Skip to main content
Glama
YogevKr

Wraith MCP Server

by YogevKr

ensure_high_score

Borrow a logged-in Google identity's reputation to open a URL and obtain a high reCAPTCHA-v3 score, bypassing WAAP protections.

Instructions

Borrow a logged-in Google identity's reputation and open url so a reCAPTCHA-v3 score is minted high.

This is the GENERAL reCAPTCHA-v3 pass: the v3 score is computed inside the google.com reCAPTCHA iframe from the .google.com reputation cookies present in the context, so injecting a warmed Google identity's cookies (delivered 3rd-party with secure+SameSite=None into an un-partitioned context) lifts the score across any sitekey/site. The browser is (re)launched with the un-partition firefox prefs, the reputation cookies are injected, then the URL is navigated (passing any WAAP and dismissing consent first).

profile optionally selects the source Firefox/Zen profile by a path substring; otherwise the first Zen profile is used, falling back to Firefox.

WARNING: borrowing your primary Google identity carries anomalous-session / 2FA risk — this is opt-in. After it returns, VERIFY success against the real protected endpoint (accept vs reject); the v3 score is run-variable and there is no trustworthy score readout for a 3rd-party sitekey. Returns the detected reCAPTCHA params and whether the reload request carried the reputation cookies.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYes
profileNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Addedv0.4.0

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and meets it: it discloses browser relaunch, un-partitioned Firefox prefs, cookie injection, navigation, consent dismissal, anomalous-session/2FA risk, and run-variable score behavior. It also tells the agent what the tool returns regarding reCAPTCHA params and the cookie-bearing reload request. This is thorough and far beyond a generic statement.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is detailed but every sentence carries load: core action, mechanism, generality, profile selection, risk warning, and verification directive. It is front-loaded with the core action before diving into mechanics and caveats. Nothing feels redundant or padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is complex, involving browser launch, cookie injection, identity risk, and POST-session verification, and the description covers all of it. An output schema exists, so detailed return-shape explanation is not required, but the description still summarizes what comes back. An agent has enough information to call it correctly and to anticipate failure behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Even though schema coverage is 0%, the description supplies complete meaning for both parameters: `url` is the target to be opened, and `profile` is a path-substring selector that defaults to the first Zen profile then falls back to Firefox. It explicitly explains the `null` default behavior. This fully compensates for the empty schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with an explicit verb and object: it borrows a logged-in Google identity's reputation and opens a URL to mint a high reCAPTCHA-v3 score. It clearly distinguishes itself as the GENERAL v3 pass, separating it from the sibling navigation and borrow tools. The scope is unambiguous and tells the agent what the tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It tells the agent when to use this tool (general reCAPTCHA-v3 pass) and gives operational context such as launching the browser with un-partitioned prefs and injecting cookies. It adds a WARNING about primary-identity risk and instructs verifying against the real protected endpoint rather than trusting a score readout. It falls just short of a 5 because it does not explicitly name sibling alternatives or state when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/YogevKr/wraith'

If you have feedback or need assistance with the MCP directory API, please join our Discord server