Blog
Engineering notes, product updates, and field reports from the Archonum team.
Three npm packages shipped on 5 August 2026. They connect Playwright or Puppeteer over CDP to Chrome running on a real Android phone, which removes most of what a stealth patch stack exists to hide.
Archonum’s hosted browser MCP server gives an AI agent 19 tools that drive Chrome on a real consumer smartphone, with a per-session exit country and nothing to install. OAuth 2.1 or HTTP Basic setup for Claude Code, Claude Desktop, ChatGPT and Codex, the full tool reference, and the session limits that apply.
Cloudflare found CGNAT addresses get rate-limited three times more often than others, despite carrying lower bot rates. What a carrier IP genuinely buys you, when it turns into a liability, and what neither proxy type fixes.
Three ways to originate a web request, compared honestly: datacenter proxies, residential proxies, and real smartphones. How each is sourced, what it costs, what bot detection reads first, and which one actually fits your workload.
A stealth browser is ordinary Chrome plus a layer of patches. This is what that layer covers, what it cannot reach, and why the best-known patch set has not shipped a commit since March 2023 while Chrome kept moving underneath it.
A 403 on the first request and a 403 on the four-hundredth are different problems with different fixes. Eight failure modes that block scrapers, in diagnostic order, with the root cause, the fix, and what each fix actually costs.
An antidetect browser rewrites the fingerprint each browser profile presents. The engineering is real, but spoofing has to stay consistent everywhere at once while detection only has to find one contradiction. Why that ceiling is structural.
A browser fingerprint is not one value. It is five layers of signals: network, HTTP, JavaScript API, hardware and behavior. Here is what each layer reveals, and how hard each one is to fake.
Rotating proxy pools drop identity mid-task, and multi-step agents break when the exit IP moves. Why persistent device identity is the primitive production agents depend on.
Emulators synthesize hardware they don’t have, and bot detection is built to spot the gap. Why real devices produce genuinely human traffic with nothing synthetic to flag.