Browsermcp MCP Server
Browser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser
This grade comes from an automated MCPSafe scan of the server's JavaScript, TypeScript and Python source on 2026-10-02. It read the whole repository (14 files). It checks for leaked credentials, shell or code injection from function inputs, unsafe deserialization, malware signatures, install-time scripts, and weak password handling. It does not check for path traversal, server-side request forgery, prompt injection in tool descriptions, network exposure, SQL injection, cross-site scripting, or vulnerable dependencies. It has not been manually reviewed, and the code may have changed since the scan.
Excellent Security
Trust Score 74
Trust is stricter than security: it combines reviewed security, MCP capability risk, supply-chain metadata, quality, popularity, freshness, and penalties for unknowns.
- • No reviewed severe vulnerabilities published
- • Stale or missing recent scan
- • MCP risk traits: Network/API access, Remote transport
Security ScoreA+
Vulnerabilities Found
Quality ScoreC
Maintenance45
Popularity54
Documentation53
Available Documentation
Compatibility78
Features
Supported Transports
Vulnerabilities(0)
This grade comes from an automated scan. Individual findings from automated scans are not published.
READMEBrowsermcp MCP Server
View source<a href="https://browsermcp.io">
<img src="./.github/images/banner.png" alt="Browser MCP banner">
</a>
<h3 align="center">Browser MCP</h3>
<p align="center">
Automate your browser with AI.
<br />
<a href="https://browsermcp.io"><strong>Website</strong></a>
•
<a href="https://docs.browsermcp.io"><strong>Docs</strong></a>
</p>
About
Browser MCP is an MCP server + Chrome extension that allows you to automate your browser using AI applications like VS Code, Claude, Cursor, and Windsurf.
Features
- ⚡ Fast: Automation happens locally on your machine, resulting in better performance without network latency.
- 🔒 Private: Since automation happens locally, your browser activity stays on your device and isn't sent to remote servers.
- 👤 Logged In: Uses your existing browser profile, keeping you logged into all your services.
- 🥷🏼 Stealth: Avoids basic bot detection and CAPTCHAs by using your real browser fingerprint.
Contributing
This repo contains all the core MCP code for Browser MCP, but currently cannot yet be built on its own due to dependencies on utils and types from the monorepo where it's developed.
Credits
Browser MCP was adapted from the Playwright MCP server in order to automate the user's browser rather than creating new browser instances. This allows using the user's existing browser profile to use logged-in sessions and avoid bot detection mechanisms that commonly block automated browser use.
Embed Security Badge
Add this badge to your README or documentation
[](https://mcpsafe.org/registry/browsermcp-mcp)Server Information
- Source
- GITHUB
- Language
- typescript
- License
- Apache-2.0
- Transport
- STDIO
- Added
- Aug 11, 2026
- Updated
- Oct 1, 2026