Scrawlee
📢 Want your service featured in Scrawlee?
If you want me to use your service, sponsor Scrawlee, or partner up — hit me up at saimsajidirl@gmail.com
Scrawlee will recommend your service and ship a special, built-in option to use it — with minimal code required from the developer.
Most scrapers get blocked. Scrawlee doesn't.
While every other HTTP client announces itself through its TLS handshake, Scrawlee impersonates Chrome, Edge, and Safari at the network layer — the exact fingerprints anti-bot systems trust. It rotates and self-heals proxy pools, survives rate limits with exponential back-off, and hands you parsed data the instant a response lands. Hit a JavaScript wall? One flag flips it to a real Chromium instance, stealth-patched via Playwright, with best-effort Cloudflare Turnstile handling. Built for engineers who are done fighting infrastructure and just want the data.
Table of Contents
- Project Overview
- How It Works
- Tech Stack & Dependencies
- Core Features
- Installation
- Technical How-To Guide
- FAQ
- Contributing
- License
1. Project Overview
Modern websites defend themselves with a layered stack of bot-detection systems: TLS fingerprinting checks, HTTP/2 frame analysis, browser-feature detection, Cloudflare Turnstile, Datadome, FingerprintJS, and IP reputation databases. A plain requests call fails every single one of these checks before the server even reads the URL.
Scrawlee is designed to win those checks by default.
It is a stealth-focused Python scraping library that impersonates real browser TLS fingerprints at the network level, generates matching browser-grade HTTP headers, rotates and quarantines proxies automatically, retries transient failures with exponential back-off, and wraps every response in an auto-parsing layer so you get typed JSON dictionaries or live DOM objects — never raw strings — without writing any parsing glue code yourself.
When HTTP-level stealth is not enough, Scrawlee can drive a real Chromium instance through its BrowserClient, backed by Playwright. This unlocks full JavaScript rendering, human-like interactions, best-effort Cloudflare Turnstile handling, cookie persistence across sessions, and low-bandwidth fetch-API scraping — all through the same clean response interface.
Problems Scrawlee solves
| Problem | Scrawlee's answer |
|---|---|
| TLS fingerprint blocklists | curl_cffi impersonates Chrome/Edge/Safari at the TLS layer |
| Bot-detection HTTP headers | Dynamically generated Sec-Fetch-* + Accept-Language headers keyed to the active fingerprint |
| IP bans and rate-limiting | ProxyManager with quarantine, automatic fail-over, and three rotation strategies |
| Transient server errors | Configurable retry loop with exponential back-off and random jitter |
| Manual JSON / HTML parsing | ScrawleeResponse.auto returns the right object for the content type |
| JavaScript-rendered pages | BrowserClient drives a real Chromium instance via Playwright |
| Cloudflare Turnstile challenges | BrowserClient(bypass_cloudflare=True) attempts a best-effort Turnstile click |
| Bandwidth costs at scale | BrowserClient.fetch() uses the browser's native fetch API (up to 97% less data) |
2. How It Works
2.1 HTTP request lifecycle (ScrawleeClient / AsyncScrawleeClient)
ScrawleeClient.get(url)
│
▼
┌──────────────────────────────────────────────────────────┐
│ 1. ProxyManager.get_proxy() │
│ • Checks quarantine list (5-minute cooldown default) │
│ • Applies round_robin / random / sticky strategy │
│ • Falls back to direct connection if pool is empty │
└────────────────────────┬─────────────────────────────────┘
│ proxy dict (or None)
▼
┌──────────────────────────────────────────────────────────┐
│ 2. curl_cffi Session.request() │
│ • Sends request with active TLS fingerprint │
│ (chrome110 / chrome120 / edge101 / safari15_5) │
│ • Attaches forged Sec-Fetch-* + Accept-Language │
│ headers that match the chosen fingerprint │
└────────────────────────┬─────────────────────────────────┘
│ raw Response
▼
┌──────────────────────────────────────────────────────────┐
│ 3. Retry / back-off logic │
│ • If status_code ∈ retry_status_codes → re-raise │
│ • If retry_exceptions raised → mark proxy failed │
│ and quarantine it; sleep exponential + jitter │
│ • Repeat up to max_retries times │
└────────────────────────┬─────────────────────────────────┘
│ successful raw Response
▼
┌──────────────────────────────────────────────────────────┐
│ 4. ScrawleeResponse auto-parse │
│ • Content-Type: application/json → .data (dict) │
│ • Content-Type: text/html → .html (selectolax)│
│ .lxml (lxml) │
│ • .auto returns the most useful parsed form │
└──────────────────────────────────────────────────────────┘
2.2 Browser request lifecycle (BrowserClient)
BrowserClient.get(url)
│
▼
┌──────────────────────────────────────────────────────────┐
│ 1. Identity + GeoIP resolution │
│ • Picks (or reuses a pinned) fingerprints.Identity — │
│ one self-consistent UA/GPU/core-count/viewport combo │
│ • With geo_match=True and a proxy, resolves timezone/ │
│ locale/lat-long via ipwho.is (otherwise no lookup) │
│ and falls back to identity defaults on failure │
└────────────────────────┬─────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 2. Lazy Playwright launch (_ensure_driver) │
│ • Spawns or reuses a Chromium instance/context built │
│ from the identity + geo data │
│ • Injects the stealth init script: navigator.webdriver,│
│ hardwareConcurrency/deviceMemory, WebGL vendor/ │
│ renderer, seeded canvas/audio noise, plugins, screen │
│ • Configures proxy, profile, image/CSS blocking │
│ • Loads cookies only if an explicit profile or │
│ auto_save_profile=True is configured │
└────────────────────────┬─────────────────────────────────┘
│ Page ready
▼
┌──────────────────────────────────────────────────────────┐
│ 3. page.goto(url) │
│ • Navigates via Google referrer for stealth OR │
│ directly — depending on via_google flag │
│ • Best-effort Turnstile checkbox click when │
│ bypass_cloudflare=True │
└────────────────────────┬─────────────────────────────────┘
│ page.content() (fully rendered)
▼
┌──────────────────────────────────────────────────────────┐
│ 4. BrowserResponse construction + optional cookie save │
│ • Passes rendered HTML to selectolax HTMLParser │
│ • Passes rendered HTML to lxml.html.fromstring │
│ • .html, .lxml, .text, .auto ready for extraction │
│ • Saves cookies only when auto_save_profile=True │
│ and the page doesn't look blocked │
└──────────────────────────────────────────────────────────┘
3. Tech Stack & Dependencies
Core dependencies
| Library | Version | Role | Why it was chosen |
|---|---|---|---|
| curl_cffi | >=0.7.1 |
TLS impersonation + HTTP client | Binds to libcurl with BoringSSL to produce byte-exact TLS ClientHello messages that match real browser fingerprints. Standard requests / httpx use OpenSSL and produce a distinct fingerprint that anti-bot systems recognise immediately. |
| selectolax | >=0.3.17 |
Fast CSS selector HTML parsing | Written in C via Cython; benchmarks 10–50× faster than BeautifulSoup for DOM traversal. The natural choice for high-throughput HTML extraction. |
| lxml | >=5.1.0 |
XPath HTML parsing | The de-facto standard for complex XPath queries in Python. Complements selectolax by exposing the full XPath axis model for cases where CSS selectors are insufficient. |
| loguru | >=0.7.2 |
