# io.github.CloudCorpRecords/browserstage (npm · @reneturcios/browserstage)

Automate a browser with accessibility snapshots: navigate, click, type, fill and wait.

- Trust score: 62/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- npm · `@reneturcios/browserstage`: 62/100 (this document), [markdown](https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage.md), [page](https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage)
- oci · `ghcr.io/cloudcorprecords/browserstage`: 40/100, [markdown](https://verifymcp.io/servers/cloudcorprecords-browserstage/ghcr-io-cloudcorprecords-browserstage.md), [page](https://verifymcp.io/servers/cloudcorprecords-browserstage/ghcr-io-cloudcorprecords-browserstage)

## Channel facts

- Registry: `npm`
- Package: `@reneturcios/browserstage`
- Version: `0.1.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 81/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.
  - No install/post-install scripts declared.
  - 30 of 93 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 5 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 68/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1342 tokens (~55/item across 24 items; 24 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "browser_drop" implies "drop" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the io.github.CloudCorpRecords/browserstage MCP server?

io.github.CloudCorpRecords/browserstage runs locally as an npm package, launched with npx -y @reneturcios/browserstage. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add cloudcorprecords-browserstage -- npx -y @reneturcios/browserstage
```

### Cursor

```json
{
  "mcpServers": {
    "cloudcorprecords-browserstage": {
      "command": "npx",
      "args": [
        "-y",
        "@reneturcios/browserstage"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "cloudcorprecords-browserstage": {
      "command": "npx",
      "args": [
        "-y",
        "@reneturcios/browserstage"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add cloudcorprecords-browserstage -- npx -y @reneturcios/browserstage
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cloudcorprecords-browserstage": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@reneturcios/browserstage"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add cloudcorprecords-browserstage --command npx --arg -y --arg @reneturcios/browserstage
```

### Hermes

```yaml
mcp_servers:
  cloudcorprecords-browserstage:
    command: "npx"
    args: ["-y", "@reneturcios/browserstage"]
```

### Netclaw

```json
{
  "McpServers": {
    "cloudcorprecords-browserstage": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@reneturcios/browserstage"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add cloudcorprecords-browserstage -t stdio -c npx -a -y @reneturcios/browserstage
```

### Other

```json
{
  "mcpServers": {
    "cloudcorprecords-browserstage": {
      "command": "npx",
      "args": [
        "-y",
        "@reneturcios/browserstage"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-01 (score 62, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-10-31 (score 47)

First indexed and scored.

## MCP tools (24)

### `browser_navigate` (~28 tokens)

Navigate to a URL

Input parameters:

- `url` (string, required): The URL to navigate the page to

### `browser_navigate_back` (~21 tokens)

Go back to the previous page in the browser history

### `browser_snapshot` (~65 tokens)

Capture accessibility snapshot of the current page

Input parameters:

- `depth` (number): Optional maximum depth of the accessibility tree to capture
- `filename` (string): Optional filename to save the snapshot to
- `target` (string): Optional element reference from a page snapshot to scope the snapshot to

### `browser_find` (~52 tokens)

Search the accessibility snapshot for text or a regular expression

Input parameters:

- `regex` (string): Optional regular expression to search for in the page snapshot
- `text` (string): Optional text to search for in the page snapshot

### `browser_click` (~79 tokens)

Perform click on a web page

Input parameters:

- `button` (string): Optional mouse button to click with: left, right, or middle
- `doubleClick` (boolean): Whether to double click the element
- `element` (string, required): Human-readable description of the element to click
- `target` (string, required): Element reference from a page snapshot to click

### `browser_hover` (~48 tokens)

Hover over an element on the page

Input parameters:

- `element` (string, required): Human-readable description of the element to hover over
- `target` (string, required): Element reference from a page snapshot to hover over

### `browser_drag` (~82 tokens)

Perform drag and drop between two elements

Input parameters:

- `endElement` (string, required): Human-readable description of the element to drop onto
- `endTarget` (string, required): Element reference of the element to drop onto
- `startElement` (string, required): Human-readable description of the element to drag from
- `startTarget` (string, required): Element reference of the element to drag from

### `browser_drop` (~65 tokens)

Drop files or data onto an element on the page

Input parameters:

- `element` (string, required): Human-readable description of the element to drop onto
- `paths` (array): Optional file paths to drop onto the element
- `target` (string, required): Element reference of the element to drop onto

### `browser_select_option` (~48 tokens)

Select an option in a dropdown

Input parameters:

- `target` (string, required): Element reference of the dropdown to select an option in
- `values` (array, required): The option values to select in the dropdown

### `browser_type` (~91 tokens)

Type text into an editable element

Input parameters:

- `element` (string, required): Human-readable description of the editable element to type into
- `slowly` (boolean): Whether to type the text one character at a time
- `submit` (boolean): Whether to press Enter after typing
- `target` (string, required): Element reference of the element to type into
- `text` (string, required): The text to type into the element

