Veil

v0.1.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo MCP Browser & Automation

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents anti-detection automation browser-automation cdp chrome-devtools-protocol

+4 more

mcp stealth-browser typescript web-scraping

Summary

AI summary

Updates Measured, What it does, and Agent-first across a mixed release.

Full changelog

Stealth browser automation for AI agents. Drives real Chrome over the DevTools Protocol — no Playwright, no Puppeteer, no WebDriver. Zero runtime dependencies.

What it does

Raw CDP runtime (flat sessions, never calls Runtime.enable)
Small, self-gating stealth + UA/client-hint scrub
Real-GPU WebGL via ANGLE/EGL; headful on a headless server via auto-managed Xvfb
Agent-first: accessibility-tree snapshot → integer refs (no CSS selectors), human-curved mouse + jittered typing, screenshots
MCP server (8 tools) — any MCP host drives it natively

Measured (Chrome 148, residential IP)

bot.sannysoft.com: 57/57
CreepJS (headful): 0% headless, 0% stealth
Cloudflare JS challenge + generic antibot challenge: bypassed

Not claimed yet: interactive Turnstile/reCAPTCHA, enterprise DataDome/Kasada, logged-in sessions.

Install

```bash
bun add github:acunningham-ship-it/veilbrowser

or clone + run the demo

git clone https://github.com/acunningham-ship-it/veilbrowser && cd veilbrowser
bun install && bun run examples/selftest.ts
```

Credit

The raw-CDP-without-Playwright approach was pioneered by nodriver (Python). Veil is the TypeScript- and MCP-native take.

MIT.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Veil

Get notified when new releases ship.

About Veil

All releases →