Structured logging | Zero-config, coloured, structured logging with no boilerplate. Provides debug, warning, and error output across proxy rotation and retry events without requiring users to configure Python's logging module. |
| playwright | >=1.40.0 |
Chromium browser automation | Drives a real, evergreen Chromium build with a first-class Python API. BrowserClient launches it lazily, rotates a self-consistent fingerprint identity (scrawlee.fingerprints), injects a canvas/WebGL/audio stealth script (scrawlee.stealth), and layers proxy/profile/image-blocking/GeoIP config on top. Part of Scrawlee's core — not optional. |
Build tools
| Tool | Role |
|---|---|
| hatchling | PEP 517 build backend |
| pytest | Test runner |
| build + twine | Package distribution |
Runtime requirements
- Python 3.8+
- Chromium — installed via
playwright install chromiumafterpip install scrawlee(see Installation)
4. Core Features
HTTP / TLS layer
- TLS fingerprint impersonation — Impersonates
chrome110,chrome120,edge101, orsafari15_5at the TLSClientHellolevel viacurl_cffi, making requests indistinguishable from a real browser at the network layer. - Random fingerprint selection — Passing
impersonate="random"(the default) picks a different browser fingerprint on eachScrawleeClientinstantiation to prevent fingerprint entropy clustering. - Dynamic organic headers —
_generate_dynamic_headers()automatically attachesAccept-Language,Sec-Fetch-Dest,Sec-Fetch-Mode,Sec-Fetch-Site,Sec-Fetch-User, andUpgrade-Insecure-Requestsvalues that are consistent with the chosen browser identity. - Persistent session — A single
curl_cffi.requests.Sessionis reused across all calls, preserving cookies and connection pools exactly as a browser would. - Full HTTP method support —
get(),post(),put(),patch(),delete(),head(),options().
Proxy management
- Three rotation strategies —
round_robin(default),random, andstickyviaProxyManager(rotation_strategy=...). - Automatic proxy quarantine — Failed proxies are removed from the active pool for a configurable cooldown period (default 300 seconds) via
mark_failed()/_clean_quarantine(). - Full-pool fallback — If all proxies are quarantined,
get_proxy()temporarily re-admits the full pool rather than hanging. - Credential URL encoding —
add_proxy()URL-encodes usernames and passwords withquote_plusto handle special characters in credentials. - Duplicate detection — Re-adding an identical proxy to the pool is silently ignored.
Reliability
- Configurable retry loop —
max_retries(default 3) controls how many times a failing request is re-attempted. - Configurable retry triggers —
retry_status_codes(default:{429, 500, 502, 503, 504}) retries selected HTTP responses. By default, only transient curl network errors are retried; passretry_exceptionsto explicitly choose a broader or narrower exception policy. After retries are exhausted, the original exception type is preserved. - Exponential back-off with jitter — Sleep time doubles on every retry (
retry_backoff_base * 2^n) plus a randomuniform(0, retry_jitter_max)offset to prevent thundering-herd on shared proxy pools.
Response auto-parsing (ScrawleeResponse)
- Auto-detection — Inspects the
Content-Typeresponse header. JSON is parsed immediately; HTML trees are built independently on first access to.html,.lxml, or.auto, so unused parsers incur no cost. Recognises all JSON subtypes (application/json,application/hal+json, etc.). .autoproperty — Returns a Pythondictfor JSON APIs or aselectolax.parser.HTMLParserfor HTML pages; falls back to the raw text string..dataproperty — Exposes the parsed JSON body as a native Pythondict..htmlproperty — Exposes a liveselectolax.parser.HTMLParserfor CSS selector-based DOM traversal..lxmlproperty — Exposes anlxml.html.HtmlElementfor XPath-based extraction.- Transparent delegation — All other attributes (
status_code,url,headers,cookies,text,content, etc.) are transparently delegated to the underlyingcurl_cffiresponse object.
Async support (AsyncScrawleeClient)
asyncio-native — Usescurl_cffi.requests.AsyncSessionso thousands of concurrent requests can be dispatched withasyncio.gather()without thread-pool overhead.- Identical API — Every method mirrors
ScrawleeClientwithasync/await;asyncio.sleep()is used in place oftime.sleep()during back-off. - Async context manager —
async with AsyncScrawleeClient() as client:correctly closes theAsyncSessionwithawait.
Browser automation (BrowserClient)
- Real Chromium, stealth patched — Launches an actual Chromium instance via Playwright with a stealth init script suppressing
navigator.webdriver, and normalisingnavigator.languages/navigator.plugins/window.chrome. - Rotating, self-consistent fingerprint identities — Each session picks a
scrawlee.fingerprints.Identity: one bundle of UA,Sec-CH-UAclient hints, platform, core count, device memory, viewport/screen, and WebGL vendor/renderer that all describe the same imaginary machine. Layers are never mixed independently — a mismatched identity (e.g. a laptop UA with a 32-core hint) is more detectable than no spoofing at all. Pin one withidentity="chrome131_win_desktop"or list them viaBrowserClient.available_identities(). - Canvas / WebGL / AudioContext noise — The stealth script patches
getImageData/toDataURL,AudioBuffer.getChannelData, andgetParameterto return the identity's spoofed GPU strings plus small deterministic noise, seeded per identity so it's stable within and across sessions using that persona — real hardware doesn't change its canvas hash mid-visit. - Optional GeoIP matching — With
proxyandgeo_match=True, a lookup tohttps://ipwho.is/is sent through the proxy to set the browser context's timezone, locale, and geolocation. This discloses a connection to that third party;geo_match=Falseis the default and performs no lookup. A failed lookup falls back to identity defaults. get(url)— Full Chromium navigation; returns aBrowserResponsewith selectolax and lxml parsers already populated.- Google-referrer stealth —
via_google=True(default) routes the initial visit through a Google search referrer, passing referrer-policy checks on many sites. - Best-effort Cloudflare Turnstile handling —
bypass_cloudflare=Trueattempts to locate and click the Turnstile checkbox iframe. This is not a guaranteed solve — there is no bundled captcha-solving service. fetch(url)— Uses the browser's built-infetch()API to retrieve subsequent pages without full navigation (up to 97% bandwidth reduction); inherits the established session and cookies.run(task_fn)— Accepts any(driver: playwright.sync_api.Page) -> Anycallable for arbitrary browser interactions: form submission, clicking, typing, scrolling, JS execution, iframe access, CDP commands, etc.- Chromium profile persistence —
profile="my_profile"persists the full Chromium user-data directory (vialaunch_persistent_context), or, withtiny_profile=True, a cookie-only lightweight variant saved as JSON. - Opt-in profile save-on-success —
auto_save_profile=Falseby default: no cookie files are read or written without an explicit profile or opt-in. Withauto_save_profile=True, a successfulget()saves each identity's cookies in plaintext JSON under~/.scrawlee/profiles/_auto/and reloads them on later runs. New files are owner-only (0600); existing cookie files are not removed automatically. - Driver reuse —
reuse_driver=True(default) keeps the Chromium instance alive between calls, eliminating per-request browser startup cost. - Resource blocking —
block_images=Trueorblock_images_and_css=Trueintercept requests via Playwright routing to suppress unnecessary network traffic.
