Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.browserbase/mcp-server-browserbase

NPM · @BROWSERBASEHQ/MCP-SERVER-BROWSERBASE · SCANNED SEP 20

MCP server for AI web browser automation using Browserbase and Stagehand

0 this week 80 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security89
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects jsondiffpatch 0.6.0, reached via @browserbasehq/stagehand > ai > jsondiffpatch. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • Dependency health was assessed across the 400 of 477 dependencies we could resolve, so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency44
Schema Quality & AI Usability82
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2709 tokens (~159/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 17 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.browserbase/mcp-server-browserbase server?

io.github.browserbase/mcp-server-browserbase runs locally as an npm package, launched with npx -y @browserbasehq/mcp-server-browserbase. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @browserbasehq/mcp-server-browserbase

# add to Claude Code
claude mcp add browserbase-mcp-server-browserbase -- npx -y @browserbasehq/mcp-server-browserbase
// .cursor/mcp.json
{
  "mcpServers": {
    "browserbase-mcp-server-browserbase": {
      "command": "npx",
      "args": [
        "-y",
        "@browserbasehq/mcp-server-browserbase"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "browserbase-mcp-server-browserbase": {
      "command": "npx",
      "args": [
        "-y",
        "@browserbasehq/mcp-server-browserbase"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add browserbase-mcp-server-browserbase -- npx -y @browserbasehq/mcp-server-browserbase
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "browserbase-mcp-server-browserbase": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@browserbasehq/mcp-server-browserbase"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add browserbase-mcp-server-browserbase --command npx --arg -y --arg @browserbasehq/mcp-server-browserbase
# ~/.hermes/config.yaml
mcp_servers:
  browserbase-mcp-server-browserbase:
    command: "npx"
    args: ["-y", "@browserbasehq/mcp-server-browserbase"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "browserbase-mcp-server-browserbase": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@browserbasehq/mcp-server-browserbase"
      ]
    }
  }
}
# add to Vellum
assistant mcp add browserbase-mcp-server-browserbase -t stdio -c npx -a -y @browserbasehq/mcp-server-browserbase
// mcp.json
{
  "mcpServers": {
    "browserbase-mcp-server-browserbase": {
      "command": "npx",
      "args": [
        "-y",
        "@browserbasehq/mcp-server-browserbase"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 −2
    • Stability: pass → 0.83 functional
  • 18 Sept 26 0
    • Stability: 0.97 → pass security
  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 −2
    • Stability: pass → 0.80 functional
  • 11 Sept 26 0
    • Stability: 0.97 → pass security
  • 10 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 9 Sept 26 0
    • CVE-2026-8769 affects this package: high security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@browserbasehq/mcp-server-browserbase@2.1.1

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Vulnerabilities 11 findings
ID CVE Severity Vector Fix available
GHSA-866g-f22w-33x8 CVE-2026-8769 medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L yes
GHSA-rwvc-j5jr-mgvh CVE-2025-48985 low CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N yes
GHSA-33vc-wfww-vjfv CVE-2025-9910 medium CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N yes
GHSA-j4fx-xxwh-2485 CVE-2026-8657 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L yes
GHSA-29mw-wpgm-hmr9 CVE-2020-28500 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
GHSA-35jh-r3h4-6jhm CVE-2021-23337 high CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H yes
GHSA-f23m-r3pf-42rh CVE-2025-13465 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L yes
GHSA-r5fr-rjxr-66jc CVE-2021-23337 high CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H yes
GHSA-xxjr-mmjv-4gpg CVE-2025-13465 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L yes
GHSA-2fw4-mgq9-39cx CVE-2017-18924 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N no
GHSA-4rg6-fm25-gc34 CVE-2020-26938 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N no

Background: What a vulnerability scan can and cannot prove →

Dependencies 400 packages
Packages resolved 400
Deprecated 2
Stale 109
No linked repository 2
Tree resolution Partial

The dependency tree was only partially resolved, so these counts may be incomplete.

Background: SBOMs and build attestations, explained →

MCP tools · 17 exposed · ~2,709 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
browserbase_screenshot ~67

Takes a screenshot of the current page. Use this tool to learn where you are on the page when controlling the browser with Stagehand. Only use this tool when the other tools are not sufficient to get the information you need.

NameTypeReqDescription
namestringThe name of the screenshot

No output schema declared.

No examples provided.

browserbase_session_close ~37

Closes the current Browserbase session by properly shutting down the Stagehand instance, which handles browser cleanup and terminates the session recording.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browserbase_session_create ~132

Create or reuse a single cloud browser session using Browserbase with fully initialized Stagehand. WARNING: This tool is for SINGLE browser workflows only. If you need multiple browser sessions running simultaneously (parallel scraping, A/B testing, multiple accounts), use 'multi_browserbase_stagehand_session_create' instead. This creates one browser session with all configuration flags (proxies, stealth, viewport, cookies, etc.) and initializes Stagehand to work with that session. Updates the active session.

