ProBrowser
Controls a running Brave browser via CDP, providing full automation capabilities such as navigation, interaction, and data extraction while maintaining user profiles and sessions.
Detects and solves Cloudflare Turnstile CAPTCHAs automatically after navigation, using agent vision to solve image-grid challenges or an optional 2Captcha API for text-based challenges.
Controls a running Opera browser via CDP, allowing AI agents to navigate, click, type, and extract data from pages while preserving user sessions, cookies, and logins.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ProBrowserOpen Gmail and show my unread emails"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ProBrowser
Real-Browser Automation MCP Server for AI Agents — Anti-Detection
29 tools · CDP attach to your real Opera/Chrome · Human-like input · DOM + Vision hybrid
Features • Pipeline • Quick Start • Usage • Configuration • Architecture • Project Structure • Anti-Detection
🌐 Language: English | Tiếng Việt
Dev & tested only on Arch Linux
kernel Linux 7.1.5-arch1-2 · DE: KDE Plasma
Other distros/desktops are untested — YMMV.
An MCP Server that lets AI agents (Kilo, Claude Code, …) control the user's real browser through the Model Context Protocol. No headless mode, no throwaway profiles — the agent attaches over CDP to the running Opera/Chrome with all sessions, cookies and logins intact, then drives it with human-like timing and a DOM-first / vision-fallback strategy.
✨ Features
Feature | Description |
🔌 Real Browser Control |
|
🧰 29 MCP Tools | Navigation, tabs, click/type/hover/keyboard, scroll, drag & drop, DOM/text extraction, JS eval, 3 screenshot variants, CAPTCHA toolkit, system detection. |
🕒 Human-Like Input | Gaussian-distributed inter-key delays (45–75 WPM), natural mousedown↔mouseup gaps, cubic ease-out scrolling — layered as timing middleware, zero JS injection. |
🔍 Hybrid DOM + Vision | Structured DOM extraction ( |
🎯 Position Validation | Before any coordinate click: annotated screenshot with red X/Y axes crossing exactly at origin O=(x,y) + element probe, warnings ( |
🧩 CAPTCHA Toolkit | Auto-detects reCAPTCHA/hCaptcha/Turnstile/Cloudflare after navigation; image-grid solving via agent vision ( |
🗂️ Tab Management | List / switch / open / close tabs — multi-tab workflows on one real browser. |
🚨 Actionable Errors | Every failure returns structured |
📚 Self-Documenting |
|
✅ Tested | 87 unit tests (fake pages, no browser needed) + real-browser integration suite ( |
Related MCP server: selenium-mcp
🏭 Pipeline
┌──────────┐ ┌────────────┐ ┌─────────────┐ ┌──────────┐ ┌──────────┐ ┌──────────┐
│ CONNECT │ → │ ORIENT │ → │ SEE │ → │ PLAN │ → │ ACT │ → │ VERIFY │
│ check_ │ │ navigate + │ │ screenshot │ │ selector │ │ click / │ │ re-read │
│ browser │ │ wait idle │ │ get_dom │ │ or coords│ │ type │ │ state │
└──────────┘ └────────────┘ └─────────────┘ └──────────┘ └──────────┘ └──────────┘
│ │
▼ not running ▼ DOM miss
┌──────────────┐ ┌──────────────────────────┐
│ open_browser │ │ validate_position(x, y) │
│ (real profile│ │ → annotated O=(x,y) shot │
│ + CDP flag) │ │ → click_position(x, y) │
└──────────────┘ └──────────────────────────┘Tool execution flow (example browse_click):
agent call → pre-click Gaussian delay (~80ms)
→ PhantomWright Actionability Engine (visible? enabled? stable? unobscured?)
→ CDP Input.dispatchMouseEvent (trusted gesture, NOT element.click())
→ post-click pause (~150ms)
→ result JSON (+ optional verification screenshot)Auto CAPTCHA/ad-overlay scan runs after every browse_navigate / browse_wait.
🚀 Quick Start
Prerequisites
Arch Linux (dev/test platform) — kernel
7.1.5-arch1-2, KDE PlasmaPython 3.11+ — check with
python --versionA Chromium-based browser — Opera (recommended), Chrome, Chromium or Brave
An MCP client — Kilo CLI, Claude Code, or anything that speaks MCP stdio
Installation
# 1. Clone
git clone https://github.com/YOUR_USER/probrowser.git
cd probrowser
# 2. Setup (venv + deps + verify)
./setup.sh
# ...or manually:
python -m venv .venv
.venv/bin/pip install -r requirements.txtRegister with your MCP client
kilo.json (project root):
{
"mcp": {
"probrowser": {
"type": "local",
"command": ["/absolute/path/to/probrowser/.venv/bin/python", "-m", "src"],
"enabled": true,
"timeout": 120000
}
}
}Claude Code users: same server via .mcp.json. Restart the client so the 29 browse_* tools load.