What this stealth engine does not do
TLS/JA3/JA4 fingerprints, HTTP/2 frame ordering, and the installed-font list are determined by Chromium's compiled network and font stack — they sit below anything reachable from JavaScript or the Chrome DevTools Protocol, so no amount of add_init_script rotates them. BrowserClient always presents a genuine, unpatched Chromium's real TLS fingerprint rather than a spoofed one, which is actually the honest, consistent choice. CDP-based automation tells (like the Runtime.enable leak) are also outside what a page script can fix; if you need to close that specific gap, swap the playwright.sync_api import in scrawlee/browser.py for the API-compatible patchright package, which patches Chromium itself for exactly this.
Cookie persistence
save_cookies(filepath)— Serialises all current session cookies to a JSON file.load_cookies(filepath)— Rehydrates a session from a previously saved JSON cookie file, enabling authenticated session resumption.
5. Installation
pip install scrawlee
playwright install chromium
The pip install step pulls in Playwright along with Scrawlee's other dependencies. Playwright ships as a Python package but downloads its own Chromium binary separately, so playwright install chromium must be run once after installation before BrowserClient can launch a browser.
From source
git clone https://github.com/<your-username>/scrawlee.git
cd scrawlee
pip install -e ".[dev]"
playwright install chromium
6. Technical How-To Guide
6.1 Basic HTTP requests
Scrawlee's HTTP client is ScrawleeClient. Every request goes through TLS fingerprint impersonation, automatic proxy rotation (if configured), exponential back-off retries, and auto-response parsing — all invisibly.
from scrawlee import ScrawleeClient
# Context manager ensures the session is closed and connections are released.
with ScrawleeClient() as client:
response = client.get("https://httpbin.org/get")
print(response.status_code) # 200
print(response.url) # https://httpbin.org/get
print(response.headers) # dict of response headers
All HTTP methods
with ScrawleeClient() as client:
# GET — retrieve a resource
r = client.get("https://api.example.com/items")
# POST — create a resource, send a JSON body
r = client.post("https://api.example.com/items", json={"name": "widget", "price": 9.99})
# POST — submit HTML form data
r = client.post("https://example.com/login", data={"username": "me", "password": "secret"})
# PUT — full replacement of a resource
r = client.put("https://api.example.com/items/42", json={"name": "updated widget"})
# PATCH — partial update
r = client.patch("https://api.example.com/items/42", json={"active": False})
# DELETE
r = client.delete("https://api.example.com/items/42")
# HEAD — fetch headers only, no body (useful for checking if a URL exists)
r = client.head("https://example.com/large-file.zip")
print(r.headers.get("Content-Length"))
# OPTIONS — discover allowed methods
r = client.options("https://api.example.com/items")
print(r.headers.get("Allow"))
Passing extra curl_cffi options
Any keyword argument accepted by curl_cffi.requests.Session.request() passes straight through — query parameters, custom headers, timeouts, redirect control, and more:
with ScrawleeClient() as client:
response = client.get(
"https://api.example.com/search",
params={"q": "scrawlee", "page": 2, "limit": 50},
headers={
"Authorization": "Bearer eyJhbGci...",
"X-Request-ID": "abc-123",
},
timeout=90,
allow_redirects=False,
)
print(response.status_code) # 301 if redirect was not followed
Inspecting the impersonated fingerprint
The active TLS fingerprint is chosen randomly at instantiation time (from chrome110, chrome120, edge101, safari15_5). You can read or pin it:
client = ScrawleeClient()
print(client.impersonate) # e.g. "chrome120"
# Pin a specific fingerprint
client = ScrawleeClient(impersonate="safari15_5")
print(client.impersonate) # always "safari15_5"
6.2 Working with responses
ScrawleeClient returns a ScrawleeResponse. On construction it inspects the Content-Type header and eagerly parses the body — you never call a separate parse step.
Scraping an HTML page — CSS selectors via selectolax
selectolax uses a C-backed Lexbor parser. CSS selector queries are 10–50× faster than BeautifulSoup.
from scrawlee import ScrawleeClient
with ScrawleeClient() as client:
response = client.get("https://news.ycombinator.com/")
page = response.html # selectolax HTMLParser
# css_first returns the first match, or None
top_story = page.css_first(".titleline > a")
print(top_story.text()) # article title
print(top_story.attrs["href"]) # article URL
# css returns a list of all matching nodes
titles = [el.text() for el in page.css(".titleline > a")]
scores = [el.text() for el in page.css(".score")]
authors = [el.text() for el in page.css(".hnuser")]
for title, score, author in zip(titles, scores, authors):
print(f"{score:>8} {author:<20} {title}")
Navigating the DOM tree
selectolax lets you walk parent / sibling / child relationships without building a full tree:
with ScrawleeClient() as client:
response = client.get("https://books.toscrape.com/")
page = response.html
books = []
for article in page.css("article.product_pod"):
title = article.css_first("h3 > a").attrs["title"]
price = article.css_first(".price_color").text()
rating = article.css_first("p.star-rating").attrs["class"].split()[-1]
in_stock = article.css_first(".availability").text().strip()
books.append({"title": title, "price": price, "rating": rating, "in_stock": in_stock})
# Sort by price descending
books.sort(key=lambda b: float(b["price"].replace("£", "").replace("£", "")), reverse=True)
for book in books[:5]:
print(book)
Scraping an HTML page — XPath via lxml
lxml XPath is the right tool for axes (ancestor::, following-sibling::, preceding::) and text node extraction:
from scrawlee import ScrawleeClient
with ScrawleeClient() as client:
response = client.get("https://books.toscrape.com/")
tree = response.lxml # lxml HtmlElement
# XPath axis: find the <p> price inside each article
prices = tree.xpath('//article[@class="product_pod"]//p[@class="price_color"]/text()')
# XPath string functions
titles = tree.xpath('//article//h3/a/@title')
# Conditional XPath: books with 5-star rating only
five_star = tree.xpath('//p[contains(@class,"star-rating Five")]/following-sibling::h3/a/@title')
print("All prices:", prices[:5])
print("5-star titles:", five_star)
Consuming a JSON API
from scrawlee import ScrawleeClient
with ScrawleeClient() as client:
# Single resource
response = client.get("https://jsonplaceholder.typicode.com/posts/1")
post = response.data # plain Python dict
print(post["title"], post["userId"])
# Collection
response = client.get("https://jsonplaceholder.typicode.com/posts")
posts = response.data # list of dicts
print(f"{len(posts)} posts fetched")
# Nested JSON — just use normal dict/list access
response = client.get("https://jsonplaceholder.typicode.com/users/1")
