camofox-browser wraps the open-source Camoufox engine in a self-hostable REST API, giving AI agents a way around bot detection without a hosted stealth-browser subscription.
A team building an AI agent that needs to check a competitor's pricing page, pull inventory data from a partner portal, or fill out a form on a site that never offered an API usually hits the same wall within a day or two. Cloudflare, or something like it, blocks the request before the agent ever sees the content. The common fix is a hosted stealth-browser service built for exactly this problem. Browserbase, one of the better-known ones, prices its Developer plan at $20 a month for 25 concurrent browsers and 100 browser hours, then $0.12 an hour past that, and climbs to $99 a month on its Startup plan for more concurrency and higher limits. camofox-browser, an open-source project climbing GitHub's trending page this week, packages a similar anti-detection approach into a REST API a team can run on its own server, for the cost of hosting rather than a subscription.
camofox-browser is not itself the anti-detection engine. It wraps Camoufox, an open-source Firefox fork that patches browser fingerprinting at the C++ level rather than through JavaScript injection. Camoufox spoofs navigator properties, screen geometry, WebGL parameters, AudioContext behavior, and WebRTC IP data before a page's own scripts ever run, a different approach from stealth plugins that override those values after the fact and end up creating their own kind of tell. camofox-browser puts a REST API in front of that engine: accessibility snapshots instead of raw HTML, stable element references for clicking and typing, cookie import for authenticated sessions, and search macros for common sites. It bills itself as a drop-in replacement for Puppeteer and Playwright, is MIT licensed, and shows active maintenance, with commits into August 2026 and a release cut on September 6, 2026. It has picked up 9.6 thousand stars on GitHub.
For a growth, sales-ops, or product team running an AI agent against sites that were never built to be scraped, the paid options add up fast. Browserbase's own marketing lists the workflows this gets used for: insurance verification across payor portals, loan application processing, property listing synchronization, benefits administration, competitive data collection. Each of those runs through a metered browser-hours or per-call pricing model. Bright Data's Web Unlocker takes a different shape, a free tier of 5,000 requests a month, then a per-request fee that scales with volume, and both it and Browserbase's paid tiers include automatic CAPTCHA solving as part of what a customer is paying for. camofox-browser trades that managed service for infrastructure a team owns outright. Its documentation describes it running on a Raspberry Pi or a five-dollar VPS, with idle memory usage around 40 megabytes.
The tradeoff is real, not just framing. Camoufox's own README carries a warning from its maintainer: the project went roughly a year without active maintenance, and "may not be suitable for stable production use" as a result of that gap and newly discovered fingerprint inconsistencies since. Camoufox is licensed MPL-2.0, camofox-browser's wrapper is MIT, so both pieces are free to run, but nobody is on the hook for uptime or for chasing the next anti-bot update the way Browserbase's or Bright Data's engineering teams are paid to. Neither camofox-browser nor Camoufox lists automatic CAPTCHA solving as a feature, something both paid alternatives include by default. Getting a residential proxy pool, generally a requirement for any of this to hold up at scale, is also left entirely to whoever runs it.
The honest version of this story is not that free beats paid. It is that camofox-browser moves the cost from a monthly bill to a standing engineering responsibility, and which one is cheaper depends on whether a team already has someone willing to own that responsibility. For a small shop running one agent against a handful of sites, that might be an easy trade. For a company running this at the scale Browserbase's healthcare and financial-services customers do, the metered subscription may be buying something camofox-browser cannot: someone else awake when a site's bot detection changes overnight.