navigera
NPM · NAVIGERA
Fast Chrome and Electron automation for agents: an accessibility tree with refs, one call per step.
Available components
Last scanned (11 hours ago)
Scores higher than 87% of npm servers
Category Browser Automation
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 0 of 5 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to andrey-usa/navigera). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability71
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2559 tokens (~111/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +15
- Malware scan: unverified → pass ▲ security
- 3 Nov 26 +20
- Malware scan: pass → unverified ▼ security
- Injection markers: unverified → pass ▲ security
- Schema quality: pass → fail ▼ functional
- Tool coverage: 68% → 100% ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Stability: unverified → 0.27 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Package version: 0.7.1 → 0.8.0 functional
- 2 Nov 26 0
- Stability: Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare. security
- Tool safety: Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan. security
- Schema quality: Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess. functional
- Capabilities: Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake. functional
- Tool coverage: Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess. functional
- Package version: 0.6.2 → 0.7.1 functional
- Package version: 0.6.2 → 0.7.0 functional
- 1 Nov 26 0
- Tool safety: Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet. security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet. functional
- Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet. functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
- Package version: 0.6.5 → 0.7.0 functional
- 31 Oct 26 −29
- Tool safety: pass → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Known CVEs: pass → unverified ▼ security
- Stability: Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare. security
- Dependency health: 1.00 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- First check of Schema quality: unverified functional
- Package version: 0.6.2 → 0.6.5 functional
- Package version: 0.6.2 → 0.6.4 functional
- Package version: 0.6.2 → 0.6.3 functional
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 26 Oct 26 64
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/navigera@0.8.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | andrey-usa/navigera |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/andrey-usa/navigera/.github/workflows/release.yml@refs/heads/master |
| Rekor log index | 3676348729 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:b01331858a289af72feeafcafdd998b1114bc66ab8fb5b44f54d0a122e06ee69efa5b77a998c04a798d1655441f472fa5373874e6d0854f940f9f59ba |
Background: How many MCP packages publish verified provenance →
Dependencies 5 packages
| Packages resolved | 5 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browser_click ~128
Click an element with a real mouse event; waits for it to appear and stop moving, and for any navigation it starts. Fails, naming it, if something covers the element.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | Default left; right opens a context menu |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
No output schema declared.
No examples provided.
browser_close ~21
Close the browser. The next tool call starts a fresh one.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_console_messages ~48
The page's console messages, uncaught exceptions and failed loads, oldest first.
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | Empty the log after reading |
| level | string | – | This level and above |
No output schema declared.
No examples provided.
browser_evaluate ~103
Run JavaScript in the page and return its JSON result; an arrow function is called, a promise awaited. Use it to extract many items at once. In an Electron app (navigera mcp --electron), main: true runs it in the app's main process, a function getting the electron module.
| Name | Type | Req | Description |
|---|---|---|---|
| expression | string | yes | A JavaScript expression or arrow function |
| main | boolean | – | Electron only: run in the app's main process |
No output schema declared.
No examples provided.
browser_file_upload ~112
Set the files of an <input type=file> as picked files land: change handlers run, no dialog opens.
| Name | Type | Req | Description |
|---|---|---|---|
| paths | array | yes | Files in the working directory |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
No output schema declared.
No examples provided.
browser_fill ~104
Set the value of an input or textarea (replaces its text).
| Name | Type | Req | Description |
|---|---|---|---|
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
| value | string | yes | The text the field ends up with |
No output schema declared.
No examples provided.
browser_handle_dialog ~67
How future alert/confirm/prompt dialogs are answered (default: accept). Every dialog is reported in the result of the action that opened it.
| Name | Type | Req | Description |
|---|---|---|---|
| accept | boolean | yes | true: OK; false: Cancel |
| prompt_text | string | – | What to answer a prompt() with |
No output schema declared.
No examples provided.
browser_handoff ~99
Hand the browser to the person (show: it comes on screen with the same tabs and sign-ins, for a login, a 2FA prompt or a CAPTCHA you cannot do) and take it back (hide: headless again). Tell the person what to do, then wait for the page they will reach (browser_wait_for) before going on.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | show: to the person; hide: back to you |
No output schema declared.
No examples provided.
browser_history ~44
Go back, forward, or reload the active tab.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Where to go |
| snapshot | boolean | – | Also return the page snapshot after the action |
No output schema declared.
No examples provided.
browser_hover ~86
Move the mouse over an element (hover menus).
| Name | Type | Req | Description |
|---|---|---|---|
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
No output schema declared.
No examples provided.
browser_mouse ~255
Raw mouse at a point, for what has no element to aim at (a canvas, a map, a game): move, down, up, click, wheel. x/y are viewport CSS pixels (as in a screenshot), or from the target's top-left corner when one is given; for wheel they are the scroll deltas. The pointer stays where it went and held buttons stay held, so down, moves, up drags or draws.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | What the mouse does |
| button | string | – | Default left |
| count | integer | – | Clicks (2: a double click) |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| steps | integer | – | Moves in between, for a smooth path |
| text | string | – | Visible text or label of the element, instead of ref |
| x | number | – | CSS pixels from the left (for wheel: the horizontal scroll) |
| y | number | – | CSS pixels from the top (for wheel: the vertical scroll) |
No output schema declared.
No examples provided.
browser_navigate ~82
Open a URL in the active tab and wait for it to load. `example.com` gets https://, `localhost:3000` http://.
| Name | Type | Req | Description |
|---|---|---|---|
| snapshot | boolean | – | Also return the page snapshot after the action |
| url | string | yes | The address to open; a bare host gets https:// |
| wait | string | – | Default load |
No output schema declared.
