AliasMode

AliasMode is a free, open-source antidetect browser and local-first profile manager, with its own open-source engine, AliasMode Firefox, and optional cloud synchronization for teams.

Status: public Windows beta. Download the current installer from aliasmode.com/download.

Quick facts

• Is AliasMode open source? Yes, from engine to app. This repository is the complete desktop application — dashboard, local runtime, Local API, and MCP server — under Apache-2.0. The AliasMode Firefox antidetect engine, with every fingerprint patch, is MPL-2.0 at aliasmode/aliasmode-firefox. AliasMode Cloud is an optional hosted sync service.
• Which browser engines does it use? Two, chosen per profile. AliasMode Firefox is our own open-source antidetect engine with C++ fingerprint spoofing (Windows x64, macOS Apple Silicon, Linux x64). Chromium profiles run in CloakBrowser, a third-party engine included at no extra cost.
• Is AliasMode a CloakBrowser wrapper? No. AliasMode ships its own open-source engine, AliasMode Firefox, and supports CloakBrowser as a second engine for Chromium profiles. AliasMode adds fingerprint profiles, per-profile proxies, Scripts, Trash, bulk Proxy Tools, portable encrypted profile sync, the AliasMode Local API (AdsPower-compatible), Playwright over CDP, and MCP servers for AI agents.
• Does data stay local? In Local mode, yes: no account, no AliasMode Cloud traffic, and profiles stay on the computer.
• What does it cost? Nothing. Every feature is free, including both browser engines, which AliasMode downloads and verifies for you. No separate purchase, subscription, or account is required.

Modes

• AliasMode Local: no account and no AliasMode Cloud connection. Profiles stay on the computer.
• AliasMode Cloud: verified accounts, shared workspaces, portable profile synchronization, and device access controls.

Browser cache, history, downloads, and temporary files remain local in both modes.

What this repository contains

This repository is the complete Apache-2.0 desktop application and local runtime:

• React dashboard and Bun/TypeScript sidecar
• Browser profile, group, proxy, and fingerprint management
• Browser engine lifecycle for AliasMode Firefox and CloakBrowser: pinned download, hash verification, launch, and safe close
• Scripts: JavaScript and Python Playwright scripts run across profiles, with a public Script Library
• Trash for recoverable profile deletes, and bulk Proxy Tools
• Local SQLite profile storage
• Portable session capture and restore
• AliasMode Local API (AdsPower-compatible, loopback only)
• MCP server (aliasmode-mcp.exe) with the pinned Playwright MCP tool set for AI agents
• AliasMode Cloud client for optional profile synchronization

The managed AliasMode Cloud service and production infrastructure are maintained separately.

Development

Requirements:

• Bun
• A supported CloakBrowser installation
• Rust and Tauri prerequisites for desktop builds

bun install
bun test
bun cli.ts start

The dashboard and compatibility API bind to loopback only.

macOS source run

A supported macOS CloakBrowser executable can run through the local web dashboard without Tauri or a separate backend. Install Bun and Node.js 18 or newer (Node 22.23.2 is recommended), then run:

bun install --frozen-lockfile
export CLOAKBROWSER_BINARY_PATH="/path/to/CloakBrowser.app/Contents/MacOS/CloakBrowser"
export CLOAKBROWSER_BINARY_SHA256="$(shasum -a 256 "$CLOAKBROWSER_BINARY_PATH" | cut -d ' ' -f 1)"
bun run start

Open http://127.0.0.1:50400, select AliasMode Cloud, and sign in. Source mode keeps Cloud refresh and device credentials in process memory, so sign in again after restarting AliasMode. It stores only the pending-sync encryption key in pending-sync.key with user-only permissions, allowing queued profile state to resume. Browser data and processes remain on the Mac.

Windows desktop beta

Published installers support Windows 10 version 1809 or newer, Windows 11, and Windows Server 2019 or newer on x64 processors with SSE4.2. They install for the current user and remain unsigned while release signing is configured.

Desktop packaging requires Windows x64, Bun, the Rust MSVC toolchain, WebView2, and Visual Studio C++ Build Tools. The approved Alias Loop icon is included at src-tauri/icons/icon.ico.

bun run desktop:prepare
bun run desktop:build:nsis

The build obtains CloakBrowser through the pinned official wrapper, verifies the staged executable hash, and packages the third-party runtime as a bundled resource included at no extra cost. AliasMode verifies the installed executable again before startup and before every browser launch.