NameTypeReqDescription
sessionIdstringOptional session ID to use/reuse. If not provided or invalid, a new session is created.

No output schema declared.

No examples provided.

browserbase_stagehand_act ~270

Performs an action on a web page element. Act actions should be as atomic and specific as possible, i.e. "Click the sign in button" or "Type 'hello' into the search input". AVOID actions that are more than one step, i.e. "Order me pizza" or "Send an email to Paul asking him to call me".

NameTypeReqDescription
actionstringyesThe action to perform. Should be as atomic and specific as possible, i.e. 'Click the sign in button' or 'Type 'hello' into the search input'. AVOID actions that are more than one step, i.e. 'Order me…
variablesobjectVariables used in the action template. ONLY use variables if you're dealing with sensitive data or dynamic content. For example, if you're logging in to a website, you can use a variable for the pass…

No output schema declared.

No examples provided.

browserbase_stagehand_extract ~240

Extracts structured information and text content from the current web page based on specific instructions and a defined schema. This tool is ideal for scraping data, gathering information, or pulling specific content from web pages. Use this tool when you need to get text content, data, or information from a page rather than interacting with elements. For interactive elements like buttons, forms, or clickable items, use the observe tool instead. The extraction works best when you provide clear, specific instructions about what to extract and a well-defined JSON schema for the expected output format. This ensures the extracted data is properly structured and usable.

NameTypeReqDescription
instructionstringyesThe specific instruction for what information to extract from the current page. Be as detailed and specific as possible about what you want to extract. For example: 'Extract all product names and pri…

No output schema declared.

No examples provided.

browserbase_stagehand_get_all_urls ~34

Gets the current URLs of all active browser sessions. Returns a mapping of session IDs to their current URLs.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browserbase_stagehand_get_url ~39

Gets the current URL of the browser page. Returns the complete URL including protocol, domain, path, and any query parameters or fragments.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browserbase_stagehand_navigate ~60

Navigate to a URL in the browser. Only use this tool with URLs you're confident will work and stay up to date. Otherwise, use https://google.com as the starting point

NameTypeReqDescription
urlstringyesThe URL to navigate to

No output schema declared.

No examples provided.

browserbase_stagehand_observe ~364

Observes and identifies specific interactive elements on the current web page that can be used for subsequent actions. This tool is specifically designed for finding actionable (interactable) elements such as buttons, links, form fields, dropdowns, checkboxes, and other UI components that you can interact with. Use this tool when you need to locate elements before performing actions with the act tool. DO NOT use this tool for extracting text content or data - use the extract tool instead for that purpose. The observe tool returns detailed information about the identified elements including their properties, location, and interaction capabilities. This information can then be used to craft precise actions. The more specific your observation instruction, the more accurate the element identification will be. Think of this as your 'eyes' on the page to find exactly what you need to interact with.

NameTypeReqDescription
instructionstringyesDetailed instruction for what specific elements or components to observe on the web page. This instruction must be extremely specific and descriptive. For example: 'Find the red login button in the t…
returnActionbooleanWhether to return the action to perform on the element. If true, the action will be returned as a string. If false, the action will not be returned.

No output schema declared.

No examples provided.

multi_browserbase_stagehand_act_session ~291

Performs an action on a web page element. Act actions should be as atomic and specific as possible, i.e. "Click the sign in button" or "Type 'hello' into the search input". AVOID actions that are more than one step, i.e. "Order me pizza" or "Send an email to Paul asking him to call me". (for a specific session)

NameTypeReqDescription
actionstringyesThe action to perform. Should be as atomic and specific as possible, i.e. 'Click the sign in button' or 'Type 'hello' into the search input'. AVOID actions that are more than one step, i.e. 'Order me…
sessionIdstringyesThe session ID to use
variablesobjectVariables used in the action template. ONLY use variables if you're dealing with sensitive data or dynamic content. For example, if you're logging in to a website, you can use a variable for the pass…

No output schema declared.

No examples provided.

multi_browserbase_stagehand_extract_session ~261

Extracts structured information and text content from the current web page based on specific instructions and a defined schema. This tool is ideal for scraping data, gathering information, or pulling specific content from web pages. Use this tool when you need to get text content, data, or information from a page rather than interacting with elements. For interactive elements like buttons, forms, or clickable items, use the observe tool instead. The extraction works best when you provide clear, specific instructions about what to extract and a well-defined JSON schema for the expected output format. This ensures the extracted data is properly structured and usable. (for a specific session)

NameTypeReqDescription
instructionstringyesThe specific instruction for what information to extract from the current page. Be as detailed and specific as possible about what you want to extract. For example: 'Extract all product names and pri…
sessionIdstringyesThe session ID to use

No output schema declared.