First Run
# Option A — start Opera yourself with CDP enabled:
opera --remote-debugging-port=9222
# Option B — let the agent do it (real profile, cookies intact):
browse_check_browser() # → not connected?
browse_open_browser(browser="opera")Then just talk to your agent: "open YouTube and play One of These Nights" — it will connect, navigate, click, and verify playback by itself.
💻 Usage
Tool Groups
Group | Tools |
Navigation & Tabs |
|
Interaction |
|
Extraction |
|
Screenshots |
|
CAPTCHA |
|
System |
|
Meta |
|
Full parameter reference: docs/tools-reference.md or browse_help(topic="tools-reference") at runtime.
Example Flow
→ browse_check_browser()
← { connected: false } # nothing on :9222 yet
→ browse_open_browser(browser="opera")
← { launched: true, profile: "~/.config/opera", cdp_url: "...:9222" }
→ browse_navigate(url="https://youtube.com/...")
← { success: true, title: "..." } # auto CAPTCHA scan ran here
→ browse_get_dom(search="One of These Nights")
← { count: 10, elements: [{type: "link", selector: "a[aria-label=...]"}] }
→ browse_click(selector="a[aria-label=...]")
← { success: true }
→ browse_eval(expression="() => {const v=document.querySelector('video'); return {paused: v.paused, time: v.currentTime}}")
← { paused: false, time: 3.1 } # verified: audio is playing 🎵Standalone Server
PROBROWSER_CDP_URL=http://localhost:9222 .venv/bin/python -m src⚙️ Configuration
All runtime configuration is environment-variable driven:
Variable | Default | Description |
|
| CDP endpoint to attach on startup |
|
| Hard cap per tool call (shared event loop protection) |
|
| Master switch for CAPTCHA subsystem |
|
| Auto-scan for CAPTCHAs/ads after navigation |
| — | 2Captcha API key (text-challenge auto-solve; grid solving is agent-vision based) |
|
| Max wait for API-assisted solve |
MCP client-side settings (timeout, enabled) live in kilo.json — kept out of git on purpose (see .gitignore).
🏛️ Architecture
┌──────────────────────────────────────────────────────────┐
│ AI Agent (Kilo / Claude Code) │
│ plan → browse_* tool call → evaluate → repeat │
└───────────────────────┬──────────────────────────────────┘
│ MCP Protocol (stdio, JSON-RPC)
▼
┌──────────────────────────────────────────────────────────┐
│ ProBrowser MCP Server (Python) │
│ tool registry (29) → action coordinator → humanize.py │
│ (Gaussian delays · WPM typing · scroll easing) │
│ analyzer/: dom_parser · hybrid_strategy · captcha │
└───────────────────────┬──────────────────────────────────┘
│ CDP — Input.dispatch* events only
▼
┌──────────────────────────────────────────────────────────┐
│ User's Real Browser (Opera/Chrome, port 9222) │
│ sessions · cookies · logins preserved │
└──────────────────────────────────────────────────────────┘Key design decisions
Decision | Rationale |
All Python | PhantomWright + |
PhantomWright over OS input | No ydotool/xdotool/KWin hacks; CDP-level events work under Wayland and never block user input |
CDP input over JS injection |
|
| The user's session IS the product — no re-login, no lost cookies |
Agent owns vision | Server extracts geometry/screenshots; the agent's own vision model decides coordinates |
📁 Project Structure
probrowser/
├── main entry
│ ├── src/__main__.py # python -m src → stdio MCP loop
│ └── src/server.py # registry (29 tools) + dispatch + timeouts + captcha hooks
├── core
│ ├── src/browser/connection.py # connect_over_cdp, session persistence, page recovery
│ ├── src/browser/tab_manager.py # tab discovery / switching
│ ├── src/humanize.py # Gaussian timing middleware
│ ├── src/errors.py # classify_exception → structured error codes
│ ├── src/config.py # env-driven configuration
│ └── src/logging.py # per-action latency/success logging
├── tools (src/tools/, 29 modules)
│ ├── navigate · wait · list_tabs · switch_tab · open_tab · close_tab
│ ├── click · validate_position · click_position · type · hover · keyboard
│ ├── scroll · drag_drop
│ ├── get_dom · find · get_text · eval_js
│ ├── screenshot · screenshot_viewport · screenshot_save
│ ├── check_captcha · captcha_grid · solve_captcha
│ └── detect_browsers · check_browser · open_browser · help · list_tools
├── analyzer (src/analyzer/)
│ ├── dom_parser.py # DOM → simplified JSON (interactive + visible only)
│ ├── hybrid_strategy.py # DOM-first, vision fallback
│ └── captcha.py # CAPTCHA/ad-overlay detection
├── captcha (src/captcha/)
│ ├── grid.py # grid geometry + cropped screenshot extraction
│ └── solver.py # tile clicking + verify flow
├── docs/ # 11 topics served via browse_help()
├── tests/ # 87 unit tests + integration suite
├── AGENTS.md / CLAUDE.md # operating guide injected into agents
└── dev-phase-mcp-server.md # dev-phase principles🛡️ Anti-Detection
Browser Evasion Stack
Layer | Implementation | Detail |
Engine | PhantomWright (patched Playwright driver) |
|
Patches | Stealth patches before any page JS runs |
|
Input | CDP | Not |
Session | Real user profile + real IP + extensions | Nothing about the fingerprint changes |
Timing | Humanize middleware on every action | Gaussian delays, natural WPM, eased scroll |
What still works
Your logins, cookies, extension state, IP reputation, canvas/WebGL/audio fingerprints — everything stays native because the browser is yours.
