Anti-DetectionStealth5 credits

stealth_mode

Bypass bot detection systems with advanced anti-detection techniques including fingerprint randomization, human behavior simulation, and stealth browser configurations.

Use Cases

Protected E-commerce Sites

Scrape product data from sites with Cloudflare, DataDome, or PerimeterX protection

Social Media Platforms

Extract public data from platforms with sophisticated bot detection

Financial Data Sites

Access market data, stock prices, and financial information from protected sources

Rate-Limited APIs

Bypass aggressive rate limiting with fingerprint rotation

Geo-Blocked Content

Access region-restricted content with residential proxy support

High-Security Testing

Test your own anti-bot systems with advanced evasion techniques

Endpoint

POST/api/v1/tools/stealth_mode

Auth Required

1 req/s on Free plan

5 credits

Parameters

Name	Type	Required	Default	Description
operation	string	Optional	configure	Stealth operation to perform: scrape, configure, enable, disable, create_context, create_page, get_stats, or cleanup. `scrape` is the one-shot path — it creates a stealth context, navigates to `url`, returns the requested `formats`, and tears the context down, all in one billed call. The create_context → create_page → cleanup sequence remains for multi-step work that has to reuse a context. Example: create_context
stealthConfig	object	Optional	-	Fine-grained stealth options. Keys: level (basic \| medium \| advanced, default medium), randomizeFingerprint, hideWebDriver, blockWebRTC, spoofTimezone, randomizeHeaders, useRandomUserAgent, simulateHumanBehavior (all booleans, default true), customUserAgent, customViewport ({ width 800-1920, height 600-1080 }), locale (default "en-US"), and timezone. Example: {"level": "advanced", "blockWebRTC": true}
engine	string	Optional	playwright	Browser engine: "playwright" (default) or "camoufox" (Firefox-based, stronger anti-detection; available only where installed on the backend). Example: camoufox
contextId	string	Optional	-	Browser context ID returned by a create_context call. Pass it to create_page to open a page in that stealth context. Example: ctx_ab12cd34ef56
urlToTest	string	Optional	-	URL to navigate to when creating a page with create_page. Example: https://protected-site.com
url	string	Optional	-	URL to scrape. Required for `operation: "scrape"` and ignored by the other operations, which take `urlToTest` instead. Example: https://protected-site.com/product/42
formats	array	Optional	["markdown"]	Formats `operation: "scrape"` returns: `markdown`, `html`, `text`, `links`, `metadata`, or `screenshot`. A screenshot comes back as a `crawlforge://screenshot/{id}` resource URI rather than inline base64, and this REST endpoint passes that URI through without resolving it — so for now `screenshot` is usable only from the CrawlForge MCP server, which can read the resource. Example: ["markdown", "links"]
wait_for	number	Optional	-	Extra wait after page load, in milliseconds (0-30000). Use it for content that renders after DOMContentLoaded — a stealth run already pauses for human-like delays, so start small. Example: 2000
verbose	boolean	Optional	false	Return the full generated fingerprint from create_context instead of a summary. Useful when debugging why a target still detects the browser. Example: false
respect_robots	boolean	Optional	true	Respect the target site's robots.txt. Omit it and the compliant default (`true`) applies: a URL disallowed for `CrawlForge` is refused before any browser is launched and this endpoint charges nothing for it, and every navigation is checked the same way. The rule is matched against the `CrawlForge` product token even though the stealth browser presents a randomized User-Agent, so a site owner's `User-agent: CrawlForge` directive binds stealth traffic too. Set it to `false` only for a target you have your own agreement with — the response then carries a `warnings` entry and the override is recorded against your API key. Example: true

Operations and what they cost

5 credits buy browser work; the bookkeeping operations cost 1 credit each. A one-call scrape is therefore 5 credits, where the create_context → create_page → cleanup route costs 11.

scrape — 5 credits

One-shot: creates a stealth context, navigates to url, returns the requested formats with the page title and final URL, and tears the context down. Start here.

create_context — 5 credits

Opens a reusable stealth context and returns its contextId. Use it when several pages must share one fingerprint and cookie jar.

create_page — 5 credits

Navigates to urlToTest inside an existing contextId. The page is closed when the call returns; the context stays.

configure / enable / disable — 1 credit

Validate a stealth configuration, or switch stealth on and off for later calls. No browsing happens, so these are billed as bookkeeping.

get_stats — 1 credit

Read the backend's live counters for contexts and pages. No browsing.

cleanup — 1 credit

Tear down every open context on the backend. No browsing, so releasing what you opened is never charged at the browser rate.

