agent-in-browser
MCPB · AGENT-IN-BROWSER-0.1.1.MCPB
Real browser for any agent: Chrome/Edge/Brave via CDP, Firefox via BiDi. Refs, forms, console, net.
Available components
Last scanned (16 hours ago)
Scores higher than 76% of MCPB servers
Category Browser Automation
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability73
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1972 tokens (~85/item across 23 items; 23 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 2 categories
Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 21 Oct 26 40
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Oct 2026 · Analysed mcpb/https://github.com/Gwakko/agent-in-browser/releases/download/v0.1.1/agent-in-browser-0.1.1.mcpb
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browser_close ~26
Close the browser launched by agent-in-browser. The next tool call starts a fresh one.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_status ~27
Show the connected browser (launching it if needed), protocol, current tab and open tabs.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browsers_installed ~22
List browsers detected on this machine and whether they can be driven.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
click ~154
Click an element (by ref, selector or visible text) or page coordinates with real mouse events. The element is scrolled into view first.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | Mouse button (default left). |
| double | boolean | – | Double-click. |
| match | string | – | Visible text / accessible name to match (case-insensitive substring). |
| ref | string | – | Element ref from snapshot/find, e.g. "e12". Preferred. |
| selector | string | – | CSS selector (first match). |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| x | number | – | Viewport x coordinate (instead of an element). |
| y | number | – | Viewport y coordinate. |
No output schema declared.
No examples provided.
console_messages ~102
Console messages and uncaught errors captured since this server attached to the tab. Filter by level or regex pattern.
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | Clear the buffer after reading. |
| level | string | – | Only this level (error includes uncaught exceptions). |
| limit | integer | – | Last N entries (default 100). |
| pattern | string | – | Regex the text must match. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
evaluate ~78
Run JavaScript in the page and return the JSON result. A bare expression is returned as is (e.g. document.title); multi-statement code must use `return`. Promises are awaited.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | JavaScript expression or function body. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
fill_form ~80
Set values of several fields at once (inputs, textareas, selects by value or label, checkboxes/radios with true/false). Fires input/change events so frameworks (React/Vue/Angular) notice.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | array | yes | Fields to set. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
find ~69
Find visible elements whose text, label, placeholder, id or name contains the query. Returns refs.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max results (default 20). |
| query | string | yes | Text to look for. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
get_text ~79
Return the visible text of the page (or of a CSS selector) — good for reading articles, results and messages.
| Name | Type | Req | Description |
|---|---|---|---|
| max_chars | integer | – | Max characters (default 30000). |
| selector | string | – | CSS selector to read (default body). |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
hover ~112
Move the mouse over an element or coordinates (reveals menus/tooltips).
| Name | Type | Req | Description |
|---|---|---|---|
| match | string | – | Visible text / accessible name to match (case-insensitive substring). |
| ref | string | – | Element ref from snapshot/find, e.g. "e12". Preferred. |
| selector | string | – | CSS selector (first match). |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| x | number | – | Viewport x. |
| y | number | – | Viewport y. |
No output schema declared.
No examples provided.
navigate ~96
Navigate the tab to a URL, or go back/forward/reload. Waits for the page to load and returns its title and URL.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | History action instead of url. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| timeout_ms | integer | – | Load timeout (default 30000). |
| url | string | – | Destination URL; scheme defaults to https:// |
No output schema declared.
No examples provided.
network_requests ~101
Network requests captured since attaching to the tab, with status. Filter by URL regex or failures only.
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | Clear the buffer after reading. |
| failed_only | boolean | – | Only failed requests and HTTP status >= 400. |
| limit | integer | – | Last N entries (default 100). |
| pattern | string | – | Regex the URL must match. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
press_key ~90
Press a key or combination on the focused element, e.g. Enter, Escape, Tab, ArrowDown, Control+a, Meta+Shift+k.
| Name | Type | Req | Description |
|---|---|---|---|
| keys | string | yes | Key or combo; modifiers: Control, Shift, Alt, Meta. |
| repeat | integer | – | Times to press (default 1). |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
resize ~72
Emulate a viewport size (e.g. 390x844 for a phone, 1440x900 for desktop).
| Name | Type | Req | Description |
|---|---|---|---|
| height | integer | yes | Height in CSS px. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| width | integer | yes | Width in CSS px. |
No output schema declared.
