I Added a Stealth Browser as a Sidecar MCP to My OpenClaw Agent. Here's the Architecture and the Test Results.

Short summary

An engineer added a stealth browser as a disabled-by-default sidecar MCP to their OpenClaw agent to bypass anti-bot detection like Cloudflare, keeping the fast default browser for 95% of work. The architecture uses nodriver for fingerprint masking, Xvfb for headless X11 display, and three bot-detection test surfaces to validate stealth. Key lessons: pay the 6-7 second cold-start only when needed, fix Xvfb before starting, and probe the MCP before enabling.

• •Sidecar MCP pattern for stealth browsing bypasses anti-bot detection on 5% of agent work without slowing the default 95%
• •Xvfb display server and nodriver Chrome fork handle X11 and fingerprint masking; validated with Cloudflare, sannysoft, and CreepJS tests
• •Deployment lessons: resolve Xvfb setup before starting, probe MCPs before enabling, handle silent Chrome failures explicitly

Generated with AI, which can make mistakes.