What stealth mode does not do

Stealth mode renders JavaScript with a randomized browser fingerprint. It does not solve CAPTCHAs, forge challenge tokens, or work around a login or a paywall, and it is not a way past a block aimed specifically at CrawlForge. robots.txt still applies on every navigation, matched against the CrawlForge product token. If a target still refuses, the answer is a documented API or the site owner's permission, not a higher stealth level.

Engine selection

stealth_mode supports two underlying browser engines. Choose based on your target site's detection difficulty.

Playwright (default)

Battle-tested Chromium automation with stealth plugins. Best for: most sites, fast execution, broad debugging tooling. Lighter resource footprint.

Camoufox

Firefox-based fork hardened for anti-bot evasion. Best for: aggressive bot detection (Cloudflare Turnstile, DataDome, PerimeterX hard mode). Higher memory usage; slightly slower startup.

Engine example

terminalBash

curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_context",
    "engine": "camoufox",
    "stealthConfig": {
      "level": "advanced"
    }
  }'

Stealth Levels

Basic (Fastest)

Best for sites with minimal bot detection. User-Agent randomization, basic header manipulation, cookie handling, ~1-2 second delay.

Medium (Recommended)

Balanced stealth and performance. Full fingerprint randomization, Canvas/WebGL fingerprint masking, timezone and language spoofing, human-like scrolling and movements, ~3-5 second delay.

Advanced (Slowest)

Maximum stealth for heavily protected sites. All medium features plus: WebDriver detection evasion, advanced TLS fingerprinting, mouse movement simulation, random click patterns, ~8-12 second delay.

Request Examples

terminalBash

# 1. Create a stealth browser context
curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_context",
    "engine": "playwright",
    "stealthConfig": {
      "level": "advanced",
      "randomizeFingerprint": true,
      "blockWebRTC": true
    }
  }'

# 2. Open a page in that context (use the contextId from step 1)
curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_page",
    "contextId": "ctx_ab12cd34ef56",
    "urlToTest": "https://protected-site.com"
  }'

Response Example

200 OK1,200ms

{
  "success": true,
  "data": {
    "operation": "create_context",
    "contextId": "ctx_ab12cd34ef56",
    "engine": "playwright",
    "stealthConfig": {
      "level": "advanced",
      "randomizeFingerprint": true,
      "hideWebDriver": true,
      "blockWebRTC": true,
      "spoofTimezone": true,
      "locale": "en-US"
    },
    "message": "Stealth context created"
  },
  "credits_used": 5,
  "credits_remaining": 995,
  "processing_time": 1200
}

Field Descriptions

data.contextIdPass this to create_page to open a page inside this stealth context

data.operationThe stealth operation that was performed

data.stealthConfigThe resolved stealth configuration applied to the context

credits_used5 credits for browser work (scrape, create_context, create_page); 1 credit for a bookkeeping operation

processing_timeTime to spin up the stealth context (ms)

Error Handling

Browser runtime not configured (503 TOOL_NOT_AVAILABLE)

Stealth mode needs a browser runtime. When the hosted execution backend is not configured the call returns 503 immediately and no credits are charged.

Rate limit exceeded (429 Too Many Requests)

You've exceeded your plan's rate limit. Wait a moment or upgrade your plan for higher limits.

Invalid Operation (400 Bad Request)

Operation must be one of: scrape, configure, enable, disable, create_context, create_page, get_stats, or cleanup.

Blocked by robots.txt (502 TOOL_ERROR)

The target's robots.txt disallows this URL for CrawlForge, so no browser was launched and nothing was charged. Set respect_robots: false to override if you have your own agreement with the target — the override is recorded against your API key. The override does not reach a host on CrawlForge's permanent opt-out list, which is refused whatever respect_robots is set to.

Execution backend timed out (504 MCP_UPSTREAM_TIMEOUT)

The target did not finish loading within the execution backend's budget. Heavily protected sites are the usual cause. Failures are not charged.

Pro Tip: Start with "medium" stealth level. Only use "advanced" for sites that block medium level. Reuse one context across several create_page calls to amortize setup time—plan accordingly for batch operations.

Credit Cost

5 credits

5 credits per browser operation

5 credits buy browser work — scrape, create_context, or create_page — whatever the stealth level. The bookkeeping operations configure, enable, disable, get_stats and cleanup do no browsing and cost 1 credit each, so a one-call scrape costs 5 credits end to end.

