Open a URL and return an indexed snapshot of the page's interactive elements.

Automatically passes WAAP/anti-bot challenges and dismisses common cookie/consent banners. Each line is [index]<tag role=...>text</tag>; use the index with click / type_text. Pass include_snapshot=false for a compact summary (saves tokens; call snapshot() when you need the list).

Re-perceive the current page: a fresh indexed snapshot of its interactive elements (use after the DOM may have changed).

Click the element with the given index (from the latest snapshot).

Returns the resulting snapshot (or a compact change summary when include_snapshot=false). The result's Changed: line reports what the click did (url change / new elements / nothing).

Type text into the input with the given index (clears it first; if enter is true, presses Enter to submit). Returns the resulting snapshot (or a compact summary when include_snapshot=false).

Fill a field from an opaque secret capability.

The capability names a registered provider and an opaque handle. It also binds the fill to exact origins, one field kind, an expiry, and a use limit. The tool never accepts or returns the secret value.

Scroll the page ("down" or "up") and return a fresh snapshot (or a compact summary when include_snapshot=false).

Manage tabs. action: list (default), select (by index), new (optionally open url), or close (by index). Returns the tab list, or the new active tab's snapshot for select/new.

Export the current session (cookies + localStorage) to a Playwright storageState JSON at path — a portable, reusable authenticated session.

Return the current page's readable content as markdown (for extraction / summarisation, as opposed to acting on elements).

Capture a screenshot of the current page.

Returns an inline PNG image (so a multimodal model can see the page and disambiguate by the same element indices). On an SDK without image content support, falls back to saving a temp PNG and returning its path. Wraith blocks this tool after a secret fill.

Fingerprint a URL's WAAP / anti-bot defenses (Akamai, Cloudflare, Reblaze/Link11, DataDome, Incapsula, SiteMinder, reCAPTCHA, ...). Returns a list of detected vendor names — empty if none. Passive; no browser needed.

Borrow a warmed, already-authenticated identity for domain from a real Firefox/Zen profile on this machine and inject its cookies into the live browser, so subsequent navigate calls load as that logged-in user — the core Wraith move for sidestepping reputation-based defenses.

profile optionally selects a profile by a path substring; otherwise the first Zen profile is used, falling back to the first Firefox profile.

Borrow a logged-in Google identity's reputation and open url so a reCAPTCHA-v3 score is minted high.

This is the GENERAL reCAPTCHA-v3 pass: the v3 score is computed inside the google.com reCAPTCHA iframe from the .google.com reputation cookies present in the context, so injecting a warmed Google identity's cookies (delivered 3rd-party with secure+SameSite=None into an un-partitioned context) lifts the score across any sitekey/site. The browser is (re)launched with the un-partition firefox prefs, the reputation cookies are injected, then the URL is navigated (passing any WAAP and dismissing consent first).

profile optionally selects the source Firefox/Zen profile by a path substring; otherwise the first Zen profile is used, falling back to Firefox.

WARNING: borrowing your primary Google identity carries anomalous-session / 2FA risk — this is opt-in. After it returns, VERIFY success against the real protected endpoint (accept vs reject); the v3 score is run-variable and there is no trustworthy score readout for a 3rd-party sitekey. Returns the detected reCAPTCHA params and whether the reload request carried the reputation cookies.

No-browser TLS-impersonation request — the cheap fast path.

Replays a captured session against url with a real-browser TLS+HTTP2 fingerprint and NO browser launch. session_file is a JSON file with {headers:{Authorization,Cookie,User-Agent}} (as written by wraith harvest / the borrow flow). Use this to replay an already-authenticated/cleared session cheaply; escalate to navigate only when the returned classification is challenge. Returns the status, classification, and a body preview.

Pull a synced login from a one-shot pairing code and inject it.

A laptop runs wraith profile sync and hands you the pairing code out of band. This tool pulls the end-to-end-encrypted cookie jar from the dead-drop relay, opens it in memory, and injects the cookies into the live browser context — so subsequent navigate calls load as that already-signed-in user. No password ever reaches you: only the session cookies, scoped to the domain the laptop chose. The drop is single-use and self-destructs after pickup.