⚡ Thunder

The human engine for AI agents.

Give any software a human body: a real browser with a real fingerprint, a mouse that trembles like a hand, keystrokes at human cadence, and a TLS handshake indistinguishable from Chrome's.

A bot that walks like a person.

Install · Watch the proof · MCP for any software

Why Thunder exists

Every anti-bot system on Earth looks for the same three tells:

1. Protocol tells — a Python scraper's TLS/HTTP-2 handshake screams "bot" before a byte of JS runs.

2. Fingerprint tells — navigator.webdriver, headless quirks, software-rendered WebGL, empty plugin arrays.

3. Behavioral tells — perfectly straight mouse paths, instant typing, zero reading pauses.

Thunder is a body for your AI that has none of them. Not patched over — absent, the way a real human's browser is.

pip install thunder-agent

import thunder

body = thunder.Body(profile="ada")          # a persistent human named Ada
await body.warmup()                         # age the session like a returning user
await body.go("https://protected-site.com")
await body.type("#email", "ada@example.com")   # typed like a person. Typos included.
await body.look("proof.png")                    # screenshot evidence
await body.rest()                              # close, keep the identity

Ada comes back tomorrow with the same cookies, same screen, same GPU string, same timezone. The site sees a returning regular.

Related MCP server: Real Browser MCP

📦 Install in 30 seconds

pip install thunder-agent

Works on Linux, macOS, Windows. Real-Chrome engine auto-detected; falls back to bundled Chromium.

thunder demo        # watch it browse like a human, right now
thunder ghost https://nowsecure.nl    # TLS-level fetch that passes the gate

⚡ The five layers

Verified live: bot.sannysoft.com under Thunder — WebDriver missing (passed) · WebDriver Advanced passed · Chrome present (passed) · PluginArray passed — 4 passed, 0 failed with headed real Chrome. Ghost pulls a 200 from a Cloudflare gate that 403s plain Python, same minute.

🔌 MCP: give ANY software a human body

Run the full Thunder app anywhere — one command, no account needed:

pip install thunder-agent[app]
thunder app

Thunder speaks: the Mouth gives it a real voice — Piper TTS as the primary offline engine (matured male voice) and Kokoro-82M for premium-quality narration, with edge-tts (natural male Christopher voice) as the online fallback and the default on small hosted instances where local engines would exhaust memory. During any mission you can hear Thunder narrate each step as it works, and the 🎙️ button lets you speak your mission instead of typing it.

The Thunder app is a desktop-grade web control room: mission control, a live monitor streaming real Chrome as it works, Autopilot (the Brain — StewMind 1.7b, falling back to Groq and Pollinations — plans each step and Thunder executes it on camera), and Recordings: every session's frames and step log are saved automatically, so you can replay exactly how Thunder navigated and did the task. With FIREBASE_API_KEY set it gains full accounts + per-user MCP tokens + cloud history; without it, it runs in local zero-setup mode.

Hosted MCP endpoint (connector URL for Claude): https://thunder-app-s94i.onrender.com/mcp — hosted on the live Thunder App (https://thunder-app-s94i.onrender.com). The same server serves the desktop-style web app, accounts, live video and recordings. You get thunder_search, thunder_read, thunder_ghost, thunder_feel, thunder_solve, thunder_open — search, clean extraction and bot-gate-safe fetches through Chrome's exact TLS handshake, from inside Claude.

Want the full human body (stealth Chrome, mouse tremor, human typing) under MCP? Run it locally — 15 tools, full parity with the hosted endpoint plus the browser-only ones:

Thunder ships an MCP server (15 tools). Paste one config and Claude, Cursor, Cline, Windsurf — anything that speaks MCP — browses as a human:

{ "mcpServers": { "thunder": {
    "command": "pipx", "args": ["run", "thunder-agent", "thunder-mcp"] } } }

{ "mcpServers": { "thunder": {
    "command": "uvx", "args": ["--from", "thunder-agent", "thunder-mcp"] } } }

Local tools (full set): `thunder_open`, `thunder_read`, `thunder_click`, `thunder_type`, `thunder_scroll`, `thunder_look`, `thunder_ghost`, `thunder_search`, `thunder_feel`, `thunder_captcha`, `thunder_challenge`, `thunder_human_read`, `thunder_identity`, `thunder_think`, `thunder_rest`. Hosted endpoint tools: `thunder_search`, `thunder_read`, `thunder_ghost`, `thunder_feel`, `thunder_solve`, `thunder_open` (guide for running the full body locally). Same core, same code — online and offline behave identically.

