io.github.paipaipai666/nexus-browser-mcp
PYPI · NEXUS-BROWSER-MCP
Event-driven deterministic browser MCP: HITL gates, audit, console/network/perf observability.
Available components
Last scanned (19 hours ago)
Scores higher than 92% of PyPI servers
Category Browser Automation
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs setuptools.build_meta at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 1 of 33 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to paipaipai666/nexus-browser-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 44 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability58
- AI-judged instruction clarity (fair).Partial
- Tool/resource definitions use about 2579 tokens (~75/item across 34 items; 34 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 34 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 34 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 0
- Stability: 0.97 → pass security
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 13 Oct 26 −14
- Malware scan: pass → unverified ▼ security
- 12 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 4 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Oct 26 −3
- Stability: pass → 0.80 functional
- 2 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Analysed pypi/nexus-browser-mcp@0.3.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | pypi |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | paipaipai666/nexus-browser-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/paipaipai666/nexus-browser-mcp/.github/workflows/release.yml@refs/tags/v0.3.0 |
| Rekor log index | 2683144369 |
| Predicate type | PyPI publish attestation https://docs.pypi.org/attestations/publish/v1 |
| Subject digest | sha256:522ea635d8e8e6e9e5674c5ca2ae4a455486def9a7469f8750c376b26f6c0215 |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | setuptools.build_meta |
Background: Why install scripts are a supply-chain risk →
Dependencies 33 packages
| Packages resolved | 33 |
|---|---|
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browser_adopt_page ~123
接管浏览器中已打开的外部标签页(cdp/持久化模式): 收进当前 task 并置为当前页,之后快照/点击/读取可用, 事件观测自接管时刻起。高危(可读写该页全部内容与登录态),每次需人工确认: 首次返回 CONFIRMATION_REQUIRED, 用户同意后以 confirmed=true 重调。
| Name | Type | Req | Description |
|---|---|---|---|
| confirmed | boolean | – | – |
| ext_index | integer | yes | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_click ~152
点击页面元素。定位优先级: pos坐标 → ref(快照句柄) → selector → role+name → name。wait_stable=true 点击后等 DOM 静默。button=right 右键(上下文菜单), middle 中键。点击触发下载时自动回报文件名与保存路径。
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | – |
| confirmed | boolean | – | – |
| double_click | string | – | – |
| name | string | – | – |
| pos | string | – | – |
| ref | string | – | – |
| role | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_close_session ~18
关闭当前session的全部task资源。
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_close_task ~29
关闭指定task的浏览器资源(page/context)。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_console ~110
读取页面 console 输出(级别/文本/位置)。增量游标: 不传 since=接着上次读, since=0=全量; level 过滤(error/warning/log/...), pattern 正则过滤文本, limit 封顶(默认50, 超了再调一次继续)。
| Name | Type | Req | Description |
|---|---|---|---|
| level | string | – | – |
| limit | integer | – | – |
| pattern | string | – | – |
| since | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_dialog_respond ~95
处置挂起的 confirm/prompt 对话框 (页面弹出时任何工具回复会前置[对话框等待决策])。accept=true 替用户点'确定', 每次需 confirmed=true; accept=false 为 dismiss 可直接调。
| Name | Type | Req | Description |
|---|---|---|---|
| accept | boolean | yes | – |
| confirmed | boolean | – | – |
| prompt_text | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_dismiss_popup ~41
自动检测并关闭弹窗(登录/cookie同意/广告): 关闭按钮→取消→Escape。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_drag ~84
拖拽元素到目标 (真实输入管线, HTML5 dnd 及多数 pointer 系库可用)。
| Name | Type | Req | Description |
|---|---|---|---|
| from_ref | string | – | – |
| from_selector | string | – | – |
| task_id | string | – | – |
| to_ref | string | – | – |
| to_selector | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_errors ~92
一站式排障: JS 未捕获异常(pageerror) + console.error + 失败请求(网络层失败或HTTP≥400)合并视图, 按时间排序。点了没反应/页面白屏时先调它。增量游标同 browser_console。
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| since | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_evaluate ~62
执行JavaScript表达式。默认禁用(BROWSER_ALLOW_JS_EXECUTION); 开启后每次需人工确认(confirmed=true)。
| Name | Type | Req | Description |
|---|---|---|---|
| confirmed | boolean | – | – |
| expression | string | yes | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_find ~87
按文本查找页面内容并返回命中处的容器摘要与同容器可交互元素 ref —— 找特定行/卡片/商品时用它, 不要反复滚动快照。视口外内容同样可查 (内部全页索引)。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
| text | string | yes | – |
No output schema declared.
