← All reviews · MCP servers

mcp-servers/browsersmoke testsmoke test Rocky's quickest test: fresh sandbox, does it install and does the README example run? Glossary

Stealth Browser MCP: the Cloudflare-bypassing browser for agents

The claim“Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances over MCPMCP Model Context Protocol: a standard plug that lets AI assistants use outside tools and data (files, browsers, databases). Glossary · Learn more”

GitHubvibheksoni/stealth-browser-mcp2.9kStars386Forks0Issues + PRsMITlicense (Apache-2.0, MIT) The rules for using the code. Apache-2.0 and MIT both allow free use, including commercial use. Glossary · Learn moreLicenseLast pushPythonLanguage

Live stats · checked

Review lives at rockytested.com · @RockyTested

⏱️ Queued. Estimated: starts , done (estimate, may move)
Rocky dressed for MCP serversTesting badge: Rocky in his lab coat

MCP serversMCP server A small program that offers tools to an AI assistant over MCP, for example "search my docs" or "open a browser". Glossary · Learn more Rocky · in the lab

With vs without

With it loadedNot tested yet

No with-skill pass count is on file.

Without itNot tested yet

No baselinebaseline The normal way of doing the same job, used as the yardstick. Rocky compares every claim against a baseline on the same machine. Glossary pass count is on file.

Usefulness is a separate question from “does the repo exist.” It needs the same task run twice. Until that A/B is published, both cells stay blank.

What the test plan says

Smoke first: clone, install, import the server and count the MCP tools it registers (claims 101 tools, or a 21-tool core). The live claim, passing a Cloudflare / bot-detection check, needs a Chrome sandbox and is queued separately.

Four verdicts

One stamp is not the whole story. Works, Safe, Claims honest, and Provenance are four separate written calls. A missing call stays “not tested yet.”

WorksNOT TESTED YETDid it do the thing when Rocky ran it?

No written call is on file. This is not a pass.

SafeNOT TESTED YETSafe to install and run?

No written call is on file. This is not a pass.

Claims honestNOT TESTED YETDoes the pitch match what Rocky measured?

No written call is on file. This is not a pass.

ProvenanceNOT TESTED YETDoes the repo's history check out?

No written call is on file. This is not a pass.

Safety is a hard cap. If Safe is no, the Rocky Score cannot rise above 44 (grade F), even when the tool works. A blank Safe card means not tested yet, not safe. How the four verdicts roll up →

Claim vs what Rocky measured
Claim vs what Rocky measuredThe claim: Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances over MCP. The claim: Measuring… (measuring).THE CLAIM“Bypass Cloudflarechallenges and botchecks by automatingreal Chrome browserinstances over MCP• Source: X postvsWHAT ROCKY MEASURED⚗The claimMeasuring…Claim vs what Rocky measuredThe claim: Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances over MCP. The claim: Measuring… (measuring).THE CLAIM“Bypass Cloudflarechallenges and bot checksby automating real Chromebrowser instances over MCP• Source: X postvsWHAT ROCKY MEASURED⚗The claimMeasuring…
Claim partMeasuredResult
The claimMeasuring…measuring

What it is: An MCP server that drives a real Chrome browser (via nodriver + CDP) to get past Cloudflare and bot checks, with a claimed 101 tools. Rocky first confirms it installs and exposes its tools, then will test the bypass claim against public detectors. Claim source →

Results coming. Here’s what Rocky will measure

  • Does it install and expose its MCP tools
  • How many tools are really there vs the claimed 101/21
  • Does it pass public bot-detection checks (claim run, queued)

Smoke first: clone, install, import the server and count the MCP tools it registers (claims 101 tools, or a 21-tool core). The live claim, passing a Cloudflare / bot-detection check, needs a Chrome sandbox and is queued separately.

Sneak peek

Claim ledger

Every distinct claim in the pitch gets a row: what was said, what the command said back. 1 claim on the ledger: 1 not measured. No separate ledger file yet, so these rows are the review's claim list only. “Not tested” means that claim has no measurement.

🔍 Coverage: Not stated yet. Rocky only lists the parts a run actually checked.

⚗️ Unproven usefulness. Counting and parsing can settle what the repo claims. It can't settle whether the thing actually helps — that takes an A/B run (same task with and without it), which hasn't happened yet.

Rocky's take

Not written yet.

Rocky's take is drafted only from measured results: what the tool is good for, and where it will fail you. Until those results exist, this stays blank. Nothing here is guessed.

Where this repo comes from

Not checked yet.

Provenance is age, authors, commitcommit One saved version of a repo's code. Rocky pins the exact commit so anyone can rerun the same code. Glossary · Learn more bursts, and where the README sends you. It is published only from commands Rocky ran. Nothing is guessed, so this section stays blank until that file exists.

Score

Scorepending

Not scored yet. A Rocky Score is a rollup of measured subscores only. This review does not have one, and no grade is filled in to hold the place.

Rerun it yourself

📦 When the test is done, the exact scripts, raw results and a copy-paste prompt for your own AI agentAI agent An AI that takes actions in steps (runs commands, edits files, browses) instead of only chatting. Glossary · Learn more will appear here.

Repo & thanks

Where the claim was posted

Tom Dörr
@tom_doerr ·
The claim Rocky tested

Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances with Stealth Browser MCP. https://github.com/vibheksoni/stealth-browser-mcp

💬 8🔁 154❤️ 1.7K📊 76K🔖 2.1K

Counts as of (Rocky's last check)

Open on X →

Where else this repo is talked about

On X: 1 posts linking the repo

Posts from to , in several languages. Found with X search for links to the repo; more may exist. Oldest first:

  • Earliest we found @tom_doerr Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances with Stealth Browser MCP. https://github.com/vibheksoni/stealth-browser-mcp❤️ 1.7K · 🔁 154 · 📊 76K open
All 1 posts, oldest first
  • Earliest we found @tom_doerr Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances with Stealth Browser MCP. https://github.com/vibheksoni/stealth-browser-mcp❤️ 1.7K · 🔁 154 · 📊 76K open

Ran it yourself?

Share your rerun

  1. Download the rerun bundle above.
  2. Run it, or paste the prompt into your AI agent.
  3. Post your results.json (a gist is fine) and reply to @RockyTested with the link.

Rocky reruns or spot-checks every submission before it counts. Verified reruns will appear here with your handle.

🏅 Helper leaderboard

No verified reruns yet. Be the first!

Street cred goes to people whose reruns Rocky verified: same bundle, raw output included, numbers re-checked. How it works

Badge & stat card

Rocky Tested: TESTING

Put the verdict badge in a README or post. It always links back to the measured results.

[![Rocky Tested: TESTING](https://rockytested.com/reviews/vibheksoni-stealth-browser-mcp/badge.svg)](https://rockytested.com/reviews/vibheksoni-stealth-browser-mcp/)
Rocky Tested stat card for Stealth Browser MCP: the Cloudflare-bypassing browser for agents

Stat card (1200×630). This is what shows up when the review is shared on X.

Machine-readable: /v1/reviews/vibheksoni-stealth-browser-mcp · Words with a dotted underline have a quick explanation: hover or tap. Glossary