Limitations
Aggressive anti-bot services (Cloudflare Turnstile, hCaptcha behavioral analysis) may still trip on IP reputation. Fallback path: screenshots + validate_position → click_position, plus the CAPTCHA toolkit.
🧪 Testing
# Unit suite — fake pages, no browser required (87 tests)
.venv/bin/python -m pytest tests/ -q
# Integration suite — needs Opera running with CDP
.venv/bin/python -m pytest tests/test_integration.py -m integrationTính năng
Tính năng | Mô tả |
🌐 Điều khiển trình duyệt thật | Gắn vào Opera/Chrome đang chạy qua CDP — giữ nguyên session, cookie, đăng nhập |
🧰 29 tool MCP | Điều hướng, tab, click/gõ/hover/bàn phím, scroll, kéo-thả, trích xuất DOM/text, JS, ảnh chụp, CAPTCHA |
🕒 Giả lập người thật | Delay Gauss giữa các phím (45–75 WPM), nhịp click tự nhiên, scroll ease-out |
🔍 Hybrid DOM + Vision | Ưu tiên DOM có cấu trúc; thiếu mới chuyển sang ảnh chụp + tọa độ |
🎯 Xác thực tọa độ | Ảnh annotate trục X/Y cắt nhau đúng tại O=(x,y) trước khi click tọa độ |
🧩 Bộ xử lý CAPTCHA | Tự phát hiện sau điều hướng; giải grid bằng vision của agent; auto-solve qua 2Captcha |
🚨 Lỗi có hành động | Mỗi lỗi trả về |
✅ Được kiểm thử | 87 test unit + bộ integration trên browser thật |
Cài đặt nhanh
git clone https://github.com/YOUR_USER/probrowser.git && cd probrowser
./setup.sh # venv + dependencies + verify
opera --remote-debugging-port=9222 # hoặc để agent tự mởKhai báo server trong kilo.json (xem Quick Start), khởi động lại client, xong.
Made with 🎵 on Arch Linux · MIT License
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseBqualityFmaintenanceEnables AI agents to directly control your real Chrome browser with full context including login sessions, cookies, and open tabs. It provides tools for page scanning, JavaScript execution, CDP control, screenshots, and physical mouse/keyboard input for authentic browser automation.20239MIT
- AlicenseBqualityAmaintenanceEnables browser automation through the Model Context Protocol, allowing AI agents to control Chrome, Firefox, or Edge for tasks like navigation, clicking, typing, and screenshots.3948MIT

Browseagent MCPofficial
AlicenseAqualityDmaintenanceEnables AI agents to control web browsers through the Model Context Protocol, supporting navigation, clicking, typing, and screenshots.12101MIT- AlicenseNot gradedqualityCmaintenanceEnables AI agents to create and control real, isolated browser profiles with engine-level fingerprinting and per-profile proxies, providing antidetect browsing capabilities through a Model Context Protocol interface.MIT
Related MCP Connectors
Reliable web access for AI agents: smart HTTP, rotating proxies, and full-browser rendering.
Live browser debugging for AI assistants — DOM, console, network via MCP.
A paid remote MCP for AI agent browser approval MCP, built to return verdicts, receipts, usage logs,
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/momadhuynh04/probrowser'
If you have feedback or need assistance with the MCP directory API, please join our Discord server