⚡ Thunder

The human engine for AI agents.

Give any software a human body: a real browser with a real fingerprint, a mouse that trembles like a hand, keystrokes at human cadence, and a TLS handshake indistinguishable from Chrome's.

A bot that walks like a person.

Install · Watch the proof · MCP for any software

Why Thunder exists

Every anti-bot system on Earth looks for the same three tells:

1. Protocol tells — a Python scraper's TLS/HTTP-2 handshake screams "bot" before a byte of JS runs.
2. Fingerprint tells — navigator.webdriver, headless quirks, software-rendered WebGL, empty plugin arrays.
3. Behavioral tells — perfectly straight mouse paths, instant typing, zero reading pauses.

Thunder is a body for your AI that has none of them. Not patched over — absent, the way a real human's browser is.

pip install thunder-agent

import thunder

body = thunder.Body(profile="ada")          # a persistent human named Ada
await body.warmup()                         # age the session like a returning user
await body.go("https://protected-site.com")
await body.type("#email", "ada@example.com")   # typed like a person. Typos included.
await body.look("proof.png")                    # screenshot evidence
await body.rest()                              # close, keep the identity

Ada comes back tomorrow with the same cookies, same screen, same GPU string, same timezone. The site sees a returning regular.

📦 Install in 30 seconds

pip install thunder-agent

Works on Linux, macOS, Windows. Real-Chrome engine auto-detected; falls back to bundled Chromium.

thunder demo        # watch it browse like a human, right now
thunder ghost https://nowsecure.nl    # TLS-level fetch that passes the gate

⚡ The five layers

Verified live: bot.sannysoft.com under Thunder — WebDriver missing (passed) · WebDriver Advanced passed · Chrome present (passed) · PluginArray passed — 4 passed, 0 failed with headed real Chrome. Ghost pulls a 200 from a Cloudflare gate that 403s plain Python, same minute.

🔌 MCP: give ANY software a human body

Zero-install, zero-account — paste this URL into Claude (Settings → Connectors → Add custom connector, or claude.ai/mcp):

https://thunder-mcp.onrender.com/mcp

That's it. No signup, no keys. Thunder-hosted, always on. You get thunder_search, thunder_read, thunder_ghost, thunder_feel, thunder_solve, thunder_open — search, clean extraction and bot-gate-safe fetches through Chrome's exact TLS handshake, from inside Claude.

Want the full human body (stealth Chrome, mouse tremor, human typing) under MCP? Run it locally — same 10-tool MCP server:

Thunder ships an MCP server (10 tools). Paste one config and Claude, Cursor, Cline, Windsurf — anything that speaks MCP — browses as a human:

{ "mcpServers": { "thunder": {
    "command": "pipx", "args": ["run", "thunder-agent", "thunder-mcp"] } } }

{ "mcpServers": { "thunder": {
    "command": "uvx", "args": ["--from", "thunder-agent", "thunder-mcp"] } } }

Tools: thunder_open · thunder_read · thunder_search · thunder_click · thunder_type · thunder_scroll · thunder_ghost · thunder_solve · thunder_feel · thunder_close — each one moves like a person, never like a script.

🚫 The blocker table — what used to stop bots, and Thunder's answer

🔒 CAPTCHAs without a subscription

from thunder.captcha import soft_solve, ocr_solve
result = await soft_solve(body.page)     # human-hand click, no keys needed

Non-interactive challenges often pass on a warmed-up session. For Turnstile/reCAPTCHA Enterprise, wire your own CapSolver or 2Captcha key — Thunder senses the challenge type and routes it.

🧠 Pair with any mind

Thunder is the body; bring any brain. Works with stewmind, Ollama, LM Studio, vLLM, OpenAI-compatible APIs, or fully offline transformers.

from thunder.mind import Mind
mind = Mind(provider="ollama", model="llama3")
plan = await mind.think("find the pricing page and extract the tiers", body)

🧪 Tested, not promised

git clone https://github.com/emmanuelerogian723-alt/thunder
cd thunder && pip install -e ".[dev]" && pytest

Stealth regression suite: webdriver erased + scan-invisible · genuine PluginArray · headless pack · WebGL skin-consistency · proxy rotation. Each one fails loudly if a future commit breaks the human illusion.

⚖️ The honest limits (why people trust Thunder)

• No tool on Earth is "undetectable." Anyone selling that is lying to you.
• Cloud IPs still look like clouds — pair Thunder with a residential proxy for the hardest targets.
• Google-scale behavioral ML scores the whole session. Thunder's warmup + hand give you a real chance; it's not a magic key.
• Use Thunder only where you're authorized. Your accounts, your tests, your sites. That's the license, and it's the line.

MIT licensed. Built in the open — every claim on this page has a script in tests/ or a screenshot in proofs/.