👻

Wraith

The identity-borrowing stealth browser for autonomous agents. Don't beat reputation defenses — borrow a warmed identity.

MIT   open source  ·  Camoufox + Playwright  ·  MCP-native

Why borrowing, not solving

reCAPTCHA-v3 has no solver — it is a reputation score. A fresh automated profile scores like a bot no matter how good the stealth. So Wraith reads a warmed, already-authenticated session out of a real browser profile and navigates as that trusted user. The reputation comes along for free.

What it does

🎭

Stealth engine

Camoufox (Firefox-engine) primary, patched-Chromium fallback. Sidesteps the Chrome-specific detection cluster entirely.

🛡️

WAAP challenge clearing

Passes JS interstitials and fingerprints 12+ vendors: Cloudflare, Akamai, DataDome, Kasada, Imperva, Reblaze/Link11, and more.

🔑

Identity borrowing

Inject warmed cookies from a real Firefox / Zen / Chrome profile to clear reputation-based defenses like reCAPTCHA-v3.

🔐

Profile sync

Move a domain-scoped login to a remote Wraith over an anonymous, end-to-end-encrypted dead-drop. No account, no inbound port; the agent never sees your password.

🧩

MCP-native

Drive it from Claude or any agent over MCP tools: navigate, snapshot, click, type, borrow, receive_profile.

No-browser fast path

Replay a captured session with a real-browser TLS + HTTP/2 fingerprint and zero browser launch. Residential proxy rotation built in.

Quick start

# install (from source)
uv add "wraith @ git+https://github.com/YogevKr/wraith"
# then fetch the stealth browser
uv run camoufox fetch
# drive it from the CLI
wraith borrow https://example.com --host example.com
wraith detect https://example.com
# or run the MCP server for your agent
wraith mcp

Sync a login to a remote Wraith over the encrypted dead-drop:

wraith profile sync   --relay https://drop.wraithbrowser.dev --from chrome --domain example.com
wraith profile receive <pairing-code> --open https://example.com/   # the remote side