🤖 Qoder Autopilot

Automated Qoder account registration with anti-detect browser, multi-strategy captcha solving, and 9Router OAuth device token integration.

Register Qoder accounts → solve captchas → verify OTP → auto-connect to 9Router. All in one command.

📦 Published on PyPI — pypi.org/project/qoder-autopilot

Install with pip install qoder-autopilot — no clone needed.

✨ Features

• 🦊 Anti-detect Browser — Uses Camoufox (stealth Firefox fork) with C++-level fingerprinting to bypass bot detection
• 🧩 Multi-strategy Captcha Solving
  • AI Vision (Gemini/GPT via OpenAI-compatible API)
  • Manual mode (pause and solve it yourself)
• 📧 Multi-Provider Temp Mail — Cloudflare Workers (default) or Moca Supabase
• 🔐 OAuth Device Flow — PKCE-based device token flow (reverse-engineered from 9Router)
• 🔌 9Router Auto-Connect — Inserts device tokens directly into 9Router's SQLite database
• 🚀 First-Run Wizard — Interactive setup on first launch
• 🏠 Built-in Worker Deploy — Deploy your own temp mail worker from CLI
• ⚡ Parallel Mode — Register multiple accounts concurrently
• ⚙️ Persistent Config — qoder-autopilot config for easy customization

📦 Installation

Via pip (recommended)

# Basic install (manual captcha only)
pip install qoder-autopilot

# With AI captcha solver support
pip install qoder-autopilot[captcha]

# Full install with all extras
pip install qoder-autopilot[full]

From source (development)

git clone https://github.com/Daivageralda/qoder-autopilot.git
cd qoder-autopilot

# Basic install
pip install -e .

# With AI captcha solver
pip install -e ".[captcha]"

# Full install + dev tools
pip install -e ".[dev]"

Post-install

# Download Camoufox browser binary
python -m camoufox fetch

# Download Playwright browsers (if needed)
playwright install firefox

🚀 Quick Start

First time? Just run:

qoder-autopilot

You'll see the setup wizard:

  ╔══════════════════════════════════════════════════╗
  ║       👋 Welcome to qoder-autopilot!             ║
  ║       Let's get you set up in 30 seconds.        ║
  ╚══════════════════════════════════════════════════╝

  [1] 🚀 Quick Start — use the default public worker
  [2] 🏠 Self-Host — deploy your own Cloudflare Worker

Pick 1 for instant setup, or 2 to deploy your own temp mail service.

Registration commands

# Single account, manual captcha (most reliable)
qoder-autopilot --manual-captcha

# 5 accounts sequentially
qoder-autopilot -n 5 --manual-captcha

# 5 accounts in parallel
qoder-autopilot -n 5 --manual-captcha --parallel

# Skip OAuth/9Router, just register
qoder-autopilot --manual-captcha --no-oauth

# Show browser windows
qoder-autopilot --manual-captcha --no-headless

# Custom delay between accounts (seconds)
qoder-autopilot -n 3 --manual-captcha --delay 60

📋 All Commands

Registration flags

⚙️ Configuration

Three-tier priority: Environment variables → User config (~/.qoder-autopilot/config.json) → Defaults

Via CLI (recommended)

# See all settings
qoder-autopilot config show

# Set values
qoder-autopilot config set worker-url https://my-worker.workers.dev
qoder-autopilot config set ai-api-key sk-abc123...
qoder-autopilot config set otp-timeout 30
qoder-autopilot config set mail-provider moca

# Get a value
qoder-autopilot config get worker-url

# Reset everything
qoder-autopilot config reset

Configurable keys

Via environment variables

All keys can be set with QODER_ prefix:

export QODER_WORKER_URL=https://my-worker.workers.dev
export QODER_AI_API_KEY=sk-abc123...
export QODER_OTP_TIMEOUT=30

Via .env file

cp .env.example .env
# Edit .env with your settings

🏠 Self-Host Temp Mail Worker

Want your own independent temp mail service? Deploy in 5 minutes:

# From qoder-autopilot (bundled worker template)
qoder-autopilot deploy

# Or clone the standalone repo
git clone https://github.com/Daivageralda/cf-mail-worker.git
cd cf-mail-worker
npm install
npm run setup

See cf-mail-worker for full documentation.

🏗️ Architecture

qoder-autopilot/
├── src/qoder_autopilot/
│   ├── cli.py              # CLI entry point
│   ├── config.py           # Pydantic Settings (env + user config + defaults)
│   ├── user_config.py      # Persistent config manager (~/.qoder-autopilot/)
│   ├── first_run.py        # First-run setup wizard
│   ├── deploy.py           # Worker deploy (extract + setup)
│   ├── register.py         # Main registration flow
│   ├── temp_mail.py        # Multi-provider temp email client
│   ├── oauth.py            # PKCE device auth flow
│   ├── otp.py              # Email OTP extraction
│   ├── identity.py         # Random identity generation (faker id_ID)
│   ├── credentials.py      # Account credential storage
│   ├── ninerouter.py       # 9Router SQLite integration
│   ├── errors.py           # Custom exceptions
│   ├── logger.py           # ANSI colored structured logging
│   ├── browser/
│   │   ├── camoufox.py     # Anti-detect browser launcher
│   │   └── window_tiler.py # macOS window grid positioning
│   ├── captcha/
│   │   ├── solver.py       # Orchestrator (AI → manual)
│   │   ├── ai_vision.py    # AI vision gap detection
│   │   └── manual.py       # Manual solve pause/poll
│   └── worker_template/    # Bundled Cloudflare Worker (for deploy)
│       ├── src/             # Worker JS source
│       ├── schema.sql       # D1 database schema
│       ├── package.json
│       └── scripts/setup.sh
├── tests/
├── pyproject.toml
└── README.md

🔒 Security

qoder-autopilot takes security seriously:

• Credential files — qoder_accounts.json saved with chmod 600 (owner-only)
• Config files — ~/.qoder-autopilot/config.json and relay.json restricted to 600
• Password masking — passwords never logged to stdout (masked as ••••••••)
• API key masking — AI API keys never shown in logs (shown as ***configured***)
• Sensitive field masking — config show masks API keys, tokens, and passwords
• File locking — concurrent credential writes are atomic (safe in --parallel mode)
• Timing-safe auth — relay token comparison uses hmac.compare_digest()
• Rate limiting — relay server limits to 30 requests/60s per IP
• Input validation — relay validates email format and field lengths via Pydantic
• SQLite WAL mode — safe concurrent access with busy_timeout (no connection leaks)
• Secure default binding — relay defaults to 127.0.0.1 (localhost only)
• HTTPS warning — startup warns when relay runs without TLS
• Trust transparency — first-run wizard warns about shared public worker

Recommendation: For production use, always self-host your temp mail worker and use HTTPS (nginx/caddy) or SSH tunnel for relay.

🔗 Related

• cf-mail-worker — Self-hosted temp mail API (Cloudflare Workers + D1)
• bulk-temp-mail — Full temp mail service with React frontend

📄 License

MIT — see LICENSE

⚠️ Disclaimer

This tool is for educational and research purposes only. Use responsibly and in accordance with applicable terms of service.