An MCP server that lets AI agents drive a real browser past bot checks

What it does Stealth Browser MCP is a FastMCP server that exposes a real Chrome-family browser to AI agents through nearly a hundred structured tools. It sits on top of nodriver and the Chrome DevTools Protocol, letting an agent navigate pages, execute JavaScript, inspect network traffic, and modify requests via Python hooks. The whole thing is designed to run locally as a trusted stdio service, though it can be exposed over HTTP if you enjoy living dangerously.

The interesting bit The project treats the browser less like a dumb renderer and more like an instrumented sandbox. Agents can clone UI elements pixel-perfectly via CDP, intercept and mutate network flows with dynamically generated hooks, and even upload local files from allowlisted directories. It is essentially a very thick, opinionated layer of glue between a headful browser and an LLM.

Key highlights

• 97 tools across 11 sections, loadable in full, a minimal 20-tool core, or custom subsets.
• Anti-bot resistance is explicitly qualified: it has passed Cloudflare and Queue-it challenges in testing, but the README warns that results vary by site, region, and detector version.
• A dynamic hook system lets agents intercept, block, redirect, or modify requests and responses.
• Pixel-accurate element cloning extracts CSS, DOM structure, events, animations, and assets.
• Includes an agent skill to teach LLMs the recommended tool order and cleanup rules.

Caveats

• Anti-bot bypass is not guaranteed; the README itself notes success depends heavily on the target site and detector version.
• The server exposes extensive local primitives—CDP execution, cookie access, file uploads, and JS injection—so the authors strongly recommend local stdio transport and warn against exposing unauthenticated HTTP to the internet.
• One install path is labeled experimental, and the project carries a sponsored-section disclaimer for a proxy vendor.

Verdict Worth a look if you are building an MCP-compatible agent that needs to scrape, automate, or inspect sites that laugh at typical headless stacks. Skip it if you just need simple static-page scraping or if handing an LLM 97 browser-control tools feels like overkill.