user = response.data
print(user["address"]["city"])
print(user["company"]["name"])
Posting JSON and reading the echo
with ScrawleeClient() as client:
response = client.post(
"https://jsonplaceholder.typicode.com/posts",
json={"title": "Scrawlee rocks", "body": "stealth scraping", "userId": 1},
)
created = response.data
print(created["id"]) # the server-assigned ID
print(created["title"]) # echoed back
Using .auto for content-agnostic code
.auto returns a dict for JSON, an HTMLParser for HTML, or raw text as a fallback — useful for utility functions that handle multiple endpoint types:
from scrawlee import ScrawleeClient
def fetch_and_dump(url: str):
with ScrawleeClient() as client:
response = client.get(url)
result = response.auto
if isinstance(result, dict):
# JSON endpoint
return result
else:
# HTML endpoint — selectolax HTMLParser
return {"text": result.text()}
print(fetch_and_dump("https://jsonplaceholder.typicode.com/posts/1"))
print(fetch_and_dump("https://example.com"))
Accessing raw response properties
ScrawleeResponse transparently delegates every attribute not explicitly defined to the underlying curl_cffi response:
with ScrawleeClient() as client:
r = client.get("https://httpbin.org/response-headers?X-Powered-By=Scrawlee")
print(r.status_code) # 200
print(r.url) # final URL after redirects
print(r.headers["Content-Type"]) # "application/json"
print(r.headers.get("X-Powered-By")) # "Scrawlee"
print(r.elapsed.total_seconds()) # request round-trip time
print(len(r.content)) # raw bytes length
print(r.encoding) # detected charset
print(dict(r.cookies)) # cookie jar as plain dict
6.3 Async requests
AsyncScrawleeClient is powered by curl_cffi.requests.AsyncSession — backed by libcurl's multi-handle non-blocking interface. Every method mirrors ScrawleeClient exactly, only with async/await. The exponential back-off uses await asyncio.sleep() so the event loop is never blocked during retries.
Fire-and-gather pattern
import asyncio
from scrawlee import AsyncScrawleeClient
async def scrape_all(urls: list[str]):
async with AsyncScrawleeClient() as client:
tasks = [client.get(url) for url in urls]
responses = await asyncio.gather(*tasks)
return responses
urls = [
"https://httpbin.org/get",
"https://httpbin.org/ip",
"https://httpbin.org/headers",
"https://httpbin.org/user-agent",
"https://httpbin.org/uuid",
]
responses = asyncio.run(scrape_all(urls))
for r in responses:
print(r.status_code, r.url)
Controlled concurrency with asyncio.Semaphore
When scraping hundreds or thousands of URLs, unbounded gather() will exhaust file descriptors and proxy bandwidth. Use a semaphore to cap the number of in-flight requests:
import asyncio
from scrawlee import AsyncScrawleeClient, ProxyManager
async def scrape_with_limit(urls: list[str], concurrency: int = 25):
pm = ProxyManager(rotation_strategy="random")
pm.add_proxy("10.0.0.1", "3128", "user", "pass")
pm.add_proxy("10.0.0.2", "3128", "user", "pass")
sem = asyncio.Semaphore(concurrency)
async with AsyncScrawleeClient(proxy_manager=pm) as client:
async def bounded_get(url: str):
async with sem:
return await client.get(url)
return await asyncio.gather(*[bounded_get(u) for u in urls])
urls = [f"https://example.com/page/{i}" for i in range(200)]
results = asyncio.run(scrape_with_limit(urls, concurrency=30))
print(f"Fetched {len(results)} pages")
Async POST requests
import asyncio
from scrawlee import AsyncScrawleeClient
async def submit_forms(payloads: list[dict]):
async with AsyncScrawleeClient() as client:
tasks = [
client.post("https://api.example.com/submit", json=payload)
for payload in payloads
]
responses = await asyncio.gather(*tasks)
return [r.data for r in responses]
results = asyncio.run(submit_forms([
{"query": "apple"},
{"query": "banana"},
{"query": "cherry"},
]))
print(results)
Producer-consumer pattern for large crawls
For very large link graphs, a queue-based producer-consumer avoids building the full URL list in memory:
import asyncio
from scrawlee import AsyncScrawleeClient
async def crawl_queue(seed_urls: list[str], concurrency: int = 20):
queue: asyncio.Queue = asyncio.Queue()
results = []
visited = set()
for url in seed_urls:
await queue.put(url)
visited.add(url)
async with AsyncScrawleeClient() as client:
async def worker():
while True:
url = await queue.get()
try:
r = await client.get(url)
results.append((url, r.status_code))
# discover more links
if r.html:
for a in r.html.css("a[href]"):
href = a.attrs.get("href", "")
if href.startswith("https://example.com") and href not in visited:
visited.add(href)
await queue.put(href)
finally:
queue.task_done()
workers = [asyncio.create_task(worker()) for _ in range(concurrency)]
await queue.join()
for w in workers:
w.cancel()
return results
results = asyncio.run(crawl_queue(["https://example.com"]))
print(f"Crawled {len(results)} pages")
6.4 Proxy rotation
ProxyManager maintains a pool of proxies, routes requests through them according to the chosen strategy, and automatically quarantines proxies that cause failures.
Adding proxies and choosing a rotation strategy
from scrawlee import ScrawleeClient, ProxyManager
pm = ProxyManager(rotation_strategy="round_robin") # the default
pm.add_proxy("192.168.1.10", "8080") # unauthenticated
pm.add_proxy("10.0.0.1", "3128", "user", "p@$$w0rd") # with credentials
pm.add_proxy("203.0.113.5", "9999", "alice", "hunter2")
with ScrawleeClient(proxy_manager=pm) as client:
r = client.get("https://httpbin.org/ip")
print(r.data["origin"]) # shows the proxy's exit IP
Strategy comparison
# Round-robin — cycles 1→2→3→1→2→3 regardless of which requests succeed
pm_rr = ProxyManager(rotation_strategy="round_robin")
# Random — picks any healthy proxy at random on every request
# Best for large pools where any IP works equally well
pm_rand = ProxyManager(rotation_strategy="random")
# Sticky — always uses the first healthy proxy
# Use when the target site tracks sessions by IP (e.g., shopping carts, login pages)
pm_sticky = ProxyManager(rotation_strategy="sticky")
Verifying which proxy was used
from scrawlee import ScrawleeClient, ProxyManager
pm = ProxyManager(rotation_strategy="round_robin")
pm.add_proxy("198.51.100.1", "3128")
pm.add_proxy("198.51.100.2", "3128")
pm.add_proxy("198.51.100.3", "3128")
with ScrawleeClient(proxy_manager=pm) as client:
for i in range(6):
r = client.get("https://httpbin.org/ip")
print(f"Request {i+1}: exit IP = {r.data['origin']}")
# Output alternates through the three proxies: 1, 2, 3, 1, 2, 3
Automatic quarantine and self-healing
When a request raises a retryable exception while a proxy is active, ProxyManager.mark_failed() is called automatically. The proxy is moved to quarantine with a deadline of quarantine_time seconds from now. get_proxy() calls _clean_quarantine() internally on every invocation to re-admit proxies whose cooldown has elapsed.