What's Included:

Fingerprint randomization (all levels)

Human behavior simulation

Anti-detection techniques

WebDriver detection evasion (medium+)

Canvas/WebGL masking (medium+)

Advanced TLS fingerprinting (advanced)

Plan Recommendations:

Free Plan: 1,000 one-time trial credits = 200 stealth requests

Hobby Plan: 5,000 credits = 1,000 stealth requests ($19/mo)

Professional Plan: 50,000 credits = 10,000 stealth requests ($99/mo)

Related Tools

batch_scrape

Scrape multiple URLs in parallel (5 credits)

localization

Access geo-restricted content with location spoofing (2 credits)

scrape_with_actions

Perform complex interactions with stealth (5 credits)

deep_research

AI-powered research across multiple sources (10 credits)

Ready to try stealth_mode? Sign up for free and get 1,000 credits to start building.

Anti-DetectionStealth5 credits

stealth_mode

Bypass bot detection systems with advanced anti-detection techniques including fingerprint randomization, human behavior simulation, and stealth browser configurations.

Use Cases

Protected E-commerce Sites

Scrape product data from sites with Cloudflare, DataDome, or PerimeterX protection

Social Media Platforms

Extract public data from platforms with sophisticated bot detection

Financial Data Sites

Access market data, stock prices, and financial information from protected sources

Rate-Limited APIs

Bypass aggressive rate limiting with fingerprint rotation

Geo-Blocked Content

Access region-restricted content with residential proxy support

High-Security Testing

Test your own anti-bot systems with advanced evasion techniques

Endpoint

POST/api/v1/tools/stealth_mode

Auth Required

1 req/s on Free plan

5 credits

Parameters

Name	Type	Required	Default	Description
operation	string	Optional	configure	Stealth operation to perform: scrape, configure, enable, disable, create_context, create_page, get_stats, or cleanup. `scrape` is the one-shot path — it creates a stealth context, navigates to `url`, returns the requested `formats`, and tears the context down, all in one billed call. The create_context → create_page → cleanup sequence remains for multi-step work that has to reuse a context. Example: create_context
stealthConfig	object	Optional	-	Fine-grained stealth options. Keys: level (basic \| medium \| advanced, default medium), randomizeFingerprint, hideWebDriver, blockWebRTC, spoofTimezone, randomizeHeaders, useRandomUserAgent, simulateHumanBehavior (all booleans, default true), customUserAgent, customViewport ({ width 800-1920, height 600-1080 }), locale (default "en-US"), and timezone. Example: {"level": "advanced", "blockWebRTC": true}
engine	string	Optional	playwright	Browser engine: "playwright" (default) or "camoufox" (Firefox-based, stronger anti-detection; available only where installed on the backend). Example: camoufox
contextId	string	Optional	-	Browser context ID returned by a create_context call. Pass it to create_page to open a page in that stealth context. Example: ctx_ab12cd34ef56
urlToTest	string	Optional	-	URL to navigate to when creating a page with create_page. Example: https://protected-site.com
url	string	Optional	-	URL to scrape. Required for `operation: "scrape"` and ignored by the other operations, which take `urlToTest` instead. Example: https://protected-site.com/product/42
formats	array	Optional	["markdown"]	Formats `operation: "scrape"` returns: `markdown`, `html`, `text`, `links`, `metadata`, or `screenshot`. A screenshot comes back as a `crawlforge://screenshot/{id}` resource URI rather than inline base64, and this REST endpoint passes that URI through without resolving it — so for now `screenshot` is usable only from the CrawlForge MCP server, which can read the resource. Example: ["markdown", "links"]
wait_for	number	Optional	-	Extra wait after page load, in milliseconds (0-30000). Use it for content that renders after DOMContentLoaded — a stealth run already pauses for human-like delays, so start small. Example: 2000
verbose	boolean	Optional	false	Return the full generated fingerprint from create_context instead of a summary. Useful when debugging why a target still detects the browser. Example: false
respect_robots	boolean	Optional	true	Respect the target site's robots.txt. Omit it and the compliant default (`true`) applies: a URL disallowed for `CrawlForge` is refused before any browser is launched and this endpoint charges nothing for it, and every navigation is checked the same way. The rule is matched against the `CrawlForge` product token even though the stealth browser presents a randomized User-Agent, so a site owner's `User-agent: CrawlForge` directive binds stealth traffic too. Set it to `false` only for a target you have your own agreement with — the response then carries a `warnings` entry and the override is recorded against your API key. Example: true

