io.github.davarion-tech/agentic-browser
NPM · AGENTIC-BROWSER-MCP
Give any AI agent your real Chrome: text perception, visible cursor, ~4x fewer tokens.
Available components
Last scanned (8 hours ago)
Scores higher than 38% of npm servers
Category Browser Automation
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security92
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Declares code that runs automatically (postinstall) and that we could not recognise. It may be perfectly ordinary, but we have not established what it does. View diagnostics → Partial
- 33 of 101 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability67
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 3594 tokens (~102/item across 35 items; 35 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management20
- Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage86
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 57% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "browser_eval" implies "eval" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 36 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Oct 26 +16
- Malware scan: unverified → pass ▲ security
- 21 Oct 26 −13
- Malware scan: pass → unverified ▼ security
- Schema quality: 90 → 102 ▼ functional
- Stability: unverified → 0.13 ▲ functional
- Package version: 1.0.1 → 1.2.0 functional
- 18 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 17 Oct 26 49
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Oct 2026 · Analysed npm/agentic-browser-mcp@1.2.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| postinstall | unreviewed | node scripts/postinstall.js |
Background: Why install scripts are a supply-chain risk →
Dependencies 101 packages
| Packages resolved | 101 |
|---|---|
| Stale | 33 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browser_batch ~116
Varias acciones en UNA llamada (ahorra un turno del agente por acción): [{tool:"browser_click", args:{ref:12}}, {tool:"browser_type", args:{ref:14, text:"hola", submit:true}}]. Se ejecutan en orden y se detiene en el primer error. Úsala cuando ya sabes los pasos siguientes; con snapshot:true devuelve el estado final.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | yes | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
No output schema declared.
No examples provided.
browser_click ~149
Mueve el cursor de forma visible y hace clic real (CDP Input) sobre un ref o x,y.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | – |
| clickCount | number | – | 2 = doble clic |
| modifiers | array | – | – |
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| x | number | – | Coordenada X en píxeles CSS del viewport |
| y | number | – | Coordenada Y en píxeles CSS del viewport |
No output schema declared.
No examples provided.
browser_console ~29
Últimos mensajes de consola y errores JS de la pestaña activa.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
No output schema declared.
No examples provided.
browser_cursor ~21
Posición actual del cursor del agente y el elemento bajo él.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_cursor_style ~95
Muestra/oculta el cursor visual, su estela o el contador de tokens en vivo (hud) en la esquina de la página.
| Name | Type | Req | Description |
|---|---|---|---|
| hud | boolean | – | Contador de tokens frente a capturas, visible para quien mira |
| teachButton | boolean | – | Botón flotante "Enseñar una tarea" en el borde izquierdo |
| trail | boolean | – | – |
| visible | boolean | – | – |
No output schema declared.
No examples provided.
browser_dismiss ~77
Cierra popups que tapan la página (idioma, newsletter, cookies, "inicia sesión con Google"), con clics visibles. Solo pulsa botones de cerrar o rechazar, nunca aceptar, suscribirse ni iniciar sesión. Ya se hace solo tras browser_navigate (AGENT_AUTO_DISMISS=0 lo apaga).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_drag ~65
Arrastra de un punto/ref a otro con el botón pulsado (sliders, kanban, mapas).
| Name | Type | Req | Description |
|---|---|---|---|
| from | object | yes | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| to | object | yes | – |
No output schema declared.
No examples provided.
browser_element_at ~54
Visión por píxel SIN imagen: dado (x,y) devuelve qué elemento hay ahí (rol, texto, si es clicable, ruta DOM).
| Name | Type | Req | Description |
|---|---|---|---|
| x | number | yes | – |
| y | number | yes | – |
No output schema declared.
No examples provided.
browser_eval ~41
Ejecuta JavaScript en la página y devuelve el resultado (JSON). Desactivada salvo AGENT_ALLOW_EVAL=1.
| Name | Type | Req | Description |
|---|---|---|---|
| expression | string | yes | – |
No output schema declared.
No examples provided.
browser_events ~27
Diálogos aceptados, descargas guardadas y popups abiertos desde la última consulta.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_extract ~178
Datos estructurados en UNA llamada: convierte la tabla o la lista repetida más relevante (productos, resultados, contactos) en filas JSON o CSV, con título, enlace, precio e imagen. Limítalo con ref o selector. Con file lo guarda en disco y solo devuelve un resumen.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | – | Guardar en este archivo (relativo a ~/.agentic-browser/exports) |
| format | string | – | – |
| kind | string | – | auto (por defecto) elige la tabla o lista con más contenido |
| max | number | – | Máximo de filas (100) |
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
| selector | string | – | Contenedor CSS donde buscar |
No output schema declared.
No examples provided.
browser_find ~43
Busca elementos por texto/etiqueta y devuelve sus refs y coordenadas, incluso fuera del viewport.
| Name | Type | Req | Description |
|---|---|---|---|
| max | number | – | – |
| query | string | yes | – |
No output schema declared.
