CamaleãoAgent Middleware · In production · Live ↗

Camaleão: stealth-browser primitives as an MCP layer for agents

69 browser primitives any vision-agent can drive — past the fingerprinting and CAPTCHAs that stop everyone else.

RoleArchitect & BuilderSolo — protocol, runtime, anti-bot stack
Surface69 MCP primitivesOne container, four task verbs
StackMCP · patchright · TypeScript+ proxies, CapSolver, Drizzle

The context

Modern sites gate-keep agents with browser fingerprinting, TLS/IP reputation, behavioural detection, CAPTCHAs and email-verification gates. Every agent team rebuilds the same brittle stack to get past them — badly. Anti-bot is pattern-based (a new wall vendor is a one-line entry in a handler map), and a budget layer caps spend per session — so an autonomous run can't quietly burn money.

I built Camaleão as a single MCP-callable layer that fuses the answers to all of it. Any caller — Claude Code, Cursor, OpenClaw, any vision-LLM — gets browser superpowers without owning the infrastructure. Camaleão deliberately has no internal LLM: the caller's model sees screenshots and decides; Camaleão executes reliably. The product is the server; an operator's personas and per-site recipes mount as private data so it behaves like a real person, not a bot.

What I built
MCP Server DesignAgent MiddlewareBrowser AutomationAnti-bot / StealthCAPTCHA SolvingSession StateEmail VerificationSDK (TS + Py)
Stack
MCPTypeScriptpatchrightChromium / XvfbResidential proxiesCapSolver2CaptchaZoho IMAPDrizzlePostgreSQLRedisRailway

The interface

live in production
Camaleão — live interface

The architecture

caller decides · Camaleão executes
   any vision-LLM agent   (Claude · Cursor · OpenClaw)MCP  /  HTTP + SSE
            ▼
   ┌────────────────────────────────────┐
   │  Camaleão   ·   69 primitives        │
   │  navigate · click · fill · extract │
   │  solve_captcha · submit_form       │
   │  login · signup · run_dag          │
   └────────────────────────────────────┘
       │              │              │
       ▼              ▼              ▼
   patchright     residential    CapSolver /
   Chromium       proxies        2Captcha
   (Xvfb)         (sticky)       + Zoho IMAP
       │              │              │
       └──────────────┼──────────────┘
                      ▼
        middleware: auto-captcha · domain fallback
        recipe self-heal · persona / private volume
69
Browser primitives over one MCP surface — four task verbs, one container.
0
Internal LLMs — model-agnostic; any caller's vision model drives it.
TS + Py
Typed SDKs so agents in either ecosystem call it natively.