MCP-ready · Port 9000

The Browser Agent That Can't Be Detected

Bond automates browsers like a human — secure credential vault, community skills, and MCP integration for any AI assistant.

Download BondView Skills
Anti-detectionZero-knowledge vaultOpen source
bond mcp — 127.0.0.1:9000

// Claude Code → Bond MCP tool call

bond.navigate("https://github.com/login")

bond.fill_vault("github")// AES-256-GCM encrypted

bond.skill_pull("login to github")

// Human-like mouse path via Fitts's Law

→ cursor overshoot: 3.2px, correction: 12ms

→ typing speed: 68 wpm, 2 natural errors

→ bot detection score: 0.02 ✓

✓Login successful

captcha skipped — 2captcha solved in 1.4s

Built to evade detection. Designed for developers.

Bond combines human-like browser behavior with a local credential vault and community-powered skill library — all accessible via MCP from any AI assistant.

Human-Like Automation

Fitts's Law cursor paths, natural typing with realistic errors, overshoot correction, and page drift detection. Bond generates mouse movement that's statistically indistinguishable from a human. Bypasses bot detection on Cloudflare, DataDome, and modern fingerprinting systems.

// Fitts's Law mouse path simulation

path
78pts
overshoot3.2px → corrected in 12ms
typing68 wpm · 2 natural errors
scorebot prob: 0.02 ✓

Zero-Knowledge Vault

Credentials are encrypted with AES-256-GCM + scrypt key derivation. Your secrets never leave the device — Bond is fully local. Multi-step confirmation dialogs appear before auto-filling sensitive forms, so the AI can't submit credentials without your approval.

// Credential vault — local only

github.comAES-256-GCM
aws.consolescrypt KDF

⚠ Bond wants to fill github.com/login

username + password → confirm before submit?

AllowDeny

Community Skill Bank

Record an automation once and publish it to skills.usebond.app with a single command. Pull community skills by plain-English intent. Skills are sanitized before sharing. Browse, vote, and reuse thousands of automations built by the community.

// Skill Bank commands

$ skill-bank-pull "login to github"
→ Found 3 matching skills (⭐ 47, 23, 12 votes)
→ Downloading sanitized skill v2.1...
→ Ready to run
$ skill-bank-publish ./my-skill.json
→ Sanitizing credentials...
→ Published to skills.usebond.app

Everything you need for serious automation

Bond ships with the full stack of anti-detection tech, credential management, and developer tooling out of the box.

  • MCP Server

    Runs on port 9000. Works with Claude Code, OpenCode, Cursor, and any MCP-compatible AI assistant via ~/.mcp.json.

  • 2captcha Integration

    Auto-detect and solve CAPTCHAs including Cloudflare Turnstile, Google reCAPTCHA, and hCaptcha. Inject solutions transparently.

  • Task Recovery

    Crashed or interrupted tasks resume automatically from the last checkpoint stored in local SQLite state. Zero lost work.

  • Multi-Profile

    Separate browser profiles with independent cookies, localStorage, fingerprints, and encrypted vaults per identity.

  • Ghost Cursor

    Powered by ghost-cursor with Bezier curve paths, jitter, and realistic acceleration. Undetectable on headless detection tests.

  • rebrowser-puppeteer

    Built on rebrowser-puppeteer to patch stealth leaks. No navigator.webdriver, no CDP detection, no automation flags.

Up and running in 60 seconds

Bond ships as a single binary. Install it, start the services, and connect to your AI assistant via MCP.

Install & Start

bash
# Download latest binary
curl -L https://git.29tech.cn/xielun_ai/bond/-/releases/permalink/latest/downloads/bond-daemon-linux-x64 \
  -o bond-daemon
chmod +x bond-daemon && mv bond-daemon ~/.bond/bin/

# Install as system services
bond-daemon install
# Starts: bond-browser.service (:3457) + bond.service (:9000)

# Add to Claude Code MCP
claude mcp add bond http://127.0.0.1:9000/mcp

MCP Config (OpenCode, Cursor, etc.)

json
// ~/.mcp.json
{
  "mcpServers": {
    "bond": {
      "url": "http://127.0.0.1:9000/mcp"
    }
  }
}

Two services run in the background

  • bond-browser.service— Node.js Playwright worker on :3457
  • bond.service— Rust MCP server on :9000
Download Latest ReleaseView Source on GitLab