No examples provided.

multi_browserbase_stagehand_get_url_session ~60

Gets the current URL of the browser page. Returns the complete URL including protocol, domain, path, and any query parameters or fragments. (for a specific session)

NameTypeReqDescription
sessionIdstringyesThe session ID to use

No output schema declared.

No examples provided.

multi_browserbase_stagehand_navigate_session ~80

Navigate to a URL in the browser. Only use this tool with URLs you're confident will work and stay up to date. Otherwise, use https://google.com as the starting point (for a specific session)

NameTypeReqDescription
sessionIdstringyesThe session ID to use
urlstringyesThe URL to navigate to

No output schema declared.

No examples provided.

multi_browserbase_stagehand_observe_session ~385

Observes and identifies specific interactive elements on the current web page that can be used for subsequent actions. This tool is specifically designed for finding actionable (interactable) elements such as buttons, links, form fields, dropdowns, checkboxes, and other UI components that you can interact with. Use this tool when you need to locate elements before performing actions with the act tool. DO NOT use this tool for extracting text content or data - use the extract tool instead for that purpose. The observe tool returns detailed information about the identified elements including their properties, location, and interaction capabilities. This information can then be used to craft precise actions. The more specific your observation instruction, the more accurate the element identification will be. Think of this as your 'eyes' on the page to find exactly what you need to interact with. (for a specific session)

NameTypeReqDescription
instructionstringyesDetailed instruction for what specific elements or components to observe on the web page. This instruction must be extremely specific and descriptive. For example: 'Find the red login button in the t…
returnActionbooleanWhether to return the action to perform on the element. If true, the action will be returned as a string. If false, the action will not be returned.
sessionIdstringyesThe session ID to use

No output schema declared.

No examples provided.

multi_browserbase_stagehand_session_close ~109

Cleanup parallel session for multi-session workflows. Properly terminates a browser session, ends the Browserbase session, and frees cloud resources. Always use this when finished with a session to avoid resource waste and billing charges. Critical for responsible multi-session automation - each unclosed session continues consuming resources!

NameTypeReqDescription
sessionIdstringyesExact session ID to close (get from 'multi_browserbase_stagehand_session_list'). Double-check this ID - once closed, the session cannot be recovered!

No output schema declared.

No examples provided.

multi_browserbase_stagehand_session_create ~189

Create parallel browser session for multi-session workflows. Use this when you need multiple browser instances running simultaneously: parallel data scraping, concurrent automation, A/B testing, multiple user accounts, cross-site operations, batch processing, or any task requiring more than one browser. Creates an isolated browser session with independent cookies, authentication, and state. Always pair with session-specific tools (those ending with '_session'). Perfect for scaling automation tasks that require multiple browsers working in parallel.

NameTypeReqDescription
browserbaseSessionIDstringResume an existing Browserbase session by providing its session ID. Use this to continue work in a previously created browser session that may have been paused or disconnected.
namestringHighly recommended: Descriptive name for tracking multiple sessions (e.g. 'amazon-scraper', 'user-login-flow', 'checkout-test-1'). Makes debugging and session management much easier!

No output schema declared.

No examples provided.

multi_browserbase_stagehand_session_list ~91

ONLY WORKS WITH MULTI-SESSION TOOLS! Track all parallel sessions: Critical tool for multi-session management! Shows all active browser sessions with their IDs, names, ages, and Browserbase session IDs. Use this frequently to monitor your parallel automation workflows, verify sessions are running, and get session IDs for session-specific tools. Essential for debugging and resource management in complex multi-browser scenarios.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Common questions

What is the io.github.browserbase/mcp-server-browserbase server?

io.github.browserbase/mcp-server-browserbase is listed in the public MCP registry as io.github.browserbase/mcp-server-browserbase. MCP server for AI web browser automation using Browserbase and Stagehand. This page covers its npm package (@browserbasehq/mcp-server-browserbase).

Is the io.github.browserbase/mcp-server-browserbase server safe to use?

io.github.browserbase/mcp-server-browserbase scores 80 out of 100 on VerifyMCP. We recorded 11 known advisories against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.browserbase/mcp-server-browserbase server expose?

io.github.browserbase/mcp-server-browserbase exposes 17 tools: multi_browserbase_stagehand_session_create, multi_browserbase_stagehand_session_list, multi_browserbase_stagehand_session_close, multi_browserbase_stagehand_navigate_session, multi_browserbase_stagehand_act_session, and 12 more. Their descriptions and schemas cost roughly 2,709 tokens of context every time the server is loaded.

Is the io.github.browserbase/mcp-server-browserbase server still maintained?

io.github.browserbase/mcp-server-browserbase is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.browserbase/mcp-server-browserbase server under?

io.github.browserbase/mcp-server-browserbase declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.