# Default quarantine is 300 seconds (5 minutes).
# Extend it for stricter IP health requirements:
pm = ProxyManager()
pm.quarantine_time = 900 # 15 minutes
# Reduce it during development / testing:
pm.quarantine_time = 30
If every proxy is simultaneously quarantined, get_proxy() temporarily re-admits the full pool rather than returning None and blocking the request:
# This behaviour is automatic — no code needed on your side.
# Scrawlee logs a warning:
# "All proxies are quarantined; temporarily reusing full proxy pool."
Adding many proxies from a list
from scrawlee import ProxyManager
proxy_lines = [
"203.0.113.10:3128:alice:pass1",
"203.0.113.11:3128:alice:pass2",
"203.0.113.12:3128", # no auth
]
pm = ProxyManager(rotation_strategy="random")
for line in proxy_lines:
parts = line.split(":")
if len(parts) == 4:
ip, port, user, pwd = parts
pm.add_proxy(ip, port, user, pwd)
else:
ip, port = parts
pm.add_proxy(ip, port)
Combining proxy rotation with async
import asyncio
from scrawlee import AsyncScrawleeClient, ProxyManager
async def run():
pm = ProxyManager(rotation_strategy="random")
pm.add_proxy("10.0.0.1", "3128", "u", "p")
pm.add_proxy("10.0.0.2", "3128", "u", "p")
async with AsyncScrawleeClient(proxy_manager=pm) as client:
tasks = [client.get(f"https://httpbin.org/ip") for _ in range(10)]
results = await asyncio.gather(*tasks)
exit_ips = [r.data["origin"] for r in results]
print(set(exit_ips)) # should show multiple IPs
asyncio.run(run())
6.5 Browser automation
BrowserClient drives a real Chromium instance through Playwright. It injects a stealth init script that suppresses navigator.webdriver and normalises navigator.languages/navigator.plugins/window.chrome before the page ever loads. BrowserClient is a core part of Scrawlee; it only requires that playwright install chromium was run once after installation (see Installation).
Basic browser navigation
from scrawlee import BrowserClient
with BrowserClient() as client:
response = client.get("https://example.com")
# Identical parsing interface to ScrawleeResponse
heading = response.html.css_first("h1").text()
links = [a.attrs["href"] for a in response.html.css("a[href]")]
print(heading)
print(links)
Handling Cloudflare Turnstile
bypass_cloudflare=True makes a best-effort attempt to locate the Turnstile challenge iframe and click its checkbox. Unlike a dedicated captcha-solving service, this is not guaranteed to pass every challenge — it only handles the simple "click to verify" Turnstile widget:
from scrawlee import BrowserClient
with BrowserClient(bypass_cloudflare=True, block_images=True) as client:
response = client.get("https://cloudflare-protected-site.com")
print(response.html.css_first("h1").text())
# lxml XPath works identically
prices = response.lxml.xpath('//span[contains(@class,"price")]/text()')
print(prices)
Google-referrer stealth
By default (via_google=True) every get() call routes the initial navigation through a Google search referrer. This passes referrer-policy checks on sites that verify document.referrer or inspect the Referer HTTP header:
# Default: via_google=True — navigates via Google referrer
with BrowserClient() as client:
r = client.get("https://example.com/article")
# Disable when you need a direct navigation (e.g., internal tools, APIs)
with BrowserClient(via_google=False) as client:
r = client.get("https://intranet.example.com/dashboard")
# Override per-call
with BrowserClient(via_google=True) as client:
r = client.get("https://example.com/", via_google=False)
Dynamic cookie polling with poll_for_cookie
JavaScript-heavy sites often set authentication cookies (e.g. cf_clearance) asynchronously after the initial page load. Instead of sleeping for a fixed duration, BrowserClient.get() can poll the browser's cookie jar and exit early once a target cookie is present and its value has stabilized:
from scrawlee import BrowserClient
with BrowserClient(wait=60) as client:
# Polls for the 'cf_clearance' cookie every 1 second.
# If the cookie appears and stays unchanged for 2 consecutive checks,
# get() returns immediately — even if the 60-second timeout hasn't elapsed.
response = client.get(
"https://cloudflare-protected-site.com",
poll_for_cookie="cf_clearance",
poll_interval=1.0, # seconds between checks
poll_stable=2, # required stable reads before exit
)
This is useful for scraping sites that set session tokens via XHR after the DOM loads. The default poll_interval is 1.0 second and poll_stable is 2 — meaning the cookie must be present and unchanged for 2 consecutive polls.
Low-bandwidth bulk scraping with fetch()
fetch() uses the browser's native fetch API to retrieve subsequent pages without triggering a full navigation. It can reuse browser connections, but DNS/TLS work may still occur when a new connection is needed. It skips loading subresources for each fetched document.
fetch() runs in the current page and obeys browser same-origin/CORS rules. It works reliably for the navigated site's origin; cross-origin responses require that site's CORS permission. It inherits applicable session cookies, but does not automatically send CSRF tokens stored in page state. For a cross-origin GET, use request(url) instead: it uses Playwright's HTTP request context, shares the browser context's cookies, and is not an in-page/browser-network request. request() is unavailable when a browser proxy is configured, because that transport cannot guarantee use of the browser's proxy.
For same-origin pages, fetch() is a low-bandwidth way to iterate through many pages of a logged-in site:
from scrawlee import BrowserClient
tickers = ["GOOG", "MSFT", "AMZN", "NVDA", "META", "TSLA", "AAPL"]
with BrowserClient(block_images=True) as client:
# The first get() loads the full page and establishes cookies
client.get("https://finance.yahoo.com/quote/AAPL/")
for ticker in tickers:
# Subsequent calls use browser fetch — only raw HTML transferred
resp = client.fetch(f"https://finance.yahoo.com/quote/{ticker}/")
price = resp.html.css_first('[data-testid="qsp-price"]').text()
change = resp.html.css_first('[data-testid="qsp-price-change"]').text()
print(f"{ticker:6s} {price:>10} {change}")
For cross-origin GETs without a browser proxy, client.request("https://example.com/") returns the same BrowserResponse type without browser CORS restrictions. Cookies are only attached to matching domains.