Operations and what they cost

5 credits buy browser work; the bookkeeping operations cost 1 credit each. A one-call scrape is therefore 5 credits, where the create_context → create_page → cleanup route costs 11.

scrape — 5 credits

One-shot: creates a stealth context, navigates to url, returns the requested formats with the page title and final URL, and tears the context down. Start here.

create_context — 5 credits

Opens a reusable stealth context and returns its contextId. Use it when several pages must share one fingerprint and cookie jar.

create_page — 5 credits

Navigates to urlToTest inside an existing contextId. The page is closed when the call returns; the context stays.

configure / enable / disable — 1 credit

Validate a stealth configuration, or switch stealth on and off for later calls. No browsing happens, so these are billed as bookkeeping.

get_stats — 1 credit

Read the backend's live counters for contexts and pages. No browsing.

cleanup — 1 credit

Tear down every open context on the backend. No browsing, so releasing what you opened is never charged at the browser rate.

What stealth mode does not do

Engine selection

stealth_mode supports two underlying browser engines. Choose based on your target site's detection difficulty.

Playwright (default)

Battle-tested Chromium automation with stealth plugins. Best for: most sites, fast execution, broad debugging tooling. Lighter resource footprint.

Camoufox

Firefox-based fork hardened for anti-bot evasion. Best for: aggressive bot detection (Cloudflare Turnstile, DataDome, PerimeterX hard mode). Higher memory usage; slightly slower startup.

Engine example

terminalBash

curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_context",
    "engine": "camoufox",
    "stealthConfig": {
      "level": "advanced"
    }
  }'

Stealth Levels

Basic (Fastest)

Best for sites with minimal bot detection. User-Agent randomization, basic header manipulation, cookie handling, ~1-2 second delay.

Medium (Recommended)

Balanced stealth and performance. Full fingerprint randomization, Canvas/WebGL fingerprint masking, timezone and language spoofing, human-like scrolling and movements, ~3-5 second delay.

Advanced (Slowest)

Maximum stealth for heavily protected sites. All medium features plus: WebDriver detection evasion, advanced TLS fingerprinting, mouse movement simulation, random click patterns, ~8-12 second delay.

Request Examples

terminalBash

# 1. Create a stealth browser context
curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_context",
    "engine": "playwright",
    "stealthConfig": {
      "level": "advanced",
      "randomizeFingerprint": true,
      "blockWebRTC": true
    }
  }'

# 2. Open a page in that context (use the contextId from step 1)
curl -X POST https://crawlforge.dev/api/v1/tools/stealth_mode \
  -H "X-API-Key: cf_test_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operation": "create_page",
    "contextId": "ctx_ab12cd34ef56",
    "urlToTest": "https://protected-site.com"
  }'

Response Example

200 OK1,200ms

{
  "success": true,
  "data": {
    "operation": "create_context",
    "contextId": "ctx_ab12cd34ef56",
    "engine": "playwright",
    "stealthConfig": {
      "level": "advanced",
      "randomizeFingerprint": true,
      "hideWebDriver": true,
      "blockWebRTC": true,
      "spoofTimezone": true,
      "locale": "en-US"
    },
    "message": "Stealth context created"
  },
  "credits_used": 5,
  "credits_remaining": 995,
  "processing_time": 1200
}

Field Descriptions

data.contextIdPass this to create_page to open a page inside this stealth context

data.operationThe stealth operation that was performed

data.stealthConfigThe resolved stealth configuration applied to the context

credits_used5 credits for browser work (scrape, create_context, create_page); 1 credit for a bookkeeping operation

processing_timeTime to spin up the stealth context (ms)

Error Handling

Browser runtime not configured (503 TOOL_NOT_AVAILABLE)

Stealth mode needs a browser runtime. When the hosted execution backend is not configured the call returns 503 immediately and no credits are charged.

Rate limit exceeded (429 Too Many Requests)

You've exceeded your plan's rate limit. Wait a moment or upgrade your plan for higher limits.

Invalid Operation (400 Bad Request)

Operation must be one of: scrape, configure, enable, disable, create_context, create_page, get_stats, or cleanup.

Blocked by robots.txt (502 TOOL_ERROR)

Execution backend timed out (504 MCP_UPSTREAM_TIMEOUT)

The target did not finish loading within the execution backend's budget. Heavily protected sites are the usual cause. Failures are not charged.