# mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

Repository: https://github.com/mandatoryprogrammer/thermoptic
Canonical: https://ross.abutalabs.com/products/thermoptic
Language: JavaScript
License Family: other
Last push: 2026-03-31T00:32:48+00:00

## Health v2 (maintenance only)
Score: 51/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 74, release rhythm 35, longevity 26
- inputs: {"age_days": 365, "days_push": 156, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1045, forks 67 (observed 2026-08-28T04:03:21.527886+00:00)

## What it is
Thermoptic is a stealth HTTP proxy that routes requests from any HTTP client (like curl) through a containerized Chrome instance so the traffic is indistinguishable from a real Chrome browser at every layer, including JA4+ TLS and HTTP fingerprints. It also offers hooks to mitigate JavaScript-based fingerprinting and supports hybrid scraping that mixes browser sessions with low-level HTTP clients.

## Use cases
- scrape sites that block curl via JA4+ or Cloudflare fingerprinting
- make curl requests look like real Chrome traffic
- continue a browser session with a low-level HTTP client without detection
- bypass TLS and HTTP client fingerprinting blocks
- avoid JavaScript-based bot fingerprinting while scraping
- run hybrid browser and HTTP-client scraping pipelines

## When to choose
- you need your HTTP client traffic to match a real Chrome fingerprint exactly
- anti-bot services like Cloudflare block your scraper based on JA4+ fingerprints
- you want to switch between a real browser and curl within one session without being flagged

## When to avoid
- you need a general-purpose proxy unrelated to fingerprint evasion
- your target blocks you by IP reputation rather than client fingerprinting
- you cannot run a containerized Chrome instance or lack the resources for it

## Facets
- artifact type: service
- maturity: active
- function: proxy, http-client, web-scraping, security
- domain: web-development, security, crawlers, privacy
- platform: self-hosted
- tags: http-proxy, fingerprint-spoofing, ja4, anti-bot-bypass, chrome-cloaking, tls-fingerprint, scraping, docker, linux

## Member repositories
- mandatoryprogrammer/thermoptic (main) score 51

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:21.527886+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:02:06.511475+00:00, confidence not recorded.
  - readme: https://github.com/mandatoryprogrammer/thermoptic (fetched 2026-08-28T04:03:21.527886+00:00, sha 5380bf77a7d3)
- Data as of 2026-08-30T08:39:29.467469+00:00.