io.github.noncelogic/mcp
NPM · @ROVEAPI/MCP · SCANNED SEP 20
Hosted Playwright API for AI agents. Returns a11y trees instead of screenshots.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 32 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 151 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability80
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1647 tokens (~109/item across 15 items; 15 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "evaluate" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.noncelogic/mcp server?
io.github.noncelogic/mcp runs locally as an npm package, launched with npx -y @roveapi/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @roveapi/mcp
claude mcp add noncelogic-mcp -- npx -y @roveapi/mcp
{
"mcpServers": {
"noncelogic-mcp": {
"command": "npx",
"args": [
"-y",
"@roveapi/mcp"
]
}
}
} {
"servers": {
"noncelogic-mcp": {
"command": "npx",
"args": [
"-y",
"@roveapi/mcp"
]
}
}
} codex mcp add noncelogic-mcp -- npx -y @roveapi/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"noncelogic-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@roveapi/mcp"
],
"enabled": true
}
}
} openclaw mcp add noncelogic-mcp --command npx --arg -y --arg @roveapi/mcp
mcp_servers:
noncelogic-mcp:
command: "npx"
args: ["-y", "@roveapi/mcp"] {
"McpServers": {
"noncelogic-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@roveapi/mcp"
]
}
}
} assistant mcp add noncelogic-mcp -t stdio -c npx -a -y @roveapi/mcp
{
"mcpServers": {
"noncelogic-mcp": {
"command": "npx",
"args": [
"-y",
"@roveapi/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 −2
- Stability: pass → 0.80 functional
- 16 Sept 26 0
- Stability: 0.97 → pass security
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 −2
- Stability: pass → 0.80 functional
- 9 Sept 26 0
- Stability: 0.97 → pass security
- 8 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@roveapi/mcp@1.9.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
account_info ~26
Check your Rove account status including credit balance, plan tier, and API key info.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
authenticate ~63
Authenticate this MCP session by email. Sends a magic link to your inbox — click it to activate your session and get an API key. Required before using browser tools if no ROVE_API_KEY is set.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Your email address to receive the magic link. |
No output schema declared.
No examples provided.
buy_credits ~36
Get pricing information and purchase links for Rove credits. Returns Founder Pack tiers and top-up bundles with direct links to the pricing page.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
click ~191
Click an element on the page by CSS selector or accessible label. Use this to interact with buttons, links, checkboxes, and other clickable elements.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | Mouse button to click with. Default: "left". |
| click_count | number | – | Number of clicks (e.g. 2 for double-click). Default: 1. |
| label | string | – | Accessible name or visible text to click by (e.g. "Sign in", "Submit"). Alternative to selector; matches buttons, links, labels, and text. |
| selector | string | – | CSS selector of the element to click (e.g. "button.submit", "#login", "a[href='/pricing']"). Either selector or label is required. |
| session_id | string | yes | The browser session ID. |
| wait_after_ms | number | – | Milliseconds to wait after clicking before returning. Useful for pages that update asynchronously. |
No output schema declared.
No examples provided.
close_session ~56
Close a browser session and release all associated resources (browser context, page, video recording). Returns a list of artifacts (screenshots, videos) captured during the session.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | The browser session ID to close. |
No output schema declared.
No examples provided.
evaluate ~74
Execute arbitrary JavaScript in the browser page context. Returns the result of the expression. Use for advanced DOM queries, custom extraction logic, or page manipulation.
| Name | Type | Req | Description |
|---|---|---|---|
| expression | string | yes | JavaScript expression to evaluate in the page context. The return value is serialized as JSON. |
| session_id | string | yes | The browser session ID. |
No output schema declared.
No examples provided.
extract_schema ~148
Extract structured data from a webpage using a JSON schema. Navigates to the URL, waits for the page to load, and extracts values matching the schema keys from the page content. Returns a JSON object with the extracted data.
| Name | Type | Req | Description |
|---|---|---|---|
| schema | object | yes | A JSON object where keys are the field names to extract and values describe the expected data type. Example: {"price": "string", "title": "string", "rating": "number"}. |
| url | string | yes | URL of the page to extract data from (e.g. "https://example.com/product") |
| wait_for_selector | string | – | Optional CSS selector to wait for before extracting data, useful for dynamically loaded content. |
No output schema declared.
No examples provided.
fill ~127
Type text into a form field. By default clears any existing value first, then types the new value.
| Name | Type | Req | Description |
|---|---|---|---|
| clear_first | boolean | – | Clear the existing value before typing. Default: true. |
| label | string | – | Accessible label of the input (e.g. "Email address"). Alternative to selector. |
| selector | string | – | CSS selector of the input element (e.g. "input[name=email]", "#search-box"). Either selector or label is required. |
| session_id | string | yes | The browser session ID. |
| value | string | yes | The text to type into the field. |
No output schema declared.