No examples provided.
screenshot ~60
Capture the visible viewport as PNG. Returned as an image; set path to also save it to disk.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | File path to save the PNG to. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
scroll ~139
Scroll the page (or a scrollable element) by direction/amount, or scroll an element into view.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | integer | – | Pixels (default 600). |
| direction | string | – | Direction (default down). |
| match | string | – | Visible text / accessible name to match (case-insensitive substring). |
| ref | string | – | Element ref from snapshot/find, e.g. "e12". Preferred. |
| selector | string | – | CSS selector (first match). |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| within | string | – | CSS selector of a scroll container instead of the window. |
No output schema declared.
No examples provided.
snapshot ~130
Return a compact accessibility-style outline of the page: headings, landmarks and every visible interactive element with a ref (e.g. [ref=e12]) to use with click/type/fill_form. Prefer this over screenshots for understanding page structure. mode=all also includes text content.
| Name | Type | Req | Description |
|---|---|---|---|
| max_chars | integer | – | Output budget (default 20000). |
| mode | string | – | interactive (default) or all (adds text blocks). |
| selector | string | – | Limit the snapshot to the subtree matching this CSS selector. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
tab_close ~39
Close a tab (default: current). Another tab becomes current.
| Name | Type | Req | Description |
|---|---|---|---|
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
No output schema declared.
No examples provided.
tab_new ~40
Open a new tab (optionally at a URL) and make it current.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | – | URL to open; scheme defaults to https:// |
No output schema declared.
No examples provided.
tab_select ~31
Make a tab current (and bring it to front).
| Name | Type | Req | Description |
|---|---|---|---|
| tab | string | yes | Tab id from tabs_list. |
No output schema declared.
No examples provided.
tabs_list ~27
List open tabs. The current tab (default target of page tools) is marked with *.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
type ~153
Type text with real keyboard input. If an element is given it is focused (and optionally cleared) first; otherwise text goes to the focused element. submit=true presses Enter afterwards.
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | Clear the field first (default true when an element is given). |
| match | string | – | Visible text / accessible name to match (case-insensitive substring). |
| ref | string | – | Element ref from snapshot/find, e.g. "e12". Preferred. |
| selector | string | – | CSS selector (first match). |
| submit | boolean | – | Press Enter after typing. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| text | string | yes | Text to type. |
No output schema declared.
No examples provided.
wait_for ~143
Wait until text appears, a CSS selector is visible, or the URL contains a string (gone=true waits for the opposite). With only ms, just sleeps.
| Name | Type | Req | Description |
|---|---|---|---|
| gone | boolean | – | Wait for the condition to become false instead. |
| ms | integer | – | Plain sleep in milliseconds (max 60000). |
| selector | string | – | CSS selector that should be visible. |
| tab | string | – | Tab id from tabs_list. Defaults to the current tab. |
| text | string | – | Text that should appear in the page. |
| timeout_ms | integer | – | Timeout (default 10000). |
| url | string | – | Substring the URL should contain. |
No output schema declared.
No examples provided.
How do I install the agent-in-browser MCP server?
agent-in-browser ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 5ce8895898f8c7e5d71453c99407e9b7050b1b0c68cf0af1c5968a77b39f7817; the commands to do that are on this page. If it does not match, do not open it.
mcpb · agent-in-browser-0.1.1.mcpb
Download bundleCheck the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.
SHA-256
5ce8895898f8c7e5d71453c99407e9b7050b1b0c68cf0af1c5968a77b39f7817
macOS / Linux
echo "5ce8895898f8c7e5d71453c99407e9b7050b1b0c68cf0af1c5968a77b39f7817 agent-in-browser-0.1.1.mcpb" | shasum -a 256 -c
Windows (PowerShell)
(Get-FileHash -Algorithm SHA256 .\agent-in-browser-0.1.1.mcpb).Hash -eq "5ce8895898f8c7e5d71453c99407e9b7050b1b0c68cf0af1c5968a77b39f7817"
Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.
What is the agent-in-browser MCP server?
agent-in-browser is an MCP server listed in the public MCP registry as io.github.Gwakko/agent-in-browser. Real browser for any agent: Chrome/Edge/Brave via CDP, Firefox via BiDi. Refs, forms, console, net. This page covers its MCPB bundle (https://github.com/Gwakko/agent-in-browser/releases/download/v0.1.1/agent-in-browser-0.1.1.mcpb).
Is the agent-in-browser MCP server safe to use?
agent-in-browser scores 40 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the agent-in-browser MCP server expose?
agent-in-browser exposes 23 tools: browser_close, browser_status, browsers_installed, click, console_messages, and 18 more. Their descriptions and schemas cost roughly 1,870 tokens of context every time the server is loaded.
What licence is the agent-in-browser MCP server under?
agent-in-browser declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.