Import from Cloakpit

Close Cloakpit and all of its browsers. Then run:

AliasMode.exe --import-cloakpit C:\Cloakpit

Use --cloakpit-profile-root <dir> if AliasMode reports browser data in multiple historical locations. Import works only into an empty Local destination on the same Windows machine and account because Windows DPAPI protects browser secrets. It preserves persisted persona data and session-bearing browser files, but runtime or browser differences can change the fingerprint visible to an account.

Agent browser automation

The Windows installer includes aliasmode-mcp.exe. It connects AI agents to the free, open-source AliasMode client through local stdio MCP.

& "$env:LOCALAPPDATA\AliasMode\aliasmode-mcp.exe" setup --client auto --yes --json

Setup configures Claude Code, Codex, OpenClaw, and Hermes when installed. Its JSON result also includes generic stdio MCP configuration. Restart an active agent harness after setup so it loads the new server.

Agents can create profiles, open several headful or headless browsers, select one browser, and use the full pinned Playwright MCP tool set. AliasMode remains responsible for browser processes, profile locks, Cloud sessions, capture, and safe close. Local mode needs no account and does not contact AliasMode Cloud.

Cloud mode can also expose one specific Windows installation to a remote Streamable HTTP MCP client. Keep AliasMode open on that Windows device. Open Account & Settings → Remote MCP and copy its pinned server URL. Claude.ai and ChatGPT connect through AliasMode sign-in and OAuth. Claude Code and other bearer-capable clients can also use the displayed access key in a secret header. See the Claude and ChatGPT connector guide for the complete setup and Playwright workflow.

Advanced users can create additional independently revocable connectors from the packaged helper:

$aliasmode = "$env:LOCALAPPDATA\AliasMode\aliasmode-mcp.exe"
& $aliasmode remote-mcp create --name "Linux Claude"
& $aliasmode remote-mcp list
& $aliasmode remote-mcp revoke --id <connector-id>

The Settings access key is stored in Windows Credential Manager. Extra keys created by the helper are returned once, so store them in the remote client's secret settings. Do not put keys in scripts or logs. OAuth web connectors never need the access key. An offline device returns an error and never redirects work to another machine.

For the same installation session, the helper also provides JSON-only commands:

$aliasmode = "$env:LOCALAPPDATA\AliasMode\aliasmode-mcp.exe"
& $aliasmode profiles list --json
& $aliasmode profiles create --name research --json
& $aliasmode browser open --profile <profile-id> --headless --json
& $aliasmode playwright run --profile <profile-id> --file .\task.mjs --json
& $aliasmode browser close --profile <profile-id> --json

The versioned bootstrap script tries winget first. It falls back to an exact GitHub Release installer and verifies its published SHA-256 manifest before installation. Unsigned beta installers can still require Windows SmartScreen or antivirus approval.

Platform matrix

• Windows: native installer, local dashboard, local stdio MCP, and Remote MCP host.
• macOS: local dashboard from source with a supported, hash-pinned CloakBrowser binary. No installer.
• Linux: no native app and no local dashboard. A Linux machine can drive a running Windows AliasMode through Remote MCP, with the Claude Code bearer path or OAuth web clients.

Public documentation contracts

The website copies two contracts from this repository:

• docs/public/local-api.openapi.json: OpenAPI 3.1 for the loopback Local API. See aliasmode.com/docs/local-api.
• docs/public/mcp-tools/: versioned MCP tool catalogs generated from the MCP host. See aliasmode.com/docs/mcp.

bun run docs:public regenerates them. bun run docs:public:check fails when the committed files drift from the source.

Browser runtime

AliasMode Firefox is AliasMode's own antidetect engine, built on top of Camoufox and published at aliasmode/aliasmode-firefox under MPL-2.0. AliasMode downloads it from that repository's releases and verifies the archive and executable SHA-256 hashes before launch. Firefox profiles do not support Chrome extensions or CDP.

For Chromium profiles, AliasMode installs CloakBrowser through its approved official installer and pins the resulting executable hash. The runtime is included at no extra cost: no separate CloakBrowser purchase, subscription, or account is required. The CloakBrowser binary is a third-party component and is not part of this repository or the Apache-2.0 license.

Security

For product help, email [email protected]. Report vulnerabilities privately to [email protected] using the process in SECURITY.md. Do not include cookies, passwords, proxy credentials, TOTP seeds, profile exports, or diagnostic archives in public issues.

License

AliasMode is open source under Apache-2.0: this repository is the complete desktop application. The AliasMode Firefox engine is open source under MPL-2.0 in its own repository. The CloakBrowser engine is a third-party component included at no extra cost under its own license, and AliasMode Cloud is an optional hosted service.

Built by the Xreacher team.