No examples provided.
get_a11y_tree ~226
Get the accessibility tree snapshot of the current page. Returns structured data 77% smaller than a screenshot. Auto-scopes to the main content area on large pages (50K+ chars). Use selector to manually scope to a specific element.
| Name | Type | Req | Description |
|---|---|---|---|
| exclude_selectors | array | – | CSS selectors to exclude from the tree (e.g. ["nav", "footer", ".ad-slot"]). Elements are hidden before snapshotting. |
| max_chars | number | – | Maximum characters to return. Truncates at nearest line boundary. |
| max_depth | number | – | Maximum tree depth. Limits nesting to get a structural overview without deep details. |
| selector | string | – | CSS selector to scope the tree to a specific element (e.g. "#search-results", "main"). If omitted on large pages, auto-scopes to the main landmark. |
| session_id | string | yes | The browser session ID. The session must have navigated to a page first. |
| visible_only | boolean | – | Only include visible elements. Skips hidden menus, modals, and offscreen content. |
No output schema declared.
No examples provided.
get_text ~81
Extract the text content of an element on the page. Useful for reading specific values like prices, headings, or status messages.
| Name | Type | Req | Description |
|---|---|---|---|
| selector | string | yes | CSS selector of the element to read text from. |
| session_id | string | yes | The browser session ID. |
| trim | boolean | – | Trim leading/trailing whitespace from the extracted text. Default: true. |
No output schema declared.
No examples provided.
interact ~130
Perform a click or fill action on an element in the current browser session. Use "click" to click a button or link by CSS selector, or "fill" to type text into an input field.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | The interaction type: "click" to click an element, "fill" to type into an input. |
| params | object | – | Action parameters. For click: {"selector": "button.submit"}. For fill: {"selector": "input[name=email]", "value": "user@example.com"}. |
| session_id | string | yes | The browser session ID returned by navigate. |
No output schema declared.
No examples provided.
list_sessions ~29
Show the current active browser session for this MCP connection, including its URL, page title, and expiry.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
navigate ~209
Navigate a browser to a URL and return the page title, final URL, and accessibility tree snapshot. Automatically creates a new browser session if none exists. Returns structured data ideal for LLM consumption — 77% fewer tokens than screenshots.
| Name | Type | Req | Description |
|---|---|---|---|
| action_delay_ms | object | – | Add random delay between browser actions for polite scraping. Specify min and max milliseconds, e.g. {"min": 500, "max": 1500}. |
| session_id | string | – | Reuse an existing browser session. If omitted, a new session is created automatically. |
| stealth | boolean | – | Enable stealth mode: sets a realistic user agent and hides the webdriver flag to reduce bot detection on public sites. Default: false. |
| timeout_ms | number | – | Navigation timeout in milliseconds. Default: 30000. |
| url | string | yes | Full URL to navigate to (e.g. "https://example.com") |
| wait_until | string | – | Page lifecycle event to wait for. Default: "networkidle". |
No output schema declared.
No examples provided.
screenshot ~157
Capture a screenshot of the current browser page. Can take an in-session screenshot (using session_id) or a standalone screenshot of any URL. Returns the screenshot URL and metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Image format. In-session mode only. Default: "png". |
| full_page | boolean | – | Capture the full scrollable page, not just the viewport. In-session mode only. Default: false. |
| selector | string | – | CSS selector to screenshot a specific element instead of the page. In-session mode only. |
| session_id | string | – | Browser session ID for in-session screenshot. If provided, captures the current page state. |
| url | string | – | URL to screenshot. Used for standalone screenshots when no session_id is provided. |
No output schema declared.
No examples provided.
scroll ~94
Scroll the page in a given direction, or scroll a specific scrollable element. Useful for loading lazy content or reaching elements below the fold.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | Pixels to scroll. Default: 500. |
| direction | string | yes | Scroll direction. |
| selector | string | – | CSS selector of a scrollable element. If omitted, the window is scrolled. |
| session_id | string | yes | The browser session ID. |
No output schema declared.
No examples provided.
What is the io.github.noncelogic/mcp server?
io.github.noncelogic/mcp is listed in the public MCP registry as io.github.noncelogic/mcp. Hosted Playwright API for AI agents. Returns a11y trees instead of screenshots. This page covers its npm package (@roveapi/mcp).
Is the io.github.noncelogic/mcp server safe to use?
io.github.noncelogic/mcp scores 82 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.noncelogic/mcp server expose?
io.github.noncelogic/mcp exposes 15 tools: navigate, interact, extract_schema, screenshot, get_a11y_tree, and 10 more. Their descriptions and schemas cost roughly 1,647 tokens of context every time the server is loaded.
Is the io.github.noncelogic/mcp server still maintained?
io.github.noncelogic/mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.noncelogic/mcp server under?
io.github.noncelogic/mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.