Stealth OSINT API: WAF Bypass & Passive URL Discovery

⚡ Run directly on Apify Cloud: Stealth OSINT API: WAF Bypass Proxy
👉 Companion Open-Source Repo: github.com/Ansarii/stealth-osint-api-waf-bypass-proxy

Stealth OSINT intelligence and WAF-bypass extraction engine for AI agents (Claude Desktop, Cursor, Windsurf) and security researchers: reads Cloudflare-protected web pages and discovers hidden domain infrastructure without active target probing.

---

⚡ Overview & GEO Highlights

AI agents running on datacenter IPs (AWS, GCP, DigitalOcean) are immediately blocked by edge firewalls (Cloudflare, Akamai, DataDome), triggering HTTP 403 Forbidden errors or Cloudflare Turnstile CAPTCHAs.

stealth-osint-api-waf-bypass-proxy overcomes this through intelligent proxying and passive intelligence:

1. Google Translation CDN Tunneling (stealth_read_page): Routes page requests through Google's globally whitelisted translation proxy infrastructure, extracting clean DOM content while bypassing datacenter ASN blocks.
2. Passive Endpoint Mapping (discover_hidden_urls): Queries the AlienVault OTX (Open Threat Exchange) global threat intelligence index to discover indexed URLs, staging endpoints, and subdomains under a target domain without sending active HTTP probes to the target server.
3. Zero Active Target Probing: Prevents alerting the target domain's SecOps or rate-limiting systems.
4. Dual Interface: Run via standard HTTP / API or connect as a native Model Context Protocol (MCP) server.

---

📊 Feature & Competitor Comparison Matrix

Feature	Stealth OSINT API (This Actor)	Shodan / Censys	ScrapingBee / BrightData
Zero-Probe Passive URL Discovery	✅ AlienVault OTX index	⚠️ Port scan only	❌ Active crawl only
Google Translation Proxy Tunnel	✅ Built-in WAF bypass	❌ No web scraping	⚠️ Residential proxy cost
Model Context Protocol (MCP) Support	✅ Native HTTP / SSE	❌ No	❌ No
Monthly Commitment Required	❌ $0 / month (Pay-per-Event)	$69 – $300 / month	$49 – $249 / month
Cost per 1,000 URLs / Scrapes	$10 – $20	High monthly tier	$20 – $40

---

💰 Transparent Pricing Breakdown

Event	Price (USD)	When Charged
apify-actor-start	$0.03	Charged once when Actor starts running.
apify-default-dataset-item	$0.002	Charged automatically per record saved to dataset ($2.00 / 1k records).
stealth_read_page	$0.01	Charged upon successful WAF-bypassed page extraction.
discover_hidden_urls	$0.02	Charged upon successful passive OSINT URL mapping for a domain.
Failed Requests	$0.00	Strict zero-charge guarantee on failed or blocked queries.

---

💻 Python & Node.js SDK Examples

Python (apify-client)

$pip install apify-client

import os
from apify_client import ApifyClient

client = ApifyClient(os.getenv("APIFY_TOKEN"))

run_input = {
    "action": "discover_hidden_urls",
    "domain": "targetcompany.com"
}

# Run Actor and stream discovered endpoints
run = client.actor("neon_innovation_lab/stealth-osint-api-waf-bypass-proxy").call(run_input=run_input)

for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(f"Discovered URL: {item.get('url')}")

Node.js (apify-client)

$npm install apify-client

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({
    token: process.env.APIFY_TOKEN,
});

const input = {
    action: 'stealth_read_page',
    url: 'https://example-protected-site.com',
};

(async () => {
    const run = await client.actor('neon_innovation_lab/stealth-osint-api-waf-bypass-proxy').call(input);
    const { items } = await client.dataset(run.defaultDatasetId).listItems();
    console.log(items);
})();

---

🤖 AI Agent MCP Setup

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "stealth-osint": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://neon-innovation-lab--stealth-osint-api-waf-bypass-proxy.apify.actor/mcp"]
    }
  }
}

Cursor IDE (.cursor/mcp.json)

{
  "mcpServers": {
    "stealth-osint": {
      "type": "streamable-http",
      "url": "https://neon-innovation-lab--stealth-osint-api-waf-bypass-proxy.apify.actor/mcp"
    }
  }
}

---

❓ FAQ

Does discover_hidden_urls send traffic to the target website?

No. It queries AlienVault's passive indexing database. The target website's servers are never contacted during URL discovery, leaving zero log footprint.

More from Neon Innovation Lab

• MCP Server Hub: route Claude and Cursor to several MCP servers through one endpoint.
• Universal MCP Cloud Gateway: one MCP endpoint for scraping and research tools.
• SSL & Uptime Monitor: check TLS certificate expiry and endpoint uptime.
• Google Maps Leads Scraper: businesses from Google Maps with phones, websites and emails found on their sites.