io.github.browserbase/mcp-server-browserbase
NPM · @BROWSERBASEHQ/MCP-SERVER-BROWSERBASE · SCANNED SEP 20
MCP server for AI web browser automation using Browserbase and Stagehand
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects jsondiffpatch 0.6.0, reached via @browserbasehq/stagehand > ai > jsondiffpatch. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- Dependency health was assessed across the 400 of 477 dependencies we could resolve, so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency44
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 239 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability82
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2709 tokens (~159/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 17 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.browserbase/mcp-server-browserbase server?
io.github.browserbase/mcp-server-browserbase runs locally as an npm package, launched with npx -y @browserbasehq/mcp-server-browserbase. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @browserbasehq/mcp-server-browserbase
claude mcp add browserbase-mcp-server-browserbase -- npx -y @browserbasehq/mcp-server-browserbase
{
"mcpServers": {
"browserbase-mcp-server-browserbase": {
"command": "npx",
"args": [
"-y",
"@browserbasehq/mcp-server-browserbase"
]
}
}
} {
"servers": {
"browserbase-mcp-server-browserbase": {
"command": "npx",
"args": [
"-y",
"@browserbasehq/mcp-server-browserbase"
]
}
}
} codex mcp add browserbase-mcp-server-browserbase -- npx -y @browserbasehq/mcp-server-browserbase
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"browserbase-mcp-server-browserbase": {
"type": "local",
"command": [
"npx",
"-y",
"@browserbasehq/mcp-server-browserbase"
],
"enabled": true
}
}
} openclaw mcp add browserbase-mcp-server-browserbase --command npx --arg -y --arg @browserbasehq/mcp-server-browserbase
mcp_servers:
browserbase-mcp-server-browserbase:
command: "npx"
args: ["-y", "@browserbasehq/mcp-server-browserbase"] {
"McpServers": {
"browserbase-mcp-server-browserbase": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@browserbasehq/mcp-server-browserbase"
]
}
}
} assistant mcp add browserbase-mcp-server-browserbase -t stdio -c npx -a -y @browserbasehq/mcp-server-browserbase
{
"mcpServers": {
"browserbase-mcp-server-browserbase": {
"command": "npx",
"args": [
"-y",
"@browserbasehq/mcp-server-browserbase"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 −2
- Stability: pass → 0.83 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 −2
- Stability: pass → 0.80 functional
- 11 Sept 26 0
- Stability: 0.97 → pass security
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 0
- CVE-2026-8769 affects this package: high ▼ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@browserbasehq/mcp-server-browserbase@2.1.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 11 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-866g-f22w-33x8 | CVE-2026-8769 | medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | yes |
| GHSA-rwvc-j5jr-mgvh | CVE-2025-48985 | low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N | yes |
| GHSA-33vc-wfww-vjfv | CVE-2025-9910 | medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N | yes |
| GHSA-j4fx-xxwh-2485 | CVE-2026-8657 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L | yes |
| GHSA-29mw-wpgm-hmr9 | CVE-2020-28500 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | yes |
| GHSA-35jh-r3h4-6jhm | CVE-2021-23337 | high | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | yes |
| GHSA-f23m-r3pf-42rh | CVE-2025-13465 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | yes |
| GHSA-r5fr-rjxr-66jc | CVE-2021-23337 | high | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | yes |
| GHSA-xxjr-mmjv-4gpg | CVE-2025-13465 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | yes |
| GHSA-2fw4-mgq9-39cx | CVE-2017-18924 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | no |
| GHSA-4rg6-fm25-gc34 | CVE-2020-26938 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N | no |
Background: What a vulnerability scan can and cannot prove →
Dependencies 400 packages
| Packages resolved | 400 |
|---|---|
| Deprecated | 2 |
| Stale | 109 |
| No linked repository | 2 |
| Tree resolution | Partial |
The dependency tree was only partially resolved, so these counts may be incomplete.
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browserbase_screenshot ~67
Takes a screenshot of the current page. Use this tool to learn where you are on the page when controlling the browser with Stagehand. Only use this tool when the other tools are not sufficient to get the information you need.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | The name of the screenshot |
No output schema declared.
No examples provided.
browserbase_session_close ~37
Closes the current Browserbase session by properly shutting down the Stagehand instance, which handles browser cleanup and terminates the session recording.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browserbase_session_create ~132
Create or reuse a single cloud browser session using Browserbase with fully initialized Stagehand. WARNING: This tool is for SINGLE browser workflows only. If you need multiple browser sessions running simultaneously (parallel scraping, A/B testing, multiple accounts), use 'multi_browserbase_stagehand_session_create' instead. This creates one browser session with all configuration flags (proxies, stealth, viewport, cookies, etc.) and initializes Stagehand to work with that session. Updates the active session.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | – | Optional session ID to use/reuse. If not provided or invalid, a new session is created. |
No output schema declared.
No examples provided.
browserbase_stagehand_act ~270
Performs an action on a web page element. Act actions should be as atomic and specific as possible, i.e. "Click the sign in button" or "Type 'hello' into the search input". AVOID actions that are more than one step, i.e. "Order me pizza" or "Send an email to Paul asking him to call me".
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | The action to perform. Should be as atomic and specific as possible, i.e. 'Click the sign in button' or 'Type 'hello' into the search input'. AVOID actions that are more than one step, i.e. 'Order me… |
| variables | object | – | Variables used in the action template. ONLY use variables if you're dealing with sensitive data or dynamic content. For example, if you're logging in to a website, you can use a variable for the pass… |
No output schema declared.
No examples provided.
browserbase_stagehand_extract ~240
Extracts structured information and text content from the current web page based on specific instructions and a defined schema. This tool is ideal for scraping data, gathering information, or pulling specific content from web pages. Use this tool when you need to get text content, data, or information from a page rather than interacting with elements. For interactive elements like buttons, forms, or clickable items, use the observe tool instead. The extraction works best when you provide clear, specific instructions about what to extract and a well-defined JSON schema for the expected output format. This ensures the extracted data is properly structured and usable.
| Name | Type | Req | Description |
|---|---|---|---|
| instruction | string | yes | The specific instruction for what information to extract from the current page. Be as detailed and specific as possible about what you want to extract. For example: 'Extract all product names and pri… |
No output schema declared.
No examples provided.
browserbase_stagehand_get_all_urls ~34
Gets the current URLs of all active browser sessions. Returns a mapping of session IDs to their current URLs.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browserbase_stagehand_get_url ~39
Gets the current URL of the browser page. Returns the complete URL including protocol, domain, path, and any query parameters or fragments.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browserbase_stagehand_navigate ~60
Navigate to a URL in the browser. Only use this tool with URLs you're confident will work and stay up to date. Otherwise, use https://google.com as the starting point
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The URL to navigate to |
No output schema declared.
No examples provided.
browserbase_stagehand_observe ~364
Observes and identifies specific interactive elements on the current web page that can be used for subsequent actions. This tool is specifically designed for finding actionable (interactable) elements such as buttons, links, form fields, dropdowns, checkboxes, and other UI components that you can interact with. Use this tool when you need to locate elements before performing actions with the act tool. DO NOT use this tool for extracting text content or data - use the extract tool instead for that purpose. The observe tool returns detailed information about the identified elements including their properties, location, and interaction capabilities. This information can then be used to craft precise actions. The more specific your observation instruction, the more accurate the element identification will be. Think of this as your 'eyes' on the page to find exactly what you need to interact with.
| Name | Type | Req | Description |
|---|---|---|---|
| instruction | string | yes | Detailed instruction for what specific elements or components to observe on the web page. This instruction must be extremely specific and descriptive. For example: 'Find the red login button in the t… |
| returnAction | boolean | – | Whether to return the action to perform on the element. If true, the action will be returned as a string. If false, the action will not be returned. |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_act_session ~291
Performs an action on a web page element. Act actions should be as atomic and specific as possible, i.e. "Click the sign in button" or "Type 'hello' into the search input". AVOID actions that are more than one step, i.e. "Order me pizza" or "Send an email to Paul asking him to call me". (for a specific session)
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | The action to perform. Should be as atomic and specific as possible, i.e. 'Click the sign in button' or 'Type 'hello' into the search input'. AVOID actions that are more than one step, i.e. 'Order me… |
| sessionId | string | yes | The session ID to use |
| variables | object | – | Variables used in the action template. ONLY use variables if you're dealing with sensitive data or dynamic content. For example, if you're logging in to a website, you can use a variable for the pass… |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_extract_session ~261
Extracts structured information and text content from the current web page based on specific instructions and a defined schema. This tool is ideal for scraping data, gathering information, or pulling specific content from web pages. Use this tool when you need to get text content, data, or information from a page rather than interacting with elements. For interactive elements like buttons, forms, or clickable items, use the observe tool instead. The extraction works best when you provide clear, specific instructions about what to extract and a well-defined JSON schema for the expected output format. This ensures the extracted data is properly structured and usable. (for a specific session)
| Name | Type | Req | Description |
|---|---|---|---|
| instruction | string | yes | The specific instruction for what information to extract from the current page. Be as detailed and specific as possible about what you want to extract. For example: 'Extract all product names and pri… |
