32.1K ·GitHub
What is this?
AIHawk is an open-source AI browser agent that browses the web undetected: it drives a stealth Firefox that anti-bot systems see as a normal person, so no captchas and no blocks. You say what you want in plain language, and it browses, clicks, types and reads the actual web to get it done.
AIHawk is an open-source AI browser agent that browses the web undetected: it drives a stealth Firefox that anti-bot systems see as a normal person, so no captchas and no blocks. You say what you want in plain language, and it browses, clicks, types and reads the actual web to get it done.Is this a hosted service I sign up for, or something I run myself?Something you run yourself: it is self-hosted and has no server of its own. There are two ways to use it — plug it into your assistant over MCP, or run the standalone web UI with the chat on the left and the live browser on the right.
Something you run yourself: it is self-hosted and has no server of its own. There are two ways to use it — plug it into your assistant over MCP, or run the standalone web UI with the chat on the left and the live browser on the right.How do I get it running?Two paths. Over MCP, run the one-line install for your OS and then tell your assistant — Claude Code, Codex or Gemini CLI — that it exists. Standalone, run the command and open the local interface at 127.0.0.1:8765 (the default host and port), then type what you want in the chat.
Two paths. Over MCP, run the one-line install for your OS and then tell your assistant — Claude Code, Codex or Gemini CLI — that it exists. Standalone, run the command and open the local interface at 127.0.0.1:8765 (the default host and port), then type what you want in the chat.Do I need an OpenRouter key to run it?For the standalone web UI, yes — you bring your own OpenRouter key via --openrouter-key, the OPENROUTERAPIKEY variable or a .env file. Over MCP there is no separate key: the assistant you plugged it into uses whichever model it runs. The model defaults to z-ai/glm-5.3-flash and can be changed with --model.
For the standalone web UI, yes — you bring your own OpenRouter key via --openrouter-key, the OPENROUTERAPIKEY variable or a .env file. Over MCP there is no separate key: the assistant you plugged it into uses whichever model it runs. The model defaults to z-ai/glm-5.3-flash and can be changed with --model.Anything I should watch out for when running it?A few things: exposing the interface beyond 127.0.0.1 gives you no authentication; passing the key as a flag leaves it in your shell history, so prefer the environment or a .env file; and a custom --binary must be exactly the pinned build or startup refuses. Also read the terms of the sites you automate and respect their rate limits.
A few things: exposing the interface beyond 127.0.0.1 gives you no authentication; passing the key as a flag leaves it in your shell history, so prefer the environment or a .env file; and a custom --binary must be exactly the pinned build or startup refuses. Also read the terms of the sites you automate and respect their rate limits.Does it run on macOS?The README documents Windows (PowerShell) and Linux install commands only — macOS is not mentioned. It may well work, but there is no official word on it.
The README documents Windows (PowerShell) and Linux install commands only — macOS is not mentioned. It may well work, but there is no official word on it.What leaves my computer when I use it?Three channels: the sites you visit see the browser as they would any Firefox; your model provider gets the conversation and page content under your OpenRouter key; GitHub sees ordinary HTTPS requests for the engine download, a GeoIP database when a proxy is set, and an anonymous per-launch counter. Sessions, profiles and screenshots stay local and are yours to delete.
Three channels: the sites you visit see the browser as they would any Firefox; your model provider gets the conversation and page content under your OpenRouter key; GitHub sees ordinary HTTPS requests for the engine download, a GeoIP database when a proxy is set, and an anonymous per-launch counter. Sessions, profiles and screenshots stay local and are yours to delete.Is the licensing straightforward?For current releases, yes: MIT. The catch is that everything distributed before 2 September 2026 was released under AGPL-3.0 and stays under it, so older versions carry copyleft obligations.
For current releases, yes: MIT. The catch is that everything distributed before 2 September 2026 was released under AGPL-3.0 and stays under it, so older versions carry copyleft obligations.How does it stay undetected by anti-bot systems?It drives a stealth Firefox the way a person would — the pointer moves, keys are pressed — so anti-bot systems see a normal user rather than a script. A --seed pins a stable browser identity across runs, and when --proxy is set the timezone, locale and egress follow the proxy.
It drives a stealth Firefox the way a person would — the pointer moves, keys are pressed — so anti-bot systems see a normal user rather than a script. A --seed pins a stable browser identity across runs, and when --proxy is set the timezone, locale and egress follow the proxy.What kinds of tasks is it good for?Anything that needs real web automation: a browser rather than an API, plus human judgement about what is on the page. The README's example is checking flight fares day by day on an airline site — clicking through the calendar widget instead of typing dates, reading each day's cheapest fare, and reporting when a date has no availability rather than guessing a number.
Anything that needs real web automation: a browser rather than an API, plus human judgement about what is on the page. The README's example is checking flight fares day by day on an airline site — clicking through the calendar widget instead of typing dates, reading each day's cheapest fare, and reporting when a date has no availability rather than guessing a number.Can I code against the engine instead of chatting with it?Yes. The same package ships invisibleplaywright, a Python library whose API is Playwright's, for writing code instead of prompts, and invisiblecore, which turns a seed into a fingerprint, preferences, proxy and geolocation. The MCP server lives there too: 'aihawk' with no subcommand is the server, 'aihawk ui' opens the interface.
Yes. The same package ships invisibleplaywright, a Python library whose API is Playwright's, for writing code instead of prompts, and invisiblecore, which turns a seed into a fingerprint, preferences, proxy and geolocation. The MCP server lives there too: 'aihawk' with no subcommand is the server, 'aihawk ui' opens the interface.Will my logins and cookies survive a restart?Only if you keep them: pass --profile-dir with a directory to store the profile in, and logins and cookies persist between runs. Profiles and screenshots are stored locally and are yours to delete.
Only if you keep them: pass --profile-dir with a directory to store the profile in, and logins and cookies persist between runs. Profiles and screenshots are stored locally and are yours to delete.What are similar projects?invisible_playwright_mcp, camofox-browser, open-dots, invisible_puppeteer, invisible_selenium, camoufox, botasaurus, Agent-S
invisible_playwright_mcp, camofox-browser, open-dots, invisible_puppeteer, invisible_selenium, camoufox, botasaurus, Agent-SWhich topics is it in?manus, claude-cowork, stealth-browser, antidetect-browser, computer-use-agent, stealth, anti-bot, open-source-alternative, firefox, openrouter, computer-use, ai-assistant
manus, claude-cowork, stealth-browser, antidetect-browser, computer-use-agent, stealth, anti-bot, open-source-alternative, firefox, openrouter, computer-use, ai-assistant