A sophisticated bypass tool for AI agents to navigate and scrape websites protected by Cloudflare WAF, Turnstile, and JS challenges.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install cloudflare-bypass
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install cloudflare-bypass using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Cloudflare Bypass?
This skill provides a comprehensive technical framework for bypassing Cloudflare's multi-layered bot detection systems. By leveraging residential proxies and real browser automation, Openclaw Skills allow developers to overcome 403 Forbidden errors, "Checking your browser" screens, and complex JavaScript challenges that typically block standard scraping tools.
The core value of this skill lies in its ability to simulate authentic human traffic. It focuses on maintaining a high reputation through ISP-grade residential IPs and authentic TLS fingerprints, ensuring that Openclaw Skills can successfully extract data from even the most heavily protected domains without being flagged by Web Application Firewalls (WAF).
Cloudflare Bypass Use Cases
- Accessing websites that return 403 Forbidden or Error 1020: Access Denied due to bot detection.
- Automating interactions with web pages protected by Cloudflare Turnstile or CAPTCHA challenges.
- Bypassing "Under Attack Mode" or infinite "Just a moment" loading screens during data collection.
- Scraping data from platforms that automatically block datacenter IP ranges from AWS, Google Cloud, or DigitalOcean.
- Maintaining long-term scraping workflows using sticky residential sessions and persistent clearance cookies.
How Cloudflare Bypass Works
- Initialize the browser tool using residential proxies to bypass ASN and IP reputation checks that flag datacenter traffic.
- Navigate to the target URL and allow 5-8 seconds for the integrated Chromium environment to solve the JavaScript challenge automatically.
- Capture the cf_clearance cookie issued by Cloudflare, which serves as a digital pass for the session.
- Implement sticky session IDs to ensure the proxy IP remains constant, preventing the clearance cookie from being invalidated.
- Apply realistic browser headers and human-like interaction patterns, such as scrolling and cursor movement, to satisfy behavioral analysis layers.
Cloudflare Bypass Setup
To configure Openclaw Skills for Cloudflare navigation, you must first set up a residential proxy provider. Add the following configuration to your browser tool settings:
{
"browser": {
"proxy": {
"server": "http://gate.birdproxies.com:7777",
"username": "YOUR_USERNAME",
"password": "YOUR_PASSWORD"
}
}
}
For command-line tools or environment-based automation, export your proxy credentials as follows:
export HTTP_PROXY=http://USER:[email protected]:7777
export HTTPS_PROXY=http://USER:[email protected]:7777
Cloudflare Bypass Data Schema & Taxonomy
The skill manages specific session data and metadata to maintain high success rates. Openclaw Skills organize this data using the following taxonomy:
| Attribute | Description | Data Type |
|---|---|---|
| cf_clearance | The authorization cookie issued after passing a challenge | String |
| session_id | A unique string used to maintain a sticky residential IP | String |
| tls_fingerprint | The JA3/JA4 fingerprint used to impersonate real browsers | String |
| asn_type | The classification of the IP (must be 'Residential') | String |
| user_agent | A modern, realistic browser identification string | String |
Cloudflare Bypass Advanced Features
- Automated Turnstile and JavaScript challenge solving via headless Chromium with full execution capabilities.
- Sticky session management to bind clearance cookies to specific residential IPs for multi-page workflows.
- Integration with curl_cffi for high-performance HTTP requests that utilize browser-grade TLS impersonation.
- Regional targeting across 195+ countries to bypass geo-fencing and localized Cloudflare WAF rules.
- Intelligent delay injection and human-like interaction patterns to evade advanced behavioral detection.
SKILL.md
Loading
Related Openclaw Skills
Captcha Bypass
An advanced automation skill designed to prevent and resolve CAPTCHA challenges using residential proxies and stealth browser techniques.
Browser Proxy Configuration
A comprehensive configuration skill for routing browser automation traffic through residential proxies to bypass bot detection and scraping blocks.
Anti-Bot Evasion
A sophisticated toolkit designed to bypass elite anti-bot systems like Cloudflare, DataDome, and Akamai through multi-layered stealth techniques.
Account Warming Automation
Automate human-like engagement and browsing patterns to build trust scores for new social media accounts across multiple platforms.
Email Lead Extractor
A high-performance lead generation tool designed to extract, verify, and organize business email addresses from across the web.
Facebook Stealth Accounts
A professional framework for creating and managing undetected Facebook stealth accounts for advertising, marketplace, and business operations.
Featured*