### `browser_press_key` (~39 tokens)

Press a key on the keyboard

Input parameters:

- `key` (string, required): The key to press, such as Enter, ArrowDown, or a single character

### `browser_fill_form` (~44 tokens)

Fill multiple form fields

Input parameters:

- `fields` (array, required): The form fields to fill; each field carries a name, a type, a value, and an optional element target

### `browser_take_screenshot` (~91 tokens)

Take a screenshot of the current page

Input parameters:

- `filename` (string): Optional filename to save the screenshot to
- `fullPage` (boolean): Whether to capture the full scrollable page instead of the viewport
- `target` (string): Optional element reference from a page snapshot to screenshot instead of the page
- `type` (string): Optional image format of the screenshot, such as png or jpeg

### `browser_run_code_unsafe` (~46 tokens)

Run a Playwright code snippet against the current page (unsafe: arbitrary code execution)

Input parameters:

- `code` (string, required): The Playwright code snippet to run against the current page

### `browser_evaluate` (~73 tokens)

Evaluate JavaScript expression on the page or on an element

Input parameters:

- `element` (string): Optional human-readable description of the element to evaluate on
- `function` (string, required): The JavaScript function to evaluate on the page or on an element
- `target` (string): Optional element reference to evaluate the function on

### `browser_wait_for` (~73 tokens)

Wait for text to appear or disappear, or for a specified time to pass

Input parameters:

- `text` (string): Optional text to wait for the page to contain
- `textGone` (string): Optional text to wait for the page to no longer contain
- `time` (number): Optional time in seconds to wait

### `browser_handle_dialog` (~50 tokens)

Handle a browser dialog

Input parameters:

- `accept` (boolean, required): Whether to accept the dialog (true) or dismiss it (false)
- `promptText` (string): Optional text to enter into a prompt dialog

### `browser_file_upload` (~37 tokens)

Upload one or multiple files

Input parameters:

- `paths` (array): Optional file paths to upload; when omitted, an open file chooser is cancelled

### `browser_console_messages` (~72 tokens)

Returns all console messages

Input parameters:

- `all` (boolean): Whether to return console messages for all frames, not just the current page
- `filename` (string): Optional filename to save the console messages to
- `level` (string): Optional console message level to return: info, warning, error, or debug

### `browser_network_requests` (~53 tokens)

Returns a numbered list of network requests since loading the page

Input parameters:

- `filename` (string): Optional filename to save the request list to
- `static` (boolean): Optional flag to filter the list by static resource requests

### `browser_network_request` (~53 tokens)

Returns the full details of a single network request

Input parameters:

- `filename` (string): Optional filename to save the request details to
- `index` (number, required): The index of the network request in the browser_network_requests list

### `browser_tabs` (~75 tokens)

List, create, close, or select a browser tab

Input parameters:

- `action` (string, required): The tab action to perform: list, new, close, or select
- `index` (number): Optional index of the tab for the close and select actions
- `url` (string): Optional URL to open when the action is new

### `browser_close` (~16 tokens)

Close the current page and the browser

### `browser_resize` (~41 tokens)

Resize the browser window

Input parameters:

- `height` (number, required): The new browser window height in pixels
- `width` (number, required): The new browser window width in pixels

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage#diagnostics

## Score history

- 2026-11-05: 62
- 2026-11-04: 62
- 2026-11-03: 62
- 2026-11-02: 62
- 2026-11-01: 62
- 2026-10-31: 47

## Common questions

### What is the io.github.CloudCorpRecords/browserstage MCP server?

io.github.CloudCorpRecords/browserstage is an MCP server listed in the public MCP registry as io.github.CloudCorpRecords/browserstage. Automate a browser with accessibility snapshots: navigate, click, type, fill and wait. This page covers its npm package (@reneturcios/browserstage).

### Is the io.github.CloudCorpRecords/browserstage MCP server safe to use?

io.github.CloudCorpRecords/browserstage scores 62 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.CloudCorpRecords/browserstage MCP server expose?

io.github.CloudCorpRecords/browserstage exposes 24 tools: browser_navigate, browser_navigate_back, browser_snapshot, browser_find, browser_click, and 19 more. Their descriptions and schemas cost roughly 1,342 tokens of context every time the server is loaded.

### Is the io.github.CloudCorpRecords/browserstage MCP server still maintained?

io.github.CloudCorpRecords/browserstage is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the io.github.CloudCorpRecords/browserstage MCP server under?

io.github.CloudCorpRecords/browserstage declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/@reneturcios/browserstage
- Socket report: https://socket.dev/npm/package/@reneturcios/browserstage
- Repository: https://github.com/CloudCorpRecords/browserstage
- Changelog RSS feed: https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage.xml
- Changelog JSON feed: https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage.json
- HTML version of this page: https://verifymcp.io/servers/cloudcorprecords-browserstage/reneturcios-browserstage
