Stealth Cli

🦊 stealth-cli Anti-detection browser CLI powered by Camoufox Browse, search, scrape, and crawl the web with C++ level fingerprint spoofing.Bypasses Cloudflare, Google, and most bot detection systems.

---

Why

Headless Chrome gets fingerprinted. Playwright gets blocked. Stealth plugins become the fingerprint.

stealth-cli uses Camoufox — a Firefox fork that patches fingerprint generation at the C++ implementation level. No JavaScript shims, no wrappers, no tells. The browser reports spoofed values natively.

Wrap that in a developer-friendly CLI with 16 commands, and you get a tool that both humans and AI agents can use.

How it compares

| Approach | Detection Risk | Why | |----------|:---:|------| | Puppeteer + stealth plugin | 🔴 High | JS-level patches are detectable; Chromium TLS fingerprint is a giveaway | | Playwright + custom args | 🟡 Medium | Better, but navigator.webdriver workarounds are fragile | | undetected-chromedriver | 🟡 Medium | Patches Chrome binary, but still Chromium-based fingerprint | | stealth-cli (Camoufox) | 🟢 Low | Firefox fork with C++ native spoofing; no JS shims to detect |

Install

npm install -g stealth-cli

> First run downloads the Camoufox browser binary (~300MB). Subsequent runs are instant.

Install from source

git clone https://github.com/Youhai020616/stealth-cli.git
cd stealth-cli
npm install        # Installs deps + downloads Camoufox browser
npm link           # Makes 'stealth' command globally available

Quick Start

stealth browse https://example.com                          # Visit a page
stealth screenshot https://example.com -o page.png          # Screenshot
stealth search google "best coffee beans" -f json           # Search Google
stealth extract https://example.com --links                 # Extract links
stealth crawl https://example.com -d 2 -l 50 -o out.jsonl  # Crawl
stealth interactive --url https://example.com               # REPL mode

How Anti-Detection Works

stealth-cli (Node.js CLI)
  └── camoufox-js (npm binding)
       └── Camoufox (C++ Firefox fork)
            └── Fingerprint spoofing at the native level

| Fingerprint Vector | Approach | |---|---| | navigator.hardwareConcurrency | Spoofed in C++ | | navigator.webdriver | Always false | | WebGL renderer / vendor | Spoofed in C++ | | AudioContext fingerprint | Spoofed in C++ | | Canvas fingerprint | Spoofed in C++ | | Screen geometry | Spoofed in C++ | | WebRTC leak | Built-in protection | | TLS fingerprint | Firefox native (not Chromium) |

No JavaScript shims. No detectable wrappers. The browser natively reports spoofed values.

Commands

Core (11)

| Command | Description | |---------|-------------| | browse | Visit URL, print content (text/json/snapshot/markdown) | | screenshot | Screenshot (PNG/JPEG, full page, custom viewport) | | search | Search 14 engines with anti-detection | | extract | Extract links, images, meta, headings, CSS selectors | | crawl | Recursive crawling with depth/filter/delay control | | interactive | REPL with 20+ commands (goto, click, type, eval...) | | pdf | Save page as PDF | | batch | Batch process URLs from file | | monitor | Watch for changes (price drops, stock alerts) | | fingerprint | Check fingerprint & anti-detection status | | serve | HTTP API server with Bearer token auth |

Management (5)

| Command | Description | |---------|-------------| | daemon start/stop/status | Background browser (~1s vs ~6s startup) | | profile create/list/delete | Persistent identities (8 presets + random) | | proxy add/list/test | Proxy pool with rotation & health checking | | config set/get/list/reset | Global defaults (~/.stealth/config.json) | | mcp | MCP server for Claude Desktop / Cursor |

---

Usage Examples

Browse

stealth browse https://example.com                       # Text output
stealth browse https://example.com -f json               # JSON with metadata
stealth browse https://example.com -f snapshot            # Accessibility tree
stealth browse https://example.com --humanize             # Human behavior simulation
stealth browse https://example.com --profile us-desktop   # Saved identity
stealth browse https://example.com --proxy http://proxy:8080