No examples provided.
browser_history ~44
Atrás, adelante o recargar.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
No output schema declared.
No examples provided.
browser_move ~103
Mueve el cursor visible (hover) a un ref o a x,y. Dispara mouseover/mousemove reales.
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
| x | number | – | Coordenada X en píxeles CSS del viewport |
| y | number | – | Coordenada Y en píxeles CSS del viewport |
No output schema declared.
No examples provided.
browser_navigate ~59
Abre una URL en la pestaña activa. Devuelve título/URL y opcionalmente el snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| url | string | yes | – |
No output schema declared.
No examples provided.
browser_press ~69
Pulsa teclas o combinaciones: "Enter", "Escape", "Control+L", "Tab", "ArrowDown"... Varias separadas por espacio.
| Name | Type | Req | Description |
|---|---|---|---|
| keys | string | yes | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
No output schema declared.
No examples provided.
browser_read ~42
Texto legible de la página (o de un selector CSS), para leer artículos/resultados.
| Name | Type | Req | Description |
|---|---|---|---|
| maxChars | number | – | – |
| selector | string | – | – |
No output schema declared.
No examples provided.
browser_recipes ~32
Lista las recetas grabadas o, con name, muestra sus pasos y parámetros.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | – |
No output schema declared.
No examples provided.
browser_record_start ~188
Empieza a grabar en vídeo la pestaña activa (con el cursor rojo visible) para clips de demostración. Sigue usando las demás herramientas y termina con browser_record_stop. Las pausas sin cambios conservan su duración real. MP4 (H.264) si hay ffmpeg en el PATH; si no, WebM.
| Name | Type | Req | Description |
|---|---|---|---|
| demo | boolean | – | Ralentiza el cursor mientras se graba para que se lea mejor |
| file | string | – | Nombre o ruta del archivo; relativo a ~/.agentic-browser/recordings |
| format | string | – | mp4 requiere ffmpeg; webm no tiene dependencias pero tarda lo que dura el clip al parar |
| fps | number | – | Fotogramas por segundo del vídeo final (25) |
| maxSeconds | number | – | Se detiene sola tras estos segundos (120, máx. 600) |
No output schema declared.
No examples provided.
browser_record_stop ~36
Detiene la grabación de browser_record_start y codifica el vídeo. Devuelve ruta, duración (s), tamaño y formato.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_replay ~107
Repite una receta grabada. Localiza cada elemento por rol y nombre y ejecuta los pasos sin percibir la página: casi no gasta tokens. params cambia los textos escritos, ej. {"buscar": "facturas octubre"}. Los campos secretos (contraseñas) siempre los escribe la persona.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
| params | object | – | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
No output schema declared.
No examples provided.
browser_request_human ~83
Pide ayuda a la persona que mira el navegador (login, 2FA, CAPTCHA, una decisión). Muestra un banner y espera a que pulse "Listo" o "Cancelar". El agente no ve lo que el humano escribe.
| Name | Type | Req | Description |
|---|---|---|---|
| reason | string | yes | Qué necesitas, en una frase |
| timeout | number | – | ms (600000) |
No output schema declared.
No examples provided.
browser_screenshot ~95
ÚLTIMO RECURSO (gasta tokens): imagen JPEG de la página o de un ref, para contenido puramente visual (canvas, gráficos, captchas no).
| Name | Type | Req | Description |
|---|---|---|---|
| fullPage | boolean | – | – |
| quality | number | – | – |
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
No output schema declared.
No examples provided.
browser_scroll ~137
Desplaza con la rueda del ratón (dy>0 baja). Con ref, lleva ese elemento al centro.
| Name | Type | Req | Description |
|---|---|---|---|
| dx | number | – | – |
| dy | number | – | – |
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| x | number | – | Coordenada X en píxeles CSS del viewport |
| y | number | – | Coordenada Y en píxeles CSS del viewport |
No output schema declared.
No examples provided.
browser_select ~60
Elige opciones en un <select> (por valor o texto visible).
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string|number | yes | – |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| values | array | yes | – |
No output schema declared.
No examples provided.
browser_snapshot ~134
PERCEPCIÓN PRINCIPAL (sin captura). Lista compacta de elementos visibles con ref, rol, nombre, estado y centro @x,y en píxeles. ~15 tokens por elemento. Con diff:true devuelve solo lo que cambió desde el snapshot anterior.
| Name | Type | Req | Description |
|---|---|---|---|
| diff | boolean | – | Solo cambios: + nuevo, - desaparecido, ~ modificado |
| includeText | boolean | – | Añade el texto visible de la página (hasta 4000 chars) |
| max | number | – | Máximo de elementos (250) |
| viewportOnly | boolean | – | Solo lo visible en pantalla (por defecto true) |
No output schema declared.
No examples provided.
browser_stats ~51
Tokens que ha devuelto agentic-browser en esta sesión frente a lo que habrían costado las capturas de pantalla (una por cada percepción, ancho×alto/750).
| Name | Type | Req | Description |
|---|---|---|---|
| reset | boolean | – | – |
No output schema declared.