For use inside a running event loop (including Jupyter and async web applications), use the separate async Playwright client:
from scrawlee import AsyncBrowserClient
async with AsyncBrowserClient(via_google=False) as client:
response = await client.get("https://example.com/")
same_origin = await client.fetch("https://example.com/another-page")
other_origin = await client.request("https://example.org/")
result = await client.run(lambda page: page.title())
AsyncBrowserClient.run() takes a callable returning an awaitable. Its driver is a Playwright async Page. Async mode does not support bypass_cloudflare=True.
Arbitrary interactions with run()
run() accepts any (driver: playwright.sync_api.Page) -> Any callable — driver here is a native Playwright Page, so the full Playwright API (locators, fill, click, evaluate, iframe access, CDP sessions via page.context.new_cdp_session(), etc.) is available directly:
from scrawlee import BrowserClient, BrowserResponse
# --- Example 1: search form submission ---
def search_google(driver):
driver.fill('textarea[name="q"]', "scrawlee python scraping")
driver.press('textarea[name="q"]', "Enter")
driver.wait_for_timeout(1000) # human-like pause before reading DOM
return BrowserResponse(driver.content(), driver.url)
with BrowserClient() as client:
result = client.run(search_google)
for a in result.html.css("h3"):
print(a.text())
# --- Example 2: infinite scroll ---
def scroll_to_bottom(driver):
prev_height = 0
while True:
driver.evaluate("window.scrollTo(0, document.body.scrollHeight);")
driver.wait_for_timeout(1500)
new_height = driver.evaluate("document.body.scrollHeight")
if new_height == prev_height:
break
prev_height = new_height
return BrowserResponse(driver.content(), driver.url)
with BrowserClient() as client:
client.get("https://example-infinite-scroll.com/feed")
result = client.run(scroll_to_bottom)
items = result.html.css(".feed-item")
print(f"Found {len(items)} items after full scroll")
# --- Example 3: login then scrape dashboard ---
def login(driver):
driver.fill('#username', 'myuser@example.com')
driver.fill('#password', 'mysecretpassword')
driver.click('button[type="submit"]')
driver.wait_for_selector('.dashboard-header', timeout=15000) # wait up to 15s
return BrowserResponse(driver.content(), driver.url)
with BrowserClient(tiny_profile=True, profile="my_account") as client:
result = client.run(login)
username_display = result.html.css_first(".welcome-user").text()
print(f"Logged in as: {username_display}")
# Profile is saved — next run skips login entirely
JavaScript execution
from scrawlee import BrowserClient, BrowserResponse
with BrowserClient() as client:
client.get("https://example.com")
driver = client.driver
# Execute arbitrary JS and read the return value
scroll_height = driver.evaluate("document.body.scrollHeight")
print(f"Page height: {scroll_height}px")
# Manipulate the DOM
driver.evaluate(
"document.querySelectorAll('.cookie-banner').forEach(el => el.remove())"
)
# Extract data via JS (useful for values not in the HTML source)
local_storage = driver.evaluate(
"JSON.stringify(Object.entries(localStorage))"
)
print(local_storage)
response = BrowserResponse(driver.content(), driver.url)
items = response.html.css(".item")
print(f"{len(items)} items after DOM manipulation")
Chromium profile persistence
Profiles allow you to persist authenticated state across script runs. On the first run you log in; on all subsequent runs Scrawlee picks up the saved session. Full Chromium profiles store browser state on disk; tiny profiles store cookies as plaintext JSON under ~/.scrawlee/profiles/ (owner-only permissions for newly written files). Treat both as sensitive, and avoid profiles if disk persistence is not required:
# Full profile — a persistent Chromium user-data directory.
# Stores cookies, localStorage, IndexedDB, sessionStorage, browser history.
with BrowserClient(profile="amazon_account") as client:
r = client.get("https://www.amazon.com/gp/css/order-history")
# If the profile was already logged in, orders load immediately.
orders = r.html.css(".order-info")
print(f"{len(orders)} orders found")
# Tiny profile — cookies only, saved as a small JSON file.
# Recommended when managing hundreds of accounts.
with BrowserClient(profile="account_042", tiny_profile=True) as client:
r = client.get("https://example.com/dashboard")
print(r.html.css_first(".user-greeting").text())
Blocking images and CSS to reduce bandwidth
# block_images — suppresses image requests only
with BrowserClient(block_images=True) as client:
r = client.get("https://example.com") # 40–60% less bandwidth, same HTML
# block_images_and_css — suppresses images, stylesheets, and fonts
# Best for pure data extraction where visual rendering is irrelevant
with BrowserClient(block_images_and_css=True) as client:
r = client.get("https://example.com") # up to 80% less bandwidth
Rotating and pinning fingerprint identities
By default every BrowserClient picks a random, internally-consistent identity from the pool. List the available personas, or pin one explicitly when you need the same persona across multiple client instances:
from scrawlee import BrowserClient
print(BrowserClient.available_identities())
# ('chrome120_win_desktop', 'chrome131_win_desktop', 'chrome124_win_laptop',
# 'edge120_win_desktop', 'edge131_win_desktop', 'chrome_android_mobile')
with BrowserClient(identity="chrome_android_mobile") as client:
r = client.get("https://example.com")
print(client.identity) # "chrome_android_mobile"
BrowserClient(impersonate=...) is a legacy alias for identity=...; both must
name the same available identity if supplied together. Unlike ScrawleeClient,
BrowserClient only accepts the Chromium-family keys returned by
available_identities().
Set http2=False on either HTTP client to limit curl_cffi to HTTP/1.1, or on
either browser client to launch Chromium with HTTP/2 disabled. The default is True.
GeoIP-matched timezone, locale, and geolocation
BrowserClient and AsyncBrowserClient accept one fixed proxy URL per browser instance; neither integrates with ProxyManager or rotates browser proxies. .env.example is only a sample: the library does not load it or interpret its PROXY_* keys; pass the browser proxy URL explicitly. By default geo_match=False: no GeoIP lookup occurs. Opt in with geo_match=True to query https://ipwho.is/ through your proxy for its exit IP, timezone, locale, and coordinates. This contacts a third party before navigation; when the lookup fails, the identity's static defaults are used:
from scrawlee import BrowserClient
with BrowserClient(proxy="http://user:pass@de-proxy-host:8080", geo_match=True) as client:
r = client.get("https://example.com")