Search

Google uses a special anti-detection flow: visits homepage → types query with human-like timing → presses Enter.

stealth search google "web scraping tools" -f json       # Auto-humanized
stealth search google "query" -f json --warmup           # Visit random site first
stealth search duckduckgo "privacy browser" -f json
stealth search youtube "tutorial" -f json                # Video metadata
stealth search github "camoufox" -f json                 # Repo results

14 engines: google · bing · duckduckgo · youtube · github · amazon · reddit · wikipedia · twitter · linkedin · tiktok · stackoverflow · npmjs · yelp

Extract

stealth extract https://example.com --links              # All links
stealth extract https://example.com --images             # All images
stealth extract https://example.com --meta               # Title, description, OG
stealth extract https://example.com --headers            # h1-h6 headings
stealth extract https://example.com -s ".price" --all    # CSS selector
stealth extract https://example.com -s "a" -a "href" --all  # Attributes

Crawl

stealth crawl https://example.com -d 2 -l 50            # Depth 2, max 50 pages
stealth crawl https://example.com -o results.jsonl       # Save to file
stealth crawl https://example.com --include "blog"       # URL regex filter
stealth crawl https://example.com --delay 2000 --humanize
stealth crawl https://example.com --proxy-rotate         # Rotate per page

Monitor

stealth monitor https://shop.com/item -s ".price" -i 60  # Check every 60s
stealth monitor https://shop.com/item --contains "In Stock"
stealth monitor https://example.com --not-contains "Sold Out"

Interactive REPL

stealth interactive --url https://example.com

stealth> goto https://google.com
stealth> click "button.submit"
stealth> hclick "a.link"              # Human-like click (bezier curve)
stealth> type "input[name=q]" hello
stealth> htype "input[name=q]" hello  # Human-like typing (variable speed)
stealth> scroll down 3
stealth> text / snapshot / links      # Inspect page
stealth> screenshot page.png
stealth> eval document.title
stealth> exit

---

Key Features

Daemon Mode

Keep a browser alive in the background for instant command execution.

stealth daemon start                   # Start background browser
stealth browse https://example.com     # ~1.2s (vs ~6s cold start)
stealth daemon stop                    # Shut down (auto-stops after 5min idle)

Browser Profiles

Persistent identities with unique fingerprints. Cookies auto-save between sessions.

stealth profile create work --preset us-desktop
stealth profile create rand1 --random

stealth browse https://example.com --profile work
# → Fingerprint: Windows, en-US, America/New_York

8 presets: us-desktop · us-laptop · uk-desktop · de-desktop · jp-desktop · cn-desktop · mobile-ios · mobile-android

Session Persistence

stealth browse https://example.com --session my-task --profile work
# → Cookies + URL + history saved

stealth browse https://other.com --session my-task
# → Auto-restores cookies and last URL

Proxy Pool

stealth proxy add http://proxy1:8080 --label us --region US
stealth proxy add http://proxy2:8080 --label eu --region EU
stealth proxy test                                   # Health check
stealth browse https://example.com --proxy-rotate    # Auto-rotate

GeoIP: Camoufox auto-matches locale, timezone, and geolocation to proxy exit IP.

Humanize Mode

Simulate human behavior patterns to avoid behavioral detection:

stealth browse https://example.com --humanize
stealth search google "query" --humanize --warmup

• Gaussian-distributed delays between actions
• Bézier-curve mouse movements
• Variable typing speed
• Random scroll patterns

Global Configuration

Set defaults so you don't repeat flags:

stealth config set locale zh-CN
stealth config set humanize true
stealth config set retries 3
stealth config set format json
stealth config list

All core commands respect global config. CLI flags always override.

