PlugWiki
camofox-browser logo

Camofox Browser MCP Server: Setup for Claude Code, Cursor and Other Apps

OfficialLocal
Getnpm@askjo/camofox-browser-mcpjo-inc/camofox-browser

Lets Claude, Cursor, Codex and other assistants browse the web through the Camoufox stealth browser, with clicks, typing and screenshots.

Camofox Browser is a stealth browser built to get past bot detection, and this server lets your assistant drive it. The server is only a go-between. You must run the Camofox Browser server on your machine first, which downloads about 300 MB of browser files, or point the MCP server at one already running elsewhere. The same project makes both pieces, and the project's own repository holds this one.

Good for

  • People who need an assistant to read sites that block normal automation
  • Developers who already run the Camofox Browser server
  • Claude Code, Cursor and Codex users who want a signed-in browser session

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install camofox-browser MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the camofox-browser MCP server to Claude Code. Run this command:
    
    claude mcp add camofox-browser -- npx -y @askjo/camofox-browser-mcp
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js, Camofox Browser server running.

Start the Camofox Browser server before you add this: clone the project, install it, and start it so it listens on port 9377. The README also covers a lighter install of only this adapter. The README shows a command named camofox-browser-mcp, and says the npx form works anywhere a command is expected. Add the optional keys to the env section if you use them.

Built from the package data we hold. Not yet tested by us.

Tools

  • Opens a web page in a new stealth browser tab

    Opens a new tab in the Camoufox anti-detection browser at the address you give and returns a tab ID for later steps. The tool description tells the assistant to prefer it over a normal browser for sites with bot detection.

    Try: “Open linkedin.com/jobs in a new browser tab.”

    Network · camofox_create_tab

  • Reads the current page as text with numbered elements and a screenshot

    Returns an accessibility snapshot of the page where each clickable element gets a reference like e1, plus a screenshot. Long pages are cut off and can be fetched in further pages.

    Try: “Read what is on the page in tab 1.”

    Network · camofox_snapshot

  • Sends a tab to a web address or runs a search shortcut

    Moves an open tab to a new address, or runs a search macro such as a Google or YouTube search with your query.

    Try: “In this tab, search Google for "best trail running shoes".”

    Network · camofox_navigate

  • Clicks an element on the page

    Clicks an element chosen by its reference from the snapshot or by a CSS selector.

    Try: “Click the Sign in button.”

    Write · camofox_click

  • Types text into a field, optionally pressing Enter

    Types text into a page element chosen by reference or CSS selector. It can press Enter afterwards to submit.

    Try: “Type "data analyst" in the search box and press Enter.”

    Write · camofox_type

  • Scrolls the page by a number of pixels

    Scrolls the page. The README says this does nothing on lazy-loading pages, where the evaluate tool works better.

    Try: “Scroll down 800 pixels.”

    Read · camofox_scroll

  • Takes a screenshot of the page

    Returns a standalone screenshot of the current page in a tab.

    Try: “Take a screenshot of this page.”

    Read · camofox_screenshot

  • Runs JavaScript inside the page and returns the result

    Runs a JavaScript expression in the page of a tab. Use it to read page data, call the site's own interfaces or scroll on pages where scrolling fails.

    Try: “Run a script on this page that returns every link address.”

    Runs code · camofox_evaluate

  • Lists the browser tabs open in this session

    Shows every tab currently open for this session so the assistant can pick one.

    Try: “Which tabs are open right now?”

    Read · camofox_list_tabs

  • Closes a browser tab

    Closes one tab in the Camoufox browser.

    Try: “Close tab 2.”

    Write · camofox_close_tab

  • Loads a cookie file so the browser starts out signed in to a site

    Imports cookies from a Netscape-format cookie file into the session so the browser can reach sites such as LinkedIn without an interactive login. The file must sit in the REST server's cookies folder, and the server needs an API key for this.

    Try: “Import my saved LinkedIn cookies so you are already signed in.”

    Write · camofox_import_cookies

Read from the source code

Permissions

medium risk · 4 things to watch

Medium risk

The assistant can open any page, click, type and run JavaScript in a real browser, and it can load a cookie file so the browser is signed in as you. There is no read-only mode, so only import cookies for accounts you are happy to let the assistant act in.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • The browser can click, type and submit forms

    It acts on live pages, so it can post, buy or send things if you are signed in. Watch what it does on accounts you care about. github.com

  • It can run JavaScript on any page you open

    The script tool runs inside the page, not on your computer, but it can read what the page shows and call the site's own interfaces as you. github.com

  • Cookie import signs the browser in as you

    Imported cookies let the assistant act as you on those sites. Use a throwaway or low-privilege account where you can. github.com

  • Scrolling can silently do nothing

    The README says scroll returns success on lazy-loading pages without moving the page. Ask the assistant to use the script tool there. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyNo read-only mode is documented. Click, type and script tools can change things on the pages you open.
Talks toAny website you ask it to open. The Camofox REST server (localhost:9377 by default)
Sign-in and keysNo account is needed. Optional keys let the MCP server talk to a REST server that is protected, and a separate key gates cookie import.

Questions

Do I need to run anything besides the MCP server?

Yes. The MCP server only forwards calls to a Camofox Browser server, which launches the browser and listens on port 9377 by default. Start that first, or set the MCP server to use one running elsewhere.

Is it free and does it need an API key?

It is open source under the MIT license and needs no account. Keys are optional: one if your Camofox server is gated, and one to allow cookie import on a remote server.

Does it download a browser?

The Camofox server does, about 300 MB on first run. The MCP adapter on its own needs only the MCP SDK, so that is the lightweight part.

Which apps does it work with?

The README gives setup for Claude Code, Codex, Antigravity, Cursor and opencode. Any app that runs local MCP servers should accept the same command. Use the install box above.

Can it bypass Cloudflare and other bot checks?

The project says it is built to get past bot detection and tells the assistant to prefer it for those sites. That is the maker's claim, and results will vary by site.

Does it keep me signed in between sessions?

Not by itself. Each MCP server gets its own session, and the README suggests importing a cookie file to start signed in. Cookie import needs an API key set on the Camofox server.

Is it official?

Yes, from the project itself. The adapter ships in the Camofox Browser repository and mirrors that project's own plugin tool for tool.

Information

updated Nov 2, 2026

Publisher
Official
Package
@askjo/camofox-browser-mcp
Registry
npm
Transport
stdio
Auth
None
Version
1.18.1
License
MIT
Last commit
Oct 23, 2026
Open issues
77

GitHubnpmChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 2
  1. github.com · github.com
  2. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.