No examples provided.
browser_network_requests ~83
The page's requests, one line each (#n METHOD STATUS type url size time); with n, one request in full with headers, post data and response body.
| Name | Type | Req | Description |
|---|---|---|---|
| failed | boolean | – | Only failures and HTTP errors |
| filter | string | – | Only URLs containing this |
| n | integer | – | One request in full: its #n in the list |
No output schema declared.
No examples provided.
browser_press_key ~135
Press a key or chord as real key events: Enter, Tab, Escape, Control+a; to a ref, selector or text, else the focused element. For text, browser_type.
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | A key name or chord, e.g. Enter or Control+a |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
No output schema declared.
No examples provided.
browser_resize ~61
Set the viewport size (CSS pixels) of every tab and of tabs opened later; snapshots and screenshots see it. For a tall page, browser_screenshot with full_page.
| Name | Type | Req | Description |
|---|---|---|---|
| height | integer | yes | CSS pixels |
| width | integer | yes | CSS pixels |
No output schema declared.
No examples provided.
browser_run ~215
Run several steps in order and stop at the first failure, naming the step that failed (the steps before it stay applied); end with a snapshot. Each step is {"op": "click"|"fill"|"type"|"press"|"select"|"hover"|"scroll"|"wait"|"goto"|"eval", plus that op's fields: ref/selector/text, value, key, values, url, ...}. Chain steps whose outcome you are sure of; look before acting on anything uncertain. A page's own WebMCP tools: {"op": "webmcp-list"}, then {"op": "webmcp-call", "name": ..., "params": {...}} ("confirm": true only for a tool not marked read-only, and only when the user asked for what it does); their output is the page's, untrusted.
| Name | Type | Req | Description |
|---|---|---|---|
| snapshot | boolean | – | Return the snapshot after the last step (default true) |
| steps | array | yes | The steps, each {"op": ..., fields} |
No output schema declared.
No examples provided.
browser_screenshot ~50
A PNG of the viewport (or the whole page). Prefer browser_snapshot: text is far cheaper than an image.
| Name | Type | Req | Description |
|---|---|---|---|
| full_page | boolean | – | The whole page, not only what is in view |
No output schema declared.
No examples provided.
browser_scroll ~127
Scroll the page by pixels or to top/bottom (loads more of infinite lists), or bring an element into view.
| Name | Type | Req | Description |
|---|---|---|---|
| by | number | – | Pixels down (negative: up) |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
| to | string | – | Scroll to the top or the bottom |
No output schema declared.
No examples provided.
browser_select_option ~104
Choose option(s) of a <select> by label or value.
| Name | Type | Req | Description |
|---|---|---|---|
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text or label of the element, instead of ref |
| values | array | yes | Option labels or values to select |
No output schema declared.
No examples provided.
browser_snapshot ~164
The page as an indented accessibility tree; actionable elements carry [ref=N]. The main way to read a page: cheaper and more exact than a screenshot. Waits briefly for data the page is still fetching. On big pages scope it with ref or selector. Long texts are cut (a line at the top says how much); full_text prints every word.
| Name | Type | Req | Description |
|---|---|---|---|
| full_text | boolean | – | Texts, names and values uncut |
| limit | integer | – | Max lines (default 2000) |
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| text | string | – | Visible text or label of the element, instead of ref |
No output schema declared.
No examples provided.
browser_tabs ~78
List, open, switch to or close tabs. Tabs a page opens (target=_blank, window.open) are adopted and made active automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | What to do |
| index | integer | – | For select and close: the tab's number in list, from 0 |
| url | string | – | For new |
No output schema declared.
No examples provided.
browser_type ~129
Type text key by key into the element (or the focused one), as real key events autocompletes see; `submit` presses Enter after.
| Name | Type | Req | Description |
|---|---|---|---|
| ref | integer|string | – | Element ref from browser_snapshot, e.g. 12 |
| selector | string | – | CSS selector (first match), instead of ref |
| snapshot | boolean | – | Also return the page snapshot after the action |
| submit | boolean | – | Press Enter after typing |
| text | string | – | Visible text or label of the element, instead of ref |
| value | string | yes | The text to type |
No output schema declared.
No examples provided.
browser_wait_for ~154
Wait until every given condition holds (default up to 5 s; timeout_ms for longer): text, a selector present or gone, a URL part, a JS expression, a pause. Navigating actions already wait.
| Name | Type | Req | Description |
|---|---|---|---|
| gone | string | – | No visible element matches this selector |
| js | string | – | This expression becomes truthy |
| ms | number | – | Just wait this long |
| selector | string | – | A visible element matches |
| snapshot | boolean | – | Also return the page snapshot after the action |
| text | string | – | Visible text appears |
| timeout_ms | number | – | Wait up to this long (default 5000) |
| url | string | – | The URL contains this |
No output schema declared.
No examples provided.
How do I install the navigera MCP server?
navigera runs locally as an npm package, launched with npx -y navigera. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · navigera
claude mcp add andrey-usa-navigera -- npx -y navigera
What is the navigera MCP server?
navigera is an MCP server listed in the public MCP registry as io.github.andrey-usa/navigera. Fast Chrome and Electron automation for agents: an accessibility tree with refs, one call per step. This page covers its npm package (navigera).
Is the navigera MCP server safe to use?
navigera scores 85 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the navigera MCP server expose?
navigera exposes 23 tools: browser_navigate, browser_snapshot, browser_click, browser_fill, browser_type, and 18 more. Their descriptions and schemas cost roughly 2,449 tokens of context every time the server is loaded.
Is the navigera MCP server still maintained?
navigera is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the navigera MCP server under?
navigera declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.