Pipe-Friendly

stdout = data, stderr = status. Compose with Unix tools:

stealth browse https://api.example.com -f json | jq '.title'
stealth search google "query" -f json | jq '.results[].url'
stealth extract https://example.com --links -f json | jq '.data[].url'

---

Integrations

HTTP API Server

Run stealth-cli as a service for programmatic access:

stealth serve --port 9377
# → Prints auto-generated API token on startup

curl localhost:9377/health                                          # No auth

curl -X POST localhost:9377/tabs \
  -H 'Authorization: Bearer ' \
  -H 'Content-Type: application/json' \
  -d '{"url":"https://example.com"}'                               # Create tab

curl localhost:9377/tabs/tab-1/text -H 'Authorization: Bearer '  # Get text

Options: --token · --no-auth (localhost only) · --host 0.0.0.0

Endpoints: /health · /tabs (POST/GET) · /tabs/:id/navigate · /tabs/:id/text · /tabs/:id/snapshot · /tabs/:id/screenshot · /tabs/:id/click · /tabs/:id/type · /tabs/:id/evaluate · /tabs/:id (DELETE) · /shutdown

MCP Server (Claude Desktop / Cursor)

Add stealth browsing capabilities to your AI coding assistant:

{
  "mcpServers": {
    "stealth": {
      "command": "stealth",
      "args": ["mcp"]
    }
  }
}

7 tools: stealth_browse · stealth_screenshot · stealth_search · stealth_extract · stealth_click · stealth_type · stealth_evaluate

SDK (Library Mode)

Use stealth-cli programmatically in your Node.js applications:

import { launchBrowser, closeBrowser, navigate, getTextContent } from 'stealth-cli';

const handle = await launchBrowser({ profile: 'us-desktop', humanize: true });
await navigate(handle, 'https://example.com');
const text = await getTextContent(handle);
await closeBrowser(handle);

---

Error Handling

stealth-cli provides structured errors with contextual hints:

✖ Failed to navigate to https://example.com
  Hint: Page load timed out. Try --wait  or --retries 

✖ Google detected automation and blocked the request
  Hint: Try: --proxy , --warmup, --humanize, or use a different engine

✖ Profile "work" not found
  Hint: Create with: stealth profile create work

Exit codes: 0 success · 3 browser launch · 4 navigation/blocked · 5 extraction · 7 proxy · 8 profile

Common Options

Available on all core commands:

| Option | Description | |--------|-------------| | --proxy | Use proxy server | | --proxy-rotate | Rotate through proxy pool | | --profile | Use saved browser identity | | --session | Persist/restore browsing session | | --cookies | Import Netscape-format cookie file | | --humanize | Simulate human behavior | | --retries | Max retries on failure | | --no-headless | Show browser window | | -f, --format | Output format: text, json, jsonl, snapshot, markdown |

Project Stats

Version:     0.6.1
Commands:    16
Tests:       151 passing (18 test files)
Source:      5,900 lines (39 source files)
Extractors:  6 (Google, Bing, DuckDuckGo, YouTube, GitHub, generic)
Presets:     8 browser profiles
Engine:      Camoufox (C++ Firefox fork)
License:     MIT

Contributing

Contributions welcome! Some areas where help is appreciated:

• New extractors — Add structured parsing for more search engines/sites
• Profile presets — More realistic browser fingerprint configurations
• Bug reports — Especially sites that still detect stealth-cli
• Documentation — Usage guides, tutorials, examples

Please open an issue to discuss larger changes before submitting a PR.

Star History

🔗 Ecosystem

| Project | Description | |---------|-------------| | AgentMind | Self-learning memory system for AI agents | | stealth-x | Anti-detection X/Twitter automation (built on stealth-cli) | | dy-cli | Douyin/TikTok CLI | | xiaohongshu | Xiaohongshu automation | | freepost | AI social media management |

Acknowledgments

• Camoufox — The Firefox fork that makes this possible
• Playwright — Browser automation framework

License

[MIT](./LICENSE)

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: Youhai020616
• Source: Youhai020616/stealth-cli
• License: MIT
• Homepage: https://www.npmjs.com/package/stealth-cli

Install and usage instructions live in the source repository linked above.