No examples provided.
browser_tabs ~49
Gestiona pestañas: list, new (con url), select (index), close (index).
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| index | number | – | – |
| url | string | – | – |
No output schema declared.
No examples provided.
browser_teach_start ~123
MODO ENSEÑAR. Empieza a grabar una receta: la persona hace la tarea una vez en el Chrome del agente (clics, textos, selecciones, Enter) y pulsa "Terminar" en el banner. Se guarda por rol y nombre de cada elemento, no por píxeles. Las contraseñas nunca se graban. Después llama a browser_teach_stop.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Nombre corto de la receta, ej. "buscar-factura" |
| url | string | – | Página donde empieza la tarea |
No output schema declared.
No examples provided.
browser_teach_stop ~78
Termina la grabación de browser_teach_start. Por defecto espera a que la persona pulse "Terminar" (o "Cancelar"). Guarda la receta y devuelve sus pasos y parámetros.
| Name | Type | Req | Description |
|---|---|---|---|
| timeout | number | – | ms (600000) |
| wait | boolean | – | Esperar al botón Terminar (true); false corta ya |
No output schema declared.
No examples provided.
browser_trace ~40
Últimas acciones ejecutadas (herramienta, argumentos, duración, URL, resultado) para depurar o auditar.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
No output schema declared.
No examples provided.
browser_type ~210
Escribe texto con eventos de teclado reales. Si das ref/x,y primero hace clic para enfocar. Nunca escribe en contraseñas, códigos 2FA, tarjetas ni números de cuenta (estado {sensitive}): eso lo hace la persona con browser_request_human.
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | Borra el contenido antes de escribir |
| delay | number | – | ms entre teclas (15; 0 con AGENT_SPEED=fast) |
| ref | string|number | – | Ref de un elemento devuelto por browser_snapshot/browser_find (ej. 12 o "f1:7" en iframes) |
| snapshot | boolean | – | Si true, devuelve el snapshot tras la acción (ahorra un turno) |
| submit | boolean | – | Pulsa Enter al final |
| text | string | yes | – |
| x | number | – | Coordenada X en píxeles CSS del viewport |
| y | number | – | Coordenada Y en píxeles CSS del viewport |
No output schema declared.
No examples provided.
browser_upload ~61
Adjunta archivos locales a un <input type=file> (o al selector que abre un clic en ese ref). Solo desde las carpetas permitidas (AGENT_UPLOAD_DIRS).
| Name | Type | Req | Description |
|---|---|---|---|
| files | array | yes | – |
| ref | string|number | yes | – |
No output schema declared.
No examples provided.
browser_wait ~50
Espera ms, o hasta que aparezca un texto o selector.
| Name | Type | Req | Description |
|---|---|---|---|
| ms | number | – | – |
| selector | string | – | – |
| text | string | – | – |
| timeout | number | – | – |
No output schema declared.
No examples provided.
browser_watch ~123
Espera (sin gastar tokens) hasta que la página cambie: aparece texto nuevo, cambia el título (ej. "(3) WhatsApp") o coincide un patrón. Ideal para vigilar chats, correos o resultados que tardan.
| Name | Type | Req | Description |
|---|---|---|---|
| selector | string | – | Contenedor CSS a vigilar (por defecto body) |
| text | string | – | Regex: solo despierta si el texto nuevo coincide |
| timeout | number | – | ms máximos de espera (300000) |
| titleChange | boolean | – | Despertar si cambia el título (true) |
No output schema declared.
No examples provided.
How do I install the io.github.davarion-tech/agentic-browser MCP server?
io.github.davarion-tech/agentic-browser runs locally as an npm package, launched with npx -y agentic-browser-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · agentic-browser-mcp
claude mcp add davarion-tech-agentic-browser -- npx -y agentic-browser-mcp
What is the io.github.davarion-tech/agentic-browser MCP server?
io.github.davarion-tech/agentic-browser is an MCP server listed in the public MCP registry as io.github.davarion-tech/agentic-browser. Give any AI agent your real Chrome: text perception, visible cursor, ~4x fewer tokens. This page covers its npm package (agentic-browser-mcp).
Is the io.github.davarion-tech/agentic-browser MCP server safe to use?
io.github.davarion-tech/agentic-browser scores 67 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 23 October 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.davarion-tech/agentic-browser MCP server expose?
io.github.davarion-tech/agentic-browser exposes 35 tools: browser_navigate, browser_history, browser_snapshot, browser_find, browser_element_at, and 30 more. Their descriptions and schemas cost roughly 2,869 tokens of context every time the server is loaded.
Is the io.github.davarion-tech/agentic-browser MCP server still maintained?
io.github.davarion-tech/agentic-browser is still listed as active in the MCP registry. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.davarion-tech/agentic-browser MCP server under?
io.github.davarion-tech/agentic-browser declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.