CLOAKBROWSER_RELEASE_CHANNEL (stable or preview) and CLOAKBROWSER_VERSION are read by the CloakBrowser library too. See cloakbrowser.dev for what each tier includes. cloak_binary_info reports the active tier.

npm install -g @devinwangd/cloak-browser-mcp

Or run on demand without installing:

npx @devinwangd/cloak-browser-mcp --caps all

After install, the binary on PATH is cloak-browser-mcp (unscoped) — that's what you reference in MCP client configs below.

2. Wire into your MCP client

Claude Code (~/.claude.json or project .mcp.json)

{

"mcpServers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": ["--caps", "all"] } } }

Cursor / VS Code (.cursor/mcp.json or .vscode/mcp.json)

{

"servers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": ["--caps", "all"] } } }

Persistent profile + proxy + humanized inputs

{

"mcpServers": { "cloak-browser": { "command": "cloak-browser-mcp", "args": [ "--caps", "all", "--profile-dir", "/Users/me/.cloak-browser-mcp/profiles/work", "--proxy", "http://user:pass@proxy.example.com:8080", "--timezone", "Europe/London", "--locale", "en-GB", "--geoip", "--humanize", "--viewport", "1920x1080", "--allowed-domains", "*.example.com,*.cloudflare.com" ] } } }

3. Use it

In Claude Code:

"Open example.com, click the search box, search for 'hello', take a screenshot."

The agent will call browser_navigate → browser_snapshot → browser_click → browser_type → browser_take_screenshot.

Capabilities (--caps)

--caps all enables everything (except run_code_unsafe, which additionally requires --enable-unsafe-eval).

CloakBrowser-exclusive tools (always on)

CLI flags

Tool inventory

Tools are grouped by capability. The "always-on" sections are exposed regardless of --caps; capability-gated sections require the matching --caps entry.

Always-on

Navigation

Interaction

Page state

CloakBrowser-exclusive

Capability-gated

`--caps network` — browser_network_requests, browser_network_request, browser_route, browser_route_list, browser_unroute, `browse