Skip to content

Veil

v1.1.0 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents anti-detection automation browser-automation cdp chrome-devtools-protocol
+4 more
mcp stealth-browser typescript web-scraping

Affected surfaces

auth

Summary

AI summary

Added Fingerprint to present a coherent identity and related consistency features.

Full changelog

Veil still ships your real Chrome identity by default. Opt in with a Fingerprint to present one internally consistent identity instead. The rule is coherence, not spoof-count.

Added

  • Fingerprint applied as one coherent set — timezone, locale, geolocation derived together (page.applyFingerprint / Browser.launch({ fingerprint }))
  • Seeded WebGL / canvas / audio noise — deterministic per profile, not per call
  • Preset profiles (PRESETS) + Fingerprint.random(seed?)
  • MCP veil_set_fingerprint tool
  • Consistency guard so client-hint / Accept-Language values can't drift

Notes

  • Everything CDP can set is set browser-level (no JS getter to unmask); only what CDP can't reach is injected on the prototype and masked to [native code]
  • Not spoofed: navigator.oscpu (Firefox-only), WebGL-canvas toDataURL read-back; screen.colorDepth rides an injected getter
  • 134 tests pass; core stealth suite unchanged

Full changelog: CHANGELOG.md

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Veil

Get notified when new releases ship.

Sign up free

Beta — feedback welcome: [email protected]