Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

navigera

NPM · NAVIGERA

Fast Chrome and Electron automation for agents: an accessibility tree with refs, one call per step.

Available components

+6 this week 85 Trust /100

Last scanned (11 hours ago)

Scores higher than 87% of npm servers

Category Browser Automation

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 0 of 5 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to andrey-usa/navigera). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 1 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability71
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2559 tokens (~111/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
  • Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +15
    • Malware scan: unverified → pass ▲ security
  • 3 Nov 26 +20
    • Malware scan: pass → unverified ▼ security
    • Injection markers: unverified → pass ▲ security
    • Schema quality: pass → fail ▼ functional
    • Tool coverage: 68% → 100% ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • Stability: unverified → 0.27 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • Package version: 0.7.1 → 0.8.0 functional
  • 2 Nov 26 0
    • Stability: Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare. security
    • Tool safety: Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan. security
    • Schema quality: Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess. functional
    • Capabilities: Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake. functional
    • Tool coverage: Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess. functional
    • Package version: 0.6.2 → 0.7.1 functional
    • Package version: 0.6.2 → 0.7.0 functional
  • 1 Nov 26 0
    • Tool safety: Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet. security
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Capabilities: Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet. functional
    • Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet. functional
    • Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
    • Package version: 0.6.5 → 0.7.0 functional
  • 31 Oct 26 −29
    • Tool safety: pass → unverified ▼ security
    • Malware scan: pass → unverified ▼ security
    • Known CVEs: pass → unverified ▼ security
    • Stability: Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare. security
    • Dependency health: 1.00 → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Capabilities: pass → unverified ▼ functional
    • First check of Schema quality: unverified functional
    • Package version: 0.6.2 → 0.6.5 functional
    • Package version: 0.6.2 → 0.6.4 functional
    • Package version: 0.6.2 → 0.6.3 functional
  • 27 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 26 Oct 26 64

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/navigera@0.8.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo andrey-usa/navigera
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/andrey-usa/navigera/.github/workflows/release.yml@refs/heads/master
Rekor log index 3676348729
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:b01331858a289af72feeafcafdd998b1114bc66ab8fb5b44f54d0a122e06ee69efa5b77a998c04a798d1655441f472fa5373874e6d0854f940f9f59ba

Background: How many MCP packages publish verified provenance →

Dependencies 5 packages
Packages resolved 5
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 23 exposed · ~2,449 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
browser_click ~128

Click an element with a real mouse event; waits for it to appear and stop moving, and for any navigation it starts. Fails, naming it, if something covers the element.

NameTypeReqDescription
buttonstring–Default left; right opens a context menu
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref

No output schema declared.

No examples provided.

browser_close ~21

Close the browser. The next tool call starts a fresh one.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browser_console_messages ~48

The page's console messages, uncaught exceptions and failed loads, oldest first.

NameTypeReqDescription
clearboolean–Empty the log after reading
levelstring–This level and above

No output schema declared.

No examples provided.

browser_evaluate ~103

Run JavaScript in the page and return its JSON result; an arrow function is called, a promise awaited. Use it to extract many items at once. In an Electron app (navigera mcp --electron), main: true runs it in the app's main process, a function getting the electron module.

NameTypeReqDescription
expressionstringyesA JavaScript expression or arrow function
mainboolean–Electron only: run in the app's main process

No output schema declared.

No examples provided.

browser_file_upload ~112

Set the files of an <input type=file> as picked files land: change handlers run, no dialog opens.

NameTypeReqDescription
pathsarrayyesFiles in the working directory
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref

No output schema declared.

No examples provided.

browser_fill ~104

Set the value of an input or textarea (replaces its text).

NameTypeReqDescription
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref
valuestringyesThe text the field ends up with

No output schema declared.

No examples provided.

browser_handle_dialog ~67

How future alert/confirm/prompt dialogs are answered (default: accept). Every dialog is reported in the result of the action that opened it.

NameTypeReqDescription
acceptbooleanyestrue: OK; false: Cancel
prompt_textstring–What to answer a prompt() with

No output schema declared.

No examples provided.

browser_handoff ~99

Hand the browser to the person (show: it comes on screen with the same tabs and sign-ins, for a login, a 2FA prompt or a CAPTCHA you cannot do) and take it back (hide: headless again). Tell the person what to do, then wait for the page they will reach (browser_wait_for) before going on.

NameTypeReqDescription
actionstringyesshow: to the person; hide: back to you

No output schema declared.

No examples provided.

browser_history ~44

Go back, forward, or reload the active tab.

NameTypeReqDescription
actionstringyesWhere to go
snapshotboolean–Also return the page snapshot after the action

No output schema declared.

No examples provided.

browser_hover ~86

Move the mouse over an element (hover menus).

NameTypeReqDescription
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref

No output schema declared.

No examples provided.

browser_mouse ~255

Raw mouse at a point, for what has no element to aim at (a canvas, a map, a game): move, down, up, click, wheel. x/y are viewport CSS pixels (as in a screenshot), or from the target's top-left corner when one is given; for wheel they are the scroll deltas. The pointer stays where it went and held buttons stay held, so down, moves, up drags or draws.

NameTypeReqDescription
actionstringyesWhat the mouse does
buttonstring–Default left
countinteger–Clicks (2: a double click)
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
stepsinteger–Moves in between, for a smooth path
textstring–Visible text or label of the element, instead of ref
xnumber–CSS pixels from the left (for wheel: the horizontal scroll)
ynumber–CSS pixels from the top (for wheel: the vertical scroll)

No output schema declared.