# The page's Intl.DateTimeFormat().resolvedOptions().timeZone will read
# something like "Europe/Berlin" instead of the machine's real timezone.
# Disable if you'd rather keep the identity's static defaults
with BrowserClient(proxy="http://proxy-host:8080", geo_match=False) as client:
r = client.get("https://example.com")
Automatic profile save-on-success
Without an explicit profile=, cookies stay in memory by default. Set auto_save_profile=True to load and save cookies in plaintext JSON under ~/.scrawlee/profiles/_auto/<identity>.json after a get() call whose response doesn't look blocked. Newly written cookie files are restricted to the current user (0600), but they are not encrypted; disabling the option does not delete previously saved files:
from scrawlee import BrowserClient
# First run: cold session, logs in via a normal flow, cookies get saved
# automatically since the resulting page didn't look blocked.
with BrowserClient(identity="chrome131_win_desktop", auto_save_profile=True) as client:
client.get("https://example.com/dashboard")
# Later run, same identity: picks up the saved cookies automatically.
with BrowserClient(identity="chrome131_win_desktop", auto_save_profile=True) as client:
r = client.get("https://example.com/dashboard")
# Opt out entirely for a fully stateless run
with BrowserClient(auto_save_profile=False) as client:
r = client.get("https://example.com")
Accessing the raw Playwright Page
For capabilities not exposed by get(), fetch(), or run() — request interception, CDP commands, network condition simulation, cookie injection, etc. — access the Page object directly after the first navigation:
from scrawlee import BrowserClient, BrowserResponse
with BrowserClient() as client:
client.get("https://example.com")
driver = client.driver # playwright.sync_api.Page instance
# Scroll
driver.mouse.wheel(0, 800)
driver.evaluate("window.scrollTo(0, document.body.scrollHeight)")
# Interact
driver.click(".load-more-button")
driver.hover('.tooltip-trigger')
# Wait for dynamic content
driver.wait_for_selector('.dynamic-results', timeout=10000)
# Read updated DOM
response = BrowserResponse(driver.content(), driver.url)
results = response.html.css(".result-card")
print(f"{len(results)} results loaded")
6.6 Advanced configuration
Custom TLS fingerprint
Scrawlee supports four browser identities for TLS impersonation. The default ("random") picks one at random per client instance to prevent fingerprint entropy clustering across many scrapers:
from scrawlee import ScrawleeClient
# Pin a specific fingerprint
for identity in ["chrome110", "chrome120", "edge101", "safari15_5"]:
with ScrawleeClient(impersonate=identity) as client:
r = client.get("https://httpbin.org/headers")
# JA3/JA4 hash will match the named browser
print(identity, r.data["headers"].get("User-Agent", "")[:40])
Tuning retry behaviour
The default retry settings are conservative. For mission-critical scrapers against flaky APIs, increase max_retries and tune the back-off curve:
from scrawlee import ScrawleeClient
from curl_cffi.requests import RequestsError
# Aggressive retry with wide jitter to avoid thundering-herd against shared proxies
with ScrawleeClient(
max_retries=7,
retry_status_codes={403, 429, 500, 502, 503, 504, 520, 524},
retry_exceptions=(RequestsError, ConnectionError, TimeoutError, OSError),
retry_backoff_base=1.5, # 1.5s → 3s → 6s → 12s → 24s → 48s → 96s
retry_jitter_max=5.0, # add up to 5s of uniform random noise
timeout=60,
) as client:
response = client.get("https://unstable-api.example.com/expensive-endpoint")
print(response.data)
Understanding the back-off formula
On retry number n (1-indexed), Scrawlee sleeps for:
$$ t_n = (\text{retry_backoff_base} \times 2^{n-1}) + \text{uniform}(0,\ \text{retry_jitter_max}) $$
With defaults (base=1.0, jitter_max=1.0) and 3 retries:
| Retry | Base sleep | + jitter (max) | Total (max) |
|---|---|---|---|
| 1 | 1.0 s | 1.0 s | 2.0 s |
| 2 | 2.0 s | 1.0 s | 3.0 s |
| 3 | 4.0 s | 1.0 s | 5.0 s |
Merging custom headers with the organic header set
Scrawlee generates a full Sec-Fetch-* + Accept-Language header set on every client instantiation. You can add to (not replace) these headers per-request:
with ScrawleeClient() as client:
# The Sec-Fetch-* headers are already present; the dict is merged
r = client.get(
"https://api.example.com/private",
headers={
"Authorization": "Bearer eyJhbGciOiJIUzI1NiJ9...",
"X-API-Version": "2",
"Accept": "application/json",
},
)
print(r.data)
Disabling TLS certificate verification (internal / dev servers)
with ScrawleeClient() as client:
r = client.get("https://dev-server.internal", verify=False)
print(r.status_code)
Setting a global timeout vs per-request timeout
# Global timeout for all requests made by this client
with ScrawleeClient(timeout=10) as client:
try:
r = client.get("https://slow-server.example.com")
except Exception as e:
print("Timed out:", e)
# Per-request override (overrides the global)
with ScrawleeClient(timeout=30) as client:
r = client.get("https://normally-slow.example.com", timeout=5)
Headless Chrome with proxy
from scrawlee import BrowserClient
with BrowserClient(
proxy="http://user:pass@proxy-host:8080",
headless=True, # run without a visible window
block_images_and_css=True, # maximum bandwidth saving
via_google=False,
) as client:
response = client.get("https://example.com")
print(response.html.css_first("h1").text())
Warning: Many anti-bot systems detect headless Chrome through browser feature probes (missing
chrome.app,chrome.runtime, window dimensions, media device enumeration). For Cloudflare or Datadome-protected sites, preferheadless=False(the default) and usebypass_cloudflare=Trueinstead.
Per-call override of via_google and bypass_cloudflare
Instance-level defaults can be overridden for individual calls without creating a new client:
with BrowserClient(via_google=True, bypass_cloudflare=False) as client:
# Most pages: via Google referrer, no Cloudflare bypass
r_normal = client.get("https://example.com/news")
# Hardened page: skip Google referrer, enable Cloudflare bypass
r_cf = client.get(
"https://hardened.example.com/products",
via_google=False,
bypass_cloudflare=True,
)
print(r_normal.html.css_first("h1").text())
print(r_cf.html.css_first(".product-title").text())
Disabling loguru output
from loguru import logger
logger.disable("scrawlee") # silences all Scrawlee log messages
To re-enable for debugging:
logger.enable("scrawlee")
logger.add("scrawlee_debug.log", level="DEBUG", rotation="10 MB")
6.7 Cookie persistence
Save the cookie jar from one session and reload it in a future run to maintain authenticated state without re-logging in. Cookies are serialised as a plain JSON file.
from scrawlee import ScrawleeClient
# --- Run 1: authenticate and save ---
with ScrawleeClient() as client:
client.post(
"https://example.com/login",
data={"username": "me@example.com", "password": "hunter2"},
allow_redirects=True,
)
# Confirm login succeeded
profile = client.get("https://example.com/api/me")
print("Logged in as:", profile.data["name"])
client.save_cookies("session_cookies.json")
# session_cookies.json now contains all cookies set by the server
# --- Run 2: resume session without logging in again ---
with ScrawleeClient() as client:
client.load_cookies("session_cookies.json")
response = client.get("https://example.com/dashboard")
print(response.html.css_first(".welcome-message").text())
# Refresh the cookie file so expiry is pushed forward
client.save_cookies("session_cookies.json")
Async cookie persistence
The same save_cookies() / load_cookies() interface is available on AsyncScrawleeClient:
import asyncio
from scrawlee import AsyncScrawleeClient
async def login_and_scrape():
async with AsyncScrawleeClient() as client:
await client.post(
"https://example.com/login",
data={"username": "me", "password": "secret"},
)
client.save_cookies("async_cookies.json")
async def resume_scrape():
async with AsyncScrawleeClient() as client:
client.load_cookies("async_cookies.json")
r = await client.get("https://example.com/members-only")
print(r.html.css_first(".members-content").text())
asyncio.run(login_and_scrape())
asyncio.run(resume_scrape())
Inspecting the saved cookie file
The JSON file is human-readable and editable:
{
"sessionid": "abc123xyz789",
"csrftoken": "def456uvw012",
"_ga": "GA1.2.1234567890.1714000000"
}
You can merge cookies from multiple sources, remove expired entries, or inject test cookies by editing this file directly before passing it to load_cookies().
7. FAQ
Q: Does Scrawlee guarantee bypassing every anti-bot system?
No tool can make that guarantee. Bot detection is an arms race. Scrawlee's HTTP client (ScrawleeClient) is effective against TLS fingerprinting, IP bans, and rate-limiting. BrowserClient with bypass_cloudflare=True makes a best-effort attempt at simple Turnstile "click to verify" challenges, but it is not a captcha-solving service. Highly sophisticated defences (image-based CAPTCHAs requiring human vision, fully dynamic JS obfuscation changed per-request) require additional measures outside the scope of this library.
Q: When should I use ScrawleeClient vs BrowserClient?
Use ScrawleeClient when the target page's content is available in the raw HTTP response (i.e., it does not require JavaScript execution to render). It is 10–100× faster and uses far less memory than running Chromium. Switch to BrowserClient when the page renders its content with JavaScript, requires cookie/session state from an interactive flow, or is protected by a Cloudflare Turnstile challenge.
Q: How do I handle rate limiting effectively?
Combine several strategies: set retry_status_codes to include 429, tune retry_backoff_base to a higher value (e.g., 2.0), add multiple proxies to ProxyManager so failed IPs are automatically cycled out, and consider adding per-domain request delays in your own scraping loop.
Q: Can I use BrowserClient.fetch() from the first request?
No. fetch() re-uses the browser's existing session context (cookies, authentication headers, TLS state). It requires at least one prior get() call to the target domain to establish that context. Calling fetch() first will likely receive a redirect or login page.
Q: How does proxy quarantine work?
When a request fails and the failure is attributed to a proxy, ProxyManager.mark_failed() records the proxy's URL with a timestamp offset by quarantine_time seconds (default: 300). On each subsequent get_proxy() call, _clean_quarantine() removes entries whose timeout has elapsed, automatically re-admitting the proxy to the pool.
Q: Is AsyncScrawleeClient truly non-blocking?
Yes. It uses curl_cffi.requests.AsyncSession, which is backed by libcurl's multi-handle async interface. All I/O is non-blocking. The exponential back-off also uses await asyncio.sleep() rather than time.sleep(), so the event loop is never blocked during retries.
Q: Can I change the proxy quarantine duration?
Yes, directly on the ProxyManager instance:
pm = ProxyManager()
pm.quarantine_time = 60 # 60 seconds
Q: How do I suppress the loguru output?
from loguru import logger
logger.disable("scrawlee")
Q: How do I wait for JavaScript cookies without wasting time?
Use BrowserClient.get(..., poll_for_cookie="cookie_name"). It polls the browser's cookie jar at poll_interval seconds and exits early once the cookie value stays stable for poll_stable consecutive checks. This avoids blind time.sleep() calls:
with BrowserClient(wait=60) as client:
# Returns in ~3s if cookie stabilises, or after 60s if it never does
client.get(url, poll_for_cookie="session_token")
Q: Can I scrape HTTPS sites with self-signed certificates?
Pass verify=False through **kwargs:
client.get("https://internal-dev-server.local", verify=False)
Q: How do I scale to thousands of concurrent requests?
Use AsyncScrawleeClient with asyncio.gather() or asyncio.Semaphore for rate control:
import asyncio
from scrawlee import AsyncScrawleeClient, ProxyManager
async def scrape(urls, concurrency=50):
pm = ProxyManager(rotation_strategy="random")
# ... add proxies ...
sem = asyncio.Semaphore(concurrency)
async with AsyncScrawleeClient(proxy_manager=pm) as client:
async def bounded_get(url):
async with sem:
return await client.get(url)
return await asyncio.gather(*[bounded_get(u) for u in urls])
8. Contributing
Contributions are welcome. Please follow these steps:
- Fork the repository and create a feature branch:
git checkout -b feature/your-feature-name
- Install dev dependencies:
pip install -e ".[dev]"
- Write tests in the
tests/directory covering your change. - Run the test suite:
pytest
- Open a Pull Request against
masterwith a clear description of the problem your change solves.
Code style
- Follow PEP 8.
- Keep docstrings consistent with the existing style in
client.pyandbrowser.py. - Do not introduce new mandatory dependencies without a compelling reason.
Reporting issues
Open an issue on GitHub. Include the Python version, OS, relevant code snippet, and the full traceback.
9. License
Scrawlee is released under the MIT License.
MIT License
Copyright (c) 2026 Saim Sajid
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Metadata
Release files for scrawlee 4.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| scrawlee-4.0.0.tar.gz | 57.7 kB | Without provenance | Details for scrawlee-4.0.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| scrawlee-4.0.0-py3-none-any.whl | Python 3 | none | any | Details for scrawlee-4.0.0-py3-none-any.whl |
Total release size: 99.0 kB
Release files / scrawlee-4.0.0.tar.gz
| Download URL | scrawlee-4.0.0.tar.gz |
|---|---|
| Size | 57.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
86a842b2b8adb0102776b8333df787af7c5653e7d6462dd435c475f7c4630b5e
|
|
BLAKE2b-256 checksum How to use checksums |
8c85987e96be9f5bd669a9ad5be8fc5c89dbd6ebbc222fa6a95f7941cf5b60c9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.7
|
Release files / scrawlee-4.0.0-py3-none-any.whl
| Download URL | scrawlee-4.0.0-py3-none-any.whl |
|---|---|
| Size | 41.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b761933c6cffa2be992ef488ab63cc1e2788935902fa33b531cf7f5cad58e24b
|
|
BLAKE2b-256 checksum How to use checksums |
d9db1d7c65fe0ebd9827d63192666d33c2977ca99c78d8ba16ee57f35511db0a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.7
|
Security for scrawlee 4.0.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.