Skip to main content
Glama

Vibatchium-MCP

Stealth browser automation for agents: N parallel headless Chrome sessions exposed as MCP tools, plus an encrypted credential vault with TOTP — so an agent can stay logged in and act unattended, with no human in front of the box.

 agent ──MCP stdio──▶ vibatchium-mcp ──┬──▶ session 1 ──▶ headless Chrome ──▶ site A (logged in)
                                       ├──▶ session 2 ──▶ headless Chrome ──▶ site B
                                       └──▶ vault ──▶ encrypted creds + TOTP codes

MCP tools

Tool

What it does

session_open / session_list / session_close

manage N parallel browser sessions

navigate

go to a URL, return title + text

snapshot

current page text snapshot

click / type_text

interact (typed secrets are redacted from output)

extract

pull named fields from page text

screenshot

capture PNG of the current page

vault_store / vault_get / vault_list

encrypted credential storage

vault_totp

current RFC 6238 code for a stored TOTP secret

Related MCP server: spirit-computer-use

Quickstart

pip install -r requirements.txt

# Demo mode: scripted backend, no browser needed — full tool surface works
python -m vibatchium_mcp.cli explore https://example.com --demo
python -m vibatchium_mcp.cli screenshot https://example.com shot.png --demo

# Credential vault (key via VIBATCHIUM_VAULT_KEY env var)
python -m vibatchium_mcp.cli vault-store mysite --username agent1 --demo
python -m vibatchium_mcp.cli vault-totp mysite --demo

# MCP server over stdio (point your agent at it)
python -m vibatchium_mcp.cli mcp --demo

# Real stealth browsing (headless Chromium)
pip install -r requirements-full.txt
python -m playwright install chromium
python -m vibatchium_mcp.cli explore https://example.com

Register with any MCP client (Claude Code, Cursor, etc.):

{
  "mcpServers": {
    "vibatchium-mcp": {
      "command": "python",
      "args": ["-m", "vibatchium_mcp.cli", "mcp"],
      "cwd": "/path/to/vibatchium-mcp"
    }
  }
}

Design notes

  • Stealth defaults — real backend launches Chromium with anti-automation flags (disable-blink-features=AutomationControlled, realistic UA + viewport) and one persistent context per session, so logins and cookies survive across tool calls.

  • Vault security — Fernet (XSalsa20-Poly1305-class AEAD) encryption when cryptography is installed; the key comes only from VIBATCHIUM_VAULT_KEY. Passwords are never echoed by the CLI and typed secrets are redacted from tool output. TOTP is pure-stdlib RFC 6238.

  • Graceful degradation — Playwright is lazy-imported. Without it the demo backend serves the identical tool surface with scripted pages, so agent prompts and integrations are testable offline.

Env vars

VIBATCHIUM_VAULT_KEY (required for real use), VIBATCHIUM_VAULT_PATH, VIBATCHIUM_DATA_DIR, VIBATCHIUM_DEMO=1 (force demo backend).

Tests

python -m pytest tests/ -v   # offline: demo backend + vault + RFC 6238 vector

License

Apache-2.0 — see LICENSE.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables MCP clients to drive a real, logged-in Chrome browser for web automation tasks like navigation, clicking, typing, and screenshotting.
    0
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP agents to drive the user's already-open Chrome profile through a Manifest V3 extension and loopback bridge, listing and controlling existing tabs, capturing screenshots, and sending clicks, typing, drags and key holds via an independent on-page cursor without moving the system mouse. It also supports form filling, console and network inspection, read-only or confirmed JavaScript execution, file and PDF downloads, and game-style screenshot/action loops with snapshot recovery and an emergency stop.
    MIT
  • F
    license
    Not graded
    quality
    A
    maintenance
    Lets MCP clients drive isolated, persistent Chromium browser profiles through tools for navigation, clicking, typing, extraction, screenshots, JS evaluation, tabs, and cookies. Each profile keeps its own login state, fingerprint, and proxy across sessions, so agents can complete real authenticated workflows.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents and human operators to drive isolated browser profiles with persistent cookies, fingerprints, and proxies, exposing navigation, clicking, typing, extraction, screenshots, JS evaluation, tabs, cookies, and waits to MCP clients.
    -