---
description: Self-hosted stealth browser for AI agents. Own Firefox engine + Rust MCP runtime. See everything, act on anything, replay it all.
---

AutoKeren Ecosystem

# The Agent Browser<br>That Sees Everything

Self-hosted stealth browser for AI agents. Own Firefox engine + Rust MCP runtime. Reads pages like a human, acts by semantic understanding — and solves the captchas that block everyone else. On-device, no cloud.

[Install Now](#install) [Read the Docs →](https://autokeren.github.io/ghostfox/)

47

MCP Tools

8

Captcha Families

500/500

Identity Coherence

100%

Self-Hosted

## Built for the Way Agents Actually Work

Most agent browsers are blind. Ghostfox gives your AI semantic understanding — not just pixel coordinates or fragile CSS selectors.

🧩

### 8 Captcha Families, Solved

GeeTest slide, rotate & icon-click (custom-trained YOLO + siamese), OCR (ddddocr port), Turnstile, hCaptcha, TikTok — native MCP tools with on-device models. No paid captcha farms, no cloud. E2E-proven on production sites.

🔍

### Debug Cortex

`page_console`, `page_errors`, `page_network_*` — the DevTools trio over MCP. When a page misbehaves, your agent reads console logs, stack traces and network bodies instead of guessing.

👁️

### Semantic Vision

`page_a11y` sees every element with its role, name, and live value — piercing shadow DOM and iframes. Your agent understands the page, not just scrapes it.

🧠

### Session Awareness

`login_state` in every snapshot. Your agent detects dead sessions before acting, not after failing. No more blind automation on expired cookies.

🖱️

### Act by Understanding

`page_click_ref e38` — no selectors, no guessing. Click "Post", type into "Title", because the agent reads what's there, not what a scraper hardcoded.

🥷

### Stealth That Works

Fingerprint spoofing at the C++ level inside our own Firefox fork. Navigator, fonts, WebGL, WebRTC, timezone — all coherent, all audited. 500/500 identity coherence.

📹

### Evidence Recording

Every session writes an append-only event log, page snapshots, screenshots, and the identity used. Replay what your agent did — line by line. Enterprise-grade audit trail.

📱

### Android Personas

Touch points patched at the C++ level (dead in upstream), coarse pointer, portrait viewports. A phone identity that reads like a phone — because it is one.

🦀

### Rust-Native Runtime

Single binary. Speaks Firefox's Juggler protocol directly. Zero Python, zero Node at runtime. `pip install ghostfox` or `npx ghostfox` — your choice.

🔓

### You Own Everything

Engine fork + runtime — both yours, both open source. Your agent's cookies and identities never touch a third-party cloud. Self-hosted sovereignty.

⏱️

### Smart Waiting

`page_wait_for` replaces sleep-guessing. Your agent waits for what matters — a button to appear, a form to load — then acts. No more `sleep(8)`.

## See What the Agent Actually Sees

One `page_a11y` call returns the full semantic picture. No guessing, no brittle selectors, no blind automation.

```
// agent: page_a11y() returns:
{
  "login_state": "logged-in",
  "page_title": "Submit to r/SideProject",
  "elements": [
    { "ref": "e21", "role": "textbox", "name": "Title" },
    { "ref": "e8",  "role": "textbox", "name": "Post body text field" },
    { "ref": "e38", "role": "button", "name": "Post" }
  ]
}

// agent: act by ref, no selectors
page_type_ref("e21", "My launch post...")
page_type_ref("e8",  "Body text here...")
page_click_ref("e38")  // Post → done
```

## Running in 60 Seconds

One command. Any platform. No build required.

\# Install engine + runtime (Linux, macOS, Windows)  
 curl -fsSL https://raw.githubusercontent.com/autokeren/ghostfox/main/install.sh | bash  
  
\# Or via package manager  
 pip install ghostfox # Python  
 npm install ghostfox # Node.js  
  
\# Or run it containerized  
 docker run -i --rm ghcr.io/autokeren/ghostfox

Also on the official [MCP Registry](https://registry.modelcontextprotocol.io/servers/io.github.autokeren/ghostfox) — one-click add in registry-aware clients.

[Full documentation →](https://autokeren.github.io/ghostfox/)

## Why Self-Hosted Matters

Your agent's cookies, identities, and browsing data flow through someone else's cloud when you use hosted platforms. Ghostfox runs entirely on your machine.

|  | Ghostfox | Hosted (Browserbase, …) | playwright-mcp |
| --- | --- | --- | --- |
| Self-hosted | ✓ | ✗ | ✓ |
| Open source | ✓ full stack | ✗ | ✓ |
| Engine-level anti-detect | ✓ C++ | partnerships | ✗ |
| Captcha solver suite | ✓ 8 families, on-device | ✗ | ✗ |
| Debug cortex (console/errors/network) | ✓ | ✗ | ✗ |
| Semantic vision (a11y) | ✓ + login\_state | ✗ | basic |
| Evidence recording | ✓ | ✗ | ✗ |
| Runtime | Rust | — | Node |
| Android personas | ✓ | ✗ | ✗ |

## Part of the AutoKeren Ecosystem

Built by the same team that makes your coding agent. Now your browser agent too.

AutoKeren — AI Coding Agent

🦊 Ghostfox — Agent Browser

More coming…