Crawlemoon MCP Server
A free, open-source MCP server that gives any agent (Claude Code, Cursor, Windsurf, …) 55 production-grade tools for the full web-crawling stack: deep analysis, stealth, API discovery, session recording → runnable crawler, smart extraction. No proprietary API. No per-request fee.
Quick start
The recommended path needs no install — uvx runs straight from PyPI:
{
"mcpServers": {
"crawlemoon": {
"command": "uvx",
"args": ["crawlemoon"]
}
}
}
Requires
uv. Install once:curl -LsSf https://astral.sh/uv/install.sh | sh. Or usepipx run crawlemoon/pip install crawlemooninstead.
Where to put that JSON: Cursor → Settings → MCP. Claude Code → ~/.config/claude/mcp_settings.json. Windsurf → Settings → MCP Servers.
How it works
Your agent talks to Crawlemoon over the Model Context Protocol. Crawlemoon owns a hardened browser pool, an HTTP stack with TLS fingerprinting, and a rotating proxy pool. While it fetches pages, it captures network traffic, reads scripts, and introspects schemas — so the agent gets clean structured data, not raw HTML.
What's in the box
A short list — see the source for the full set of 55 tools.
| Group | Tools |
|---|---|
| Deep analysis | deep_analyze, discover_apis, introspect_graphql, analyze_websocket, analyze_auth, detect_protection, detect_technology |
| Stealth | stealth_request, configure_proxies, configure_rate_limit, add_proxy, test_proxy |
| Record → crawler | record_session, stop_recording, export_recording, generate_crawler |
| Extraction | smart_extract, extract_article, extract_tables, extract_links, extract_forms, extract_metadata, convert_to_markdown |
| Page interaction | take_screenshot, fill_form, wait_and_extract, compare_pages, measure_performance, check_accessibility, get_dom_tree |
| Sessions & cache | save_session, load_session, get_cookies, get_storage, clear_cache, get_cache_stats |
| Advanced (opt-in) | execute_js, execute_cdp, deobfuscate_js, extract_from_js, solve_captcha |
Smart extraction — bring any LLM, including free ones
smart_extract works without any API key using pattern matching. Plug in any OpenAI-compatible endpoint for higher accuracy — including FREE tiers:
# OpenRouter (free models exist)
CRAWLEMOON_LLM_PROVIDER=openrouter
CRAWLEMOON_LLM_API_KEY=sk-or-v1-xxx
CRAWLEMOON_LLM_MODEL=meta-llama/llama-3.2-3b-instruct:free
# Groq (free, very fast)
CRAWLEMOON_LLM_PROVIDER=groq
CRAWLEMOON_LLM_API_KEY=gsk_xxx
# Local Ollama (no key needed)
CRAWLEMOON_LLM_PROVIDER=ollama
CRAWLEMOON_LLM_MODEL=llama3.2
Together, DeepSeek, Mistral, Fireworks, and standard OpenAI also work via CRAWLEMOON_LLM_BASE_URL.
Configuration
| Variable | Default | Notes |
|---|---|---|
CRAWLEMOON_HEADLESS |
true |
Run browser without UI |
CRAWLEMOON_BROWSER |
chromium |
chromium / firefox / webkit |
CRAWLEMOON_POOL_SIZE |
5 |
Max concurrent browsers |
CRAWLEMOON_NAV_TIMEOUT |
30.0 |
Page-load timeout (s) |
CRAWLEMOON_API_KEY |
unset | If set, every tool call must include matching _api_key |
CRAWLEMOON_ALLOW_DANGEROUS_JS |
false |
Required for execute_js / execute_cdp / deobfuscate_js |
CRAWLEMOON_JS_MAX_LENGTH |
50000 |
Length cap for JS payloads |
CRAWLEMOON_JS_EXEC_TIMEOUT |
10.0 |
Per-script timeout (s) |
CRAWLEMOON_PROXIES |
unset | Comma/newline separated proxy entries |
CRAWLEMOON_PROXIES_FILE |
unset | Local file with one proxy per line |
CRAWLEMOON_PROXY_SCHEME |
http |
Scheme for entries without one: http, https, socks4, socks5 |
CRAWLEMOON_PROXY_ROTATION |
round_robin |
round_robin, random, sticky, least_used |
CRAWLEMOON_PROXY_HEALTH_CHECK_INTERVAL |
300 |
Proxy health-check interval (s) |
CRAWLEMOON_PROXY_FAIL_CLOSED |
false |
Raise on startup proxy config errors instead of continuing direct |
Proxy, V2ray & connection control
Crawlemoon uses one rotating proxy pool for browser contexts, stealth_request, and Xray/V2ray local exits. Credentials are stored separately from normalized URLs and are masked in stats/log-style responses.