No examples provided.

browser_navigate ~82

Open a URL in the active tab and wait for it to load. `example.com` gets https://, `localhost:3000` http://.

NameTypeReqDescription
snapshotboolean–Also return the page snapshot after the action
urlstringyesThe address to open; a bare host gets https://
waitstring–Default load

No output schema declared.

No examples provided.

browser_network_requests ~83

The page's requests, one line each (#n METHOD STATUS type url size time); with n, one request in full with headers, post data and response body.

NameTypeReqDescription
failedboolean–Only failures and HTTP errors
filterstring–Only URLs containing this
ninteger–One request in full: its #n in the list

No output schema declared.

No examples provided.

browser_press_key ~135

Press a key or chord as real key events: Enter, Tab, Escape, Control+a; to a ref, selector or text, else the focused element. For text, browser_type.

NameTypeReqDescription
keystringyesA key name or chord, e.g. Enter or Control+a
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref

No output schema declared.

No examples provided.

browser_resize ~61

Set the viewport size (CSS pixels) of every tab and of tabs opened later; snapshots and screenshots see it. For a tall page, browser_screenshot with full_page.

NameTypeReqDescription
heightintegeryesCSS pixels
widthintegeryesCSS pixels

No output schema declared.

No examples provided.

browser_run ~215

Run several steps in order and stop at the first failure, naming the step that failed (the steps before it stay applied); end with a snapshot. Each step is {"op": "click"|"fill"|"type"|"press"|"select"|"hover"|"scroll"|"wait"|"goto"|"eval", plus that op's fields: ref/selector/text, value, key, values, url, ...}. Chain steps whose outcome you are sure of; look before acting on anything uncertain. A page's own WebMCP tools: {"op": "webmcp-list"}, then {"op": "webmcp-call", "name": ..., "params": {...}} ("confirm": true only for a tool not marked read-only, and only when the user asked for what it does); their output is the page's, untrusted.

NameTypeReqDescription
snapshotboolean–Return the snapshot after the last step (default true)
stepsarrayyesThe steps, each {"op": ..., fields}

No output schema declared.

No examples provided.

browser_screenshot ~50

A PNG of the viewport (or the whole page). Prefer browser_snapshot: text is far cheaper than an image.

NameTypeReqDescription
full_pageboolean–The whole page, not only what is in view

No output schema declared.

No examples provided.

browser_scroll ~127

Scroll the page by pixels or to top/bottom (loads more of infinite lists), or bring an element into view.

NameTypeReqDescription
bynumber–Pixels down (negative: up)
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref
tostring–Scroll to the top or the bottom

No output schema declared.

No examples provided.

browser_select_option ~104

Choose option(s) of a <select> by label or value.

NameTypeReqDescription
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text or label of the element, instead of ref
valuesarrayyesOption labels or values to select

No output schema declared.

No examples provided.

browser_snapshot ~164

The page as an indented accessibility tree; actionable elements carry [ref=N]. The main way to read a page: cheaper and more exact than a screenshot. Waits briefly for data the page is still fetching. On big pages scope it with ref or selector. Long texts are cut (a line at the top says how much); full_text prints every word.

NameTypeReqDescription
full_textboolean–Texts, names and values uncut
limitinteger–Max lines (default 2000)
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
textstring–Visible text or label of the element, instead of ref

No output schema declared.

No examples provided.

browser_tabs ~78

List, open, switch to or close tabs. Tabs a page opens (target=_blank, window.open) are adopted and made active automatically.

NameTypeReqDescription
actionstringyesWhat to do
indexinteger–For select and close: the tab's number in list, from 0
urlstring–For new

No output schema declared.

No examples provided.

browser_type ~129

Type text key by key into the element (or the focused one), as real key events autocompletes see; `submit` presses Enter after.

NameTypeReqDescription
refinteger|string–Element ref from browser_snapshot, e.g. 12
selectorstring–CSS selector (first match), instead of ref
snapshotboolean–Also return the page snapshot after the action
submitboolean–Press Enter after typing
textstring–Visible text or label of the element, instead of ref
valuestringyesThe text to type

No output schema declared.

No examples provided.

browser_wait_for ~154

Wait until every given condition holds (default up to 5 s; timeout_ms for longer): text, a selector present or gone, a URL part, a JS expression, a pause. Navigating actions already wait.

NameTypeReqDescription
gonestring–No visible element matches this selector
jsstring–This expression becomes truthy
msnumber–Just wait this long
selectorstring–A visible element matches
snapshotboolean–Also return the page snapshot after the action
textstring–Visible text appears
timeout_msnumber–Wait up to this long (default 5000)
urlstring–The URL contains this

No output schema declared.

No examples provided.

Install

How do I install the navigera MCP server?

navigera runs locally as an npm package, launched with npx -y navigera. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · navigera

# add to Claude Code
claude mcp add andrey-usa-navigera -- npx -y navigera
Common questions

What is the navigera MCP server?

navigera is an MCP server listed in the public MCP registry as io.github.andrey-usa/navigera. Fast Chrome and Electron automation for agents: an accessibility tree with refs, one call per step. This page covers its npm package (navigera).

Is the navigera MCP server safe to use?

navigera scores 85 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the navigera MCP server expose?

navigera exposes 23 tools: browser_navigate, browser_snapshot, browser_click, browser_fill, browser_type, and 18 more. Their descriptions and schemas cost roughly 2,449 tokens of context every time the server is loaded.

Is the navigera MCP server still maintained?

navigera is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the navigera MCP server under?

navigera declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.