Configure stealth and proxies

Stealth mode

obscura fetch https://example.com --stealth
obscura serve --stealth
obscura mcp --stealth

What --stealth changes:

• Uses the wreq HTTP client with browser-matching TLS fingerprints (ClientHello, ALPN, cipher order).
• Loads a tracker blocklist that drops requests to known analytics and fingerprinting endpoints.
• Bundles webpki roots instead of relying on the system store.

Requires a build that includes the stealth feature. Release binaries on the Releases page include it. To build it yourself:

cargo build --release --features stealth

What stealth handles

• Basic bot detection that checks TLS fingerprint or User-Agent.
• Sites that rely on third-party analytics being reachable.

What stealth does not handle

• Cloudflare interactive challenges.
• Datadome and Akamai bot manager active challenges.
• CAPTCHAs.
• IP-based rate limiting (use proxies).

Proxies

HTTP proxy:

obscura fetch https://example.com --proxy http://proxy.example.com:8080
obscura serve --proxy http://proxy.example.com:8080

With auth:

obscura fetch https://example.com --proxy http://user:pass@proxy.example.com:8080

SOCKS5:

obscura fetch https://example.com --proxy socks5://proxy.example.com:1080

Custom User-Agent

obscura fetch https://example.com --user-agent "Mozilla/5.0 (...) ..."
obscura serve --user-agent "Mozilla/5.0 (...) ..."

Default UA matches a recent Chrome on the build platform.

Combine

obscura serve \
  --stealth \
  --proxy http://user:pass@proxy.example.com:8080 \
  --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 ..."