Supported proxy entry formats:
http://user:pass@31.59.20.176:6754
socks5://user:pass@127.0.0.1:1080
31.59.20.176:6754:user:pass
31.59.20.176:6754
Start the MCP server with a proxy file:
{
"mcpServers": {
"crawlemoon": {
"command": "uvx",
"args": ["crawlemoon"],
"env": {
"CRAWLEMOON_PROXIES_FILE": "/secure/path/proxies.txt",
"CRAWLEMOON_PROXY_SCHEME": "http",
"CRAWLEMOON_PROXY_ROTATION": "sticky"
}
}
}
}
Proxy files can use Webshare-style lines and comments:
# host:port:username:password
31.59.20.176:6754:uusmdewb:en3w097syrxh
31.56.127.193:7684:uusmdewb:en3w097syrxh
Configure or replace proxies at runtime with the configure_proxies MCP tool:
{
"proxies_text": "31.59.20.176:6754:user:pass\n31.56.127.193:7684:user:pass",
"default_scheme": "http",
"rotation_strategy": "sticky",
"health_check_interval": 300,
"replace_existing": true
}
Use add_proxy, remove_proxy, test_proxy, and get_proxy_stats for incremental control. get_proxy_stats returns masked proxy URLs, for example http://user:***@31.59.20.176:6754.
For V2ray/Xray, call configure_xray_subscription with either subscription_url or raw_links. Crawlemoon starts local SOCKS5 exits such as socks5://127.0.0.1:10801, registers them in the same proxy pool, and can rotate or benchmark nodes with rotate_xray_node and test_xray_nodes.
Keep proxy files out of git. They contain live credentials.
Security
execute_js, execute_cdp, and deobfuscate_js are disabled by default — they execute or operate on arbitrary code in a real browser. Enable on trusted networks with CRAWLEMOON_ALLOW_DANGEROUS_JS=true. Even then, payloads are length-capped, time-bounded, and a denylist rejects eval, new Function, dynamic import(), document.write, importScripts, and WebAssembly.{compile,instantiate}. Set CRAWLEMOON_API_KEY so MCP clients must present a matching _api_key.
These are mitigations, not a sandbox: do not expose this server to untrusted clients.
Develop
git clone https://github.com/razavioo/crawlemoon.git
cd crawlemoon
make dev-install # editable install + dev/captcha/ocr extras + pre-commit
make test # pytest
make lint # ruff + mypy
Releases
This project uses Trusted Publishing (OIDC) via GitHub Actions to automate publishing releases directly to PyPI.
To release a new version:
- Bump the version number in
pyproject.toml. - Commit the change and create a git tag matching the version (e.g.
v1.1.8):git add pyproject.toml git commit -m "chore: bump version to 1.1.8" git tag v1.1.8
- Push your branch and the tag to GitHub:
git push origin main --tags
GitHub Actions will automatically run tests, build the package, and publish it securely to PyPI under the crawlemoon package space.
PRs welcome. Particularly interested in: distributed mode (Redis queue), result sinks (Postgres / S3), Prometheus metrics. See MIT License.
Made by emad.dev
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file crawlemoon-1.1.10.tar.gz.
File metadata
- Download URL: crawlemoon-1.1.10.tar.gz
- Upload date:
- Size: 170.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3977e1575a79a085ee0aa0444be27427a6460bf3f66fd3cc4a2db1129dcc196a
|
|
| MD5 |
bf8a97cddc896b44887bb7754e993103
|
|
| BLAKE2b-256 |
21a5ac13434bbe0e9b9184627019a315dc42c0423b3e8af58af3240b12451c3b
|
Provenance
The following attestation bundles were made for crawlemoon-1.1.10.tar.gz:
Publisher:
release.yml on razavioo/crawlemoon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
crawlemoon-1.1.10.tar.gz -
Subject digest:
3977e1575a79a085ee0aa0444be27427a6460bf3f66fd3cc4a2db1129dcc196a - Sigstore transparency entry: 1912520159
- Sigstore integration time:
-
Permalink:
razavioo/crawlemoon@8b66d6bea32e04ab86124ed5d596567d1c3e4b23 -
Branch / Tag:
refs/tags/v1.1.10 - Owner: https://github.com/razavioo
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@8b66d6bea32e04ab86124ed5d596567d1c3e4b23 -
Trigger Event:
push
-
Statement type:
File details
Details for the file crawlemoon-1.1.10-py3-none-any.whl.
File metadata
- Download URL: crawlemoon-1.1.10-py3-none-any.whl
- Upload date:
- Size: 141.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e16fd7386f7f5c4e4a445df9edb8304d92704bba0dd880d6665b55f28e9875bd
|
|
| MD5 |
17b1cd90eed6d40d0d1dc7a0d52661ea
|
|
| BLAKE2b-256 |
089e543eeea74a0ae6b83194cfb62dd0e5d713831b2df15f37ba6d881b0aaac7
|
Provenance
The following attestation bundles were made for crawlemoon-1.1.10-py3-none-any.whl:
Publisher:
release.yml on razavioo/crawlemoon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
crawlemoon-1.1.10-py3-none-any.whl -
Subject digest:
e16fd7386f7f5c4e4a445df9edb8304d92704bba0dd880d6665b55f28e9875bd - Sigstore transparency entry: 1912520338
- Sigstore integration time:
-
Permalink:
razavioo/crawlemoon@8b66d6bea32e04ab86124ed5d596567d1c3e4b23 -
Branch / Tag:
refs/tags/v1.1.10 - Owner: https://github.com/razavioo
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@8b66d6bea32e04ab86124ed5d596567d1c3e4b23 -
Trigger Event:
push
-
Statement type: