cloak-use
Provides Gmail API integration without browser automation, enabling agents to read inbox messages and search Gmail via tools such as gmail_inbox and gmail_search, with Google OAuth2 token refresh support.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
cloak-use
Browser untuk AI agent — text-first, bukan screenshot.
MCP server + engine CDP + CLI + daemon + auth layer, semua di 1 repo. BACA halaman lewat Accessibility tree sebagai teks: 1 halaman ≈ 2 detik, ~500 token. Bandingkan screenshot-driven agent (Browser Use): 5-30 detik per langkah + ribuan token gambar. 90% lebih cepat, 99% lebih murah untuk 90% kasus web automation.
Contribute? Baca CONTRIBUTING.md — issue & PR disambut.
┌─────────────────────────────────────────────────────┐
│ Browser Cloak (anti-detect, profil login asli) │
│ CDP :9222 │
└──────────────┬──────────────────────┬───────────────┘
│ │
┌──────────▼──────────┐ ┌───────▼─────────────┐
│ cloak.py (engine) │ │ cbd (daemon unix- │
│ CDP websocket │ │ socket, ~0.02s/kick) │
│ + 26 tools MCP │ └───────┬─────────────┘
│ (server.py) │ │
└──────────┬──────────┘ ┌───────▼─────────────┐
│ │ cb (CLI manusia) │
┌──────────▼──────────┐ └─────────────────────┘
│ Auth layer │
│ vault + auto_auth │
│ + Gmail/To Do API │
└─────────────────────┘Kenapa bukan Browser Use / Playwright?
cloak-use | Browser Use | |
Representasi halaman | AX tree → teks | screenshot → vision model |
1 langkah | ~1-5 detik | 5-30 detik |
Token | ~100-500 / halaman | ribuan token gambar |
Login | pakai browser sudah login | sering harus re-login |
Anti-bot | fingerprint asli, Turnstile sering lolos sendiri | gampang ke-flag |
Playwright: script manual per situs, agent gak bisa ambil keputusan dinamis.
Related MCP server: OpenBrowser
Komponen
File | Fungsi |
| Engine CDP: tab management, AX tree reading, network layer |
| MCP server (stdio) — 26 tools |
| CLI text-first buat manusia + agent shell |
| Daemon unix-socket — 1 koneksi CDP permanen, ~0.02s per command |
| OAuth2/MSAL token refresh (Gmail, Microsoft To Do) |
| API reader, tanpa browser |
| Vault kredensial + cookie (XOR obfuscation, lihat docs) |
| Deteksi form login → eskalasi kredensial → fill tanpa auto-submit |
| Save/restore cookie via CDP — login sekali |
| Contoh multi-step flow di 1 process (demo agent loop) |
| Smoke test tanpa browser |
Docker
Server-nya bisa jalan di container; browser CDP tetap di mesin utama
(atau di container lain yang di-attach lewat CLOAK_HOST):
docker build -t cloak-use .
docker run -i --rm -e CLOAK_HOST=host.docker.internal -e CLOAK_PORT=9222 cloak-use
# config MCP: command ["docker","run","-i","--rm",
# "-e","CLOAK_HOST=host.docker.internal","cloak-use"]Quick start
git clone https://github.com/DaffaHeroik/cloak-use.git
cd cloak-use
pip install -r requirements.txt # cuma websocket-client
python3 setup_check.py # cek: browser CDP :9222 hidup?
bash scripts/install.sh # (opsional) symlink cb + cbd ke /usr/local/binButuh: 1 browser dengan --remote-debugging-port=9222 di mesin yang sama.
MCP config (OpenCode / Claude / Cursor / Hermes):
{
"mcp": {
"cloak-use": {
"type": "local",
"command": ["/path/to/cloak-use/server.py", "serve"]
}
}
}Debug tanpa MCP:
python3 server.py call browser_status '{}'
python3 server.py call read_page '{}'
cb open https://example.com # CLITools MCP (26)
Tool | Kegunaan |
| status browser + daftar tab, jalankan pertama |
| manajemen tab |
| navigate tab aktif |
| navigate + baca halaman dalam 1 putaran (34% lebih cepat) |
| baca halaman sebagai teks ( |
| klik element berdasarkan teks, tanpa selector CSS |
| input primitives (React-friendly) |
| tunggu teks muncul/hilang — poll DOM 300ms |
| scroll, JS arbitrary (power user) |
| fallback canvas/chart/map only |
| scraping killer: semua response body API (JSON mentah) |
| tunggu 1 endpoint spesifik, ambil body-nya |
| block image/font/css/analytics |
| cookie vault — login sekali |
| Gmail API tanpa browser |
| Microsoft To Do via Graph API |
Network layer — keunggulan utama untuk scraping
SPA mengambil data dari API JSON. Daripada render + parse DOM, ambil response body-nya langsung — zero DOM parsing:
api_snapshot → /api/user/me, /api/user/dashboard, /api/notifications
JSON terstruktur, 7 detik, ~1.5K token
read_page → teks UI, 3.1 detik, ~150 token (untuk eksplorasi)Auth layer
Prinsip: agent tidak pernah ngetik kredensial owner.
vault.py— simpan kredensial + cookie per domain. Setelah login pertama,session_restorebikin 7 hari tanpa login ulang.auto_auth.py— deteksi form login yang nyata (email/password/OTP/captcha), eskalasi via credential provider:CLOAK_CREDENTIALS_CMD(env) — command custom, return JSON{field: value}. Escape hatch untuk PWA/secret manager/layanan lain.CLI
vault-ask(kalau ada di PATH) — form nembak HP owner. Hasilnya di-fill, tidak di-submit. Submit tetap keputusan sadar (click_text/eval), owner yang kontrol.
auth.py+gmail_reader.py+todo_reader.py— OAuth2 (Google) & MSAL (Microsoft) token refresh otomatis, API tanpa browser.
Setup token (opsional):
mkdir -p ~/.cloak-use
# Google: OAuth2 client + refresh_token → google_token.json
# Microsoft: MSAL cache → msal_token_cache.json
# Override path: env GOOGLE_TOKEN_PATH / MSAL_TOKEN_PATHPerformance (ukur)
Operasi | Waktu |
Attach + baca tab existing | 354ms |
| 51ms |
Gmail flow (10 email via API) | 0.39s |
| ~0.02s per command |
Buka tab baru + SPA load | 4-8s |
Full agent loop (read→click→verify) | 9.3s, ~170 token |
Config
Env | Default | Kegunaan |
|
| CDP target |
|
| vault + cbd log |
| built-in | XOR key vault (override) |
|
| token Google |
|
| cache MSAL |
| — | credential provider custom |
|
| cb |
Peringatan
Browser target punya session login asli. eval bisa menjalankan JS apa pun
di domain yang ter-attach. Jangan arahkan ke situs yang belum dipercaya.
vault.py pakai XOR obfuscation (bukan enkripsi kriptografis) — jangan
simpan kredensial kritis di situ, pakai secret manager.
Contributing
Bugs, feature request, dan koreksi di issues.
PR: fork → branch → python3 tests/test_smoke.py (harus semua PASS) → PR.
Detail: CONTRIBUTING.md.
Lisensi
MIT — bebas dipakai, dimodifikasi, didistribusikan, bahkan untuk produk komersial. Syarat: copyright notice tetap ada.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
Official Browserless MCP server: browser automation, scraping, screenshots and PDFs for AI agents.
Web scraping, browser automation, screenshots and AI data extraction for AI agents via MCP.
Hosted Web Crawler MCP server for Claude, ChatGPT and Cursor, with each action switched per account.
Cloud browser, web extraction, screenshots, and remote CDP tools for AI agents.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenancesingle-binary MCP server that gives AI agents a browser. 66 tools for navigation, form filling, data extraction, screenshots, and DOM diffing — built on pure Chrome DevTools Protocol.14MIT
- AlicenseNot gradedqualityBmaintenanceA zero-dependency MCP server that drives a real Chrome browser through a companion extension, enabling AI agents to automate real user sessions with trusted input events, compact accessibility-tree snapshots, and 14 tools for navigation, interaction, scripting, and inspection.374 npmMIT
- AlicenseAqualityCmaintenanceBrowser automation MCP server that uses a real browser to give agents eyes and hands—open pages, click, fill, screenshot, and run scripts via accessibility-tree snapshots.2226 npmMIT
- AlicenseNot gradedqualityAmaintenanceAn MCP server that gives AI agents token-efficient, structured access to web pages, returning compact page orientations and targeted element queries instead of full accessibility-tree dumps, plus browser interaction, monitoring, and session management tools.4 npmMIT