Tools: thunder_open · thunder_read · thunder_search · thunder_click · thunder_type · thunder_scroll · thunder_ghost · thunder_solve · thunder_feel · thunder_close — each one moves like a person, never like a script.

🚫 The blocker table — what used to stop bots, and Thunder's answer

🔒 CAPTCHAs without a subscription

from thunder.captcha import soft_solve, ocr_solve
result = await soft_solve(body.page)     # human-hand click, no keys needed

Non-interactive challenges often pass on a warmed-up session. For Turnstile/reCAPTCHA Enterprise, wire your own CapSolver or 2Captcha key — Thunder senses the challenge type and routes it.

v0.5 — ChallengeResolver, Thunder's own bypass system (no external deps):

from thunder.captcha import ChallengeResolver
verdict = await ChallengeResolver().resolve(body.page, body=body)
# {'solved': True, 'kind': 'turnstile', 'how': 'human-timed checkbox click'}

Detects the challenge type — Turnstile, reCAPTCHA v2, hCaptcha, Amazon's text captcha, Cloudflare interstitials — and runs the built-in counter: hand-timed checkbox clicks, patience for interstitials, local OCR for Amazon (retrying like a person squinting). No paid keys, no subscriptions.

🫆 Wear YOUR OWN fingerprint

The headline feature of v0.5. Open https://browserleaks.com in your normal browser, copy your values, and Thunder wears your machine's ghost — same UA, GPU strings, screen, cores, RAM, timezone, languages:

from thunder.fingerprint import Skin
from thunder.body import Body

me = Skin.imitate({
    "user agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...",
    "gpu renderer": "ANGLE (Apple, ANGLE Metal Renderer: Apple M2, ...)",
    "timezone": "Europe/London", "screen": "2560x1440",
})
body = Body(skin=me)            # your machine's ghost

Or from the terminal:

thunder identity --out my.json        # export the live fingerprint
thunder identity --imitate my.json    # wear it and verify live

Partial data is fine — anything missing stays Thunder-consistent. An imitated skin is mutually consistent: your Mac UA will never claim a Windows GPU.

📖 Reads like a human too

await body.read_like_human(seconds=15)   # burst-scroll, reading pauses,
                                         # idle drift, re-reads

Behavioral ML scores dwell patterns. Thunder gives pages a genuine reading signature — pauses at paragraph speed, hands that drift while "reading", occasional scroll-backs.

🧠 Pair with any mind

Thunder is the body; bring any brain. Works with stewmind, Ollama, LM Studio, vLLM, OpenAI-compatible APIs, or fully offline transformers.

from thunder.mind import Mind
mind = Mind(provider="ollama", model="llama3")
plan = await mind.think("find the pricing page and extract the tiers", body)

🧪 Tested, not promised

git clone https://github.com/emmanuelerogian723-alt/thunder
cd thunder && pip install -e ".[dev]" && pytest

Stealth regression suite: webdriver erased + scan-invisible · genuine PluginArray · headless pack · WebGL skin-consistency · proxy rotation. Each one fails loudly if a future commit breaks the human illusion.

⚖️ The honest limits (why people trust Thunder)

• No tool on Earth is "undetectable." Anyone selling that is lying to you.

• Cloud IPs still look like clouds — pair Thunder with a residential proxy for the hardest targets.

• Google-scale behavioral ML scores the whole session. Thunder's warmup + hand give you a real chance; it's not a magic key.

• Use Thunder only where you're authorized. Your accounts, your tests, your sites. That's the license, and it's the line.

MIT licensed. Built in the open — every claim on this page has a script in tests/ or a screenshot in proofs/.

Watch Thunder beat the bot-detection gauntlet, live:

https://emmanuelerogian723-alt.github.io/thunder/

⭐ If this saved you a month of anti-detect work, star the repo — it helps others find it.

Thunder — built so software can finally act human. 🌩️