| sessionId | string | yes | The session ID to use |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_get_url_session ~60
Gets the current URL of the browser page. Returns the complete URL including protocol, domain, path, and any query parameters or fragments. (for a specific session)
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | The session ID to use |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_navigate_session ~80
Navigate to a URL in the browser. Only use this tool with URLs you're confident will work and stay up to date. Otherwise, use https://google.com as the starting point (for a specific session)
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | The session ID to use |
| url | string | yes | The URL to navigate to |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_observe_session ~385
Observes and identifies specific interactive elements on the current web page that can be used for subsequent actions. This tool is specifically designed for finding actionable (interactable) elements such as buttons, links, form fields, dropdowns, checkboxes, and other UI components that you can interact with. Use this tool when you need to locate elements before performing actions with the act tool. DO NOT use this tool for extracting text content or data - use the extract tool instead for that purpose. The observe tool returns detailed information about the identified elements including their properties, location, and interaction capabilities. This information can then be used to craft precise actions. The more specific your observation instruction, the more accurate the element identification will be. Think of this as your 'eyes' on the page to find exactly what you need to interact with. (for a specific session)
| Name | Type | Req | Description |
|---|---|---|---|
| instruction | string | yes | Detailed instruction for what specific elements or components to observe on the web page. This instruction must be extremely specific and descriptive. For example: 'Find the red login button in the t… |
| returnAction | boolean | – | Whether to return the action to perform on the element. If true, the action will be returned as a string. If false, the action will not be returned. |
| sessionId | string | yes | The session ID to use |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_session_close ~109
Cleanup parallel session for multi-session workflows. Properly terminates a browser session, ends the Browserbase session, and frees cloud resources. Always use this when finished with a session to avoid resource waste and billing charges. Critical for responsible multi-session automation - each unclosed session continues consuming resources!
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | Exact session ID to close (get from 'multi_browserbase_stagehand_session_list'). Double-check this ID - once closed, the session cannot be recovered! |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_session_create ~189
Create parallel browser session for multi-session workflows. Use this when you need multiple browser instances running simultaneously: parallel data scraping, concurrent automation, A/B testing, multiple user accounts, cross-site operations, batch processing, or any task requiring more than one browser. Creates an isolated browser session with independent cookies, authentication, and state. Always pair with session-specific tools (those ending with '_session'). Perfect for scaling automation tasks that require multiple browsers working in parallel.
| Name | Type | Req | Description |
|---|---|---|---|
| browserbaseSessionID | string | – | Resume an existing Browserbase session by providing its session ID. Use this to continue work in a previously created browser session that may have been paused or disconnected. |
| name | string | – | Highly recommended: Descriptive name for tracking multiple sessions (e.g. 'amazon-scraper', 'user-login-flow', 'checkout-test-1'). Makes debugging and session management much easier! |
No output schema declared.
No examples provided.
multi_browserbase_stagehand_session_list ~91
ONLY WORKS WITH MULTI-SESSION TOOLS! Track all parallel sessions: Critical tool for multi-session management! Shows all active browser sessions with their IDs, names, ages, and Browserbase session IDs. Use this frequently to monitor your parallel automation workflows, verify sessions are running, and get session IDs for session-specific tools. Essential for debugging and resource management in complex multi-browser scenarios.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the io.github.browserbase/mcp-server-browserbase server?
io.github.browserbase/mcp-server-browserbase is listed in the public MCP registry as io.github.browserbase/mcp-server-browserbase. MCP server for AI web browser automation using Browserbase and Stagehand. This page covers its npm package (@browserbasehq/mcp-server-browserbase).
Is the io.github.browserbase/mcp-server-browserbase server safe to use?
io.github.browserbase/mcp-server-browserbase scores 80 out of 100 on VerifyMCP. We recorded 11 known advisories against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.browserbase/mcp-server-browserbase server expose?
io.github.browserbase/mcp-server-browserbase exposes 17 tools: multi_browserbase_stagehand_session_create, multi_browserbase_stagehand_session_list, multi_browserbase_stagehand_session_close, multi_browserbase_stagehand_navigate_session, multi_browserbase_stagehand_act_session, and 12 more. Their descriptions and schemas cost roughly 2,709 tokens of context every time the server is loaded.
Is the io.github.browserbase/mcp-server-browserbase server still maintained?
io.github.browserbase/mcp-server-browserbase is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.browserbase/mcp-server-browserbase server under?
io.github.browserbase/mcp-server-browserbase declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.