Ross ROSS = Recommend OSS · open-source software intelligence for agents

mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack. observed · 2026-08-28

github.com/mandatoryprogrammer/thermoptic · JavaScript observed · 2026-08-28

Health v2 · maintenance only

51/100

  • Activity 74
  • Release rhythm 35
  • Longevity 26

Flags: no_releases no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 365
  • days_rel: n/a
  • days_push: 156
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1045 stars · 67 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Thermoptic is a stealth HTTP proxy that routes requests from any HTTP client (like curl) through a containerized Chrome instance so the traffic is indistinguishable from a real Chrome browser at every layer, including JA4+ TLS and HTTP fingerprints. It also offers hooks to mitigate JavaScript-based fingerprinting and supports hybrid scraping that mixes browser sessions with low-level HTTP clients.

Use cases

  • scrape sites that block curl via JA4+ or Cloudflare fingerprinting
  • make curl requests look like real Chrome traffic
  • continue a browser session with a low-level HTTP client without detection
  • bypass TLS and HTTP client fingerprinting blocks
  • avoid JavaScript-based bot fingerprinting while scraping
  • run hybrid browser and HTTP-client scraping pipelines

When to choose

  • you need your HTTP client traffic to match a real Chrome fingerprint exactly
  • anti-bot services like Cloudflare block your scraper based on JA4+ fingerprints
  • you want to switch between a real browser and curl within one session without being flagged

When to avoid

  • you need a general-purpose proxy unrelated to fingerprint evasion
  • your target blocks you by IP reputation rather than client fingerprinting
  • you cannot run a containerized Chrome instance or lack the resources for it

Facets

service · maturity active

proxy http-client web-scraping security web-development security crawlers privacy self-hosted http-proxy fingerprint-spoofing ja4 anti-bot-bypass chrome-cloaking tls-fingerprint scraping docker linux

1 source

Member repositories

RepositoryRoleHealth v2
mandatoryprogrammer/thermopticmain51

For agents

markdown · JSON · MCP: product_card(name="mandatoryprogrammer/thermoptic")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem