Camoufox Canary MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CAMOUFOX_MCP_HEADLESS | No | Exactly virtual (per-session Xvfb) or native (Firefox native headless). | virtual |
| CAMOUFOX_MCP_PORT_END | No | Integer 1–65535; last private browser port, greater than or equal to PORT_START. | 9109 |
| CAMOUFOX_MCP_AUTH_TOKEN | No | Non-blank optional bearer token protecting MCP and browser WebSocket requests. /health stays open. | |
| CAMOUFOX_MCP_PORT_START | No | Integer 1–65535; first private browser port. | 9100 |
| CAMOUFOX_MCP_PUBLIC_URL | No | Client-reachable ws:// or wss:// base placed in session results. A trailing slash is stripped. | ws://localhost:8000 |
| CAMOUFOX_MCP_LISTEN_HOST | No | Non-empty Uvicorn bind address. | 0.0.0.0 |
| CAMOUFOX_MCP_LISTEN_PORT | No | Integer 1–65535. Keep 8000 inside this image and with Compose. | 8000 |
| CAMOUFOX_MCP_MAX_SESSIONS | No | Positive integer maximum for tracked browser sessions. Effective capacity cannot exceed the private port count. | 4 |
| CAMOUFOX_MCP_ALLOWED_HOSTS | No | Comma-separated MCP Host values. * disables SDK DNS-rebinding protection; use explicit client-visible hosts in less-trusted networks. | * |
| CAMOUFOX_MCP_ALLOWED_ORIGINS | No | Comma-separated MCP Origin values allowed when DNS-rebinding protection is enabled. | |
| CAMOUFOX_MCP_IDLE_TIMEOUT_SECONDS | No | Positive integer seconds since the last proxied WebSocket traffic before cleanup. | 900 |
| CAMOUFOX_MCP_STARTUP_TIMEOUT_SECONDS | No | Positive integer seconds allowed for the private browser server to bind. | 30 |
| CAMOUFOX_MCP_CLEANUP_INTERVAL_SECONDS | No | Positive integer seconds between idle-session cleanup passes. | 30 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/midnightphreaker/CamouFox-Canary-MCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server