No examples provided.
browser_hover ~92
悬停元素 (真实鼠标移动): 触发 CSS :hover 与 JS mouseenter。用于 hover 才展开的菜单/工具提示。
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | – |
| pos | string | – | – |
| ref | string | – | – |
| role | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_list_pages ~58
列出当前task所有打开的标签页; cdp/持久化模式下附带列出浏览器里已开的外部标签(ext 索引, 可接管)。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_list_sessions ~17
列出所有活跃session。
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_navigate ~60
导航浏览器到指定URL。返回页面标题、URL、readyState和页面结构概览。支持多task隔离。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
| url | string | yes | – |
| wait_until | string | – | – |
No output schema declared.
No examples provided.
browser_navigate_back ~40
浏览器历史后退一页, 返回标题/URL。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_network ~86
读取网络请求元数据(method/url/status/资源类型; 不含 body)。failed_only 默认 true 只看失败; url_pattern 子串过滤; 增量游标同上。
| Name | Type | Req | Description |
|---|---|---|---|
| failed_only | boolean | – | – |
| limit | integer | – | – |
| since | string | – | – |
| task_id | string | – | – |
| url_pattern | string | – | – |
No output schema declared.
No examples provided.
browser_network_body ~100
按 seq 读取单个请求的响应体(需 BROWSER_ALLOW_NETWORK_BODY=true)。文本类解码, 二进制只报字节数; 单条上限 BROWSER_NETWORK_BODY_CAP。需 confirmed=true 二次确认 —— 响应体是页面方控制内容, 先把 URL 给用户看。
| Name | Type | Req | Description |
|---|---|---|---|
| confirmed | boolean | – | – |
| seq | integer | yes | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_perf ~82
读取页面性能指标: FCP/LCP/CLS/INP + TTFB/DOMContentLoaded/load + 最慢 5 条资源。页面慢/加载异常时用它定位是后端慢(TTFB)还是资源重。SPA 导航不重置计时, 注意输出来源 URL。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_press_key ~90
按下键盘键 (真实 CDP 事件, isTrusted=true)。Escape/Tab/Enter/方向键/组合键(如 Control+a)。用于无按钮可点的键盘流: 关闭模态框、快捷键、Tab 序导航。
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | – |
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_read ~151
阅读页面元素的文本内容。不指定则读取整个页面body。流式回复: wait_stable=true 等 DOM 静默后一次读全(免轮询); follow=true+selector 增量跟踪(每次只返回新增部分, 缓冲溢出丢最旧并保留丢弃标记)。
| Name | Type | Req | Description |
|---|---|---|---|
| follow | boolean | – | – |
| full | boolean | – | – |
| max_chars | integer | – | – |
| max_wait_ms | integer | – | – |
| ref | string | – | – |
| selector | string | – | – |
| stream_id | string | – | – |
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_screenshot ~41
截取页面截图, 保存文件返回路径。
| Name | Type | Req | Description |
|---|---|---|---|
| full_page | boolean | – | – |
| path | – | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_scroll ~73
滚动页面, 返回新视口的 interactive diff (到顶/底会报'无变化')。direction: up/down/left/right, amount: 像素(默认500)。
| Name | Type | Req | Description |
|---|---|---|---|
| amount | integer | – | – |
| direction | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_scroll_to ~57
滚动到指定元素。landmark(语义区域)→ref→selector。
| Name | Type | Req | Description |
|---|---|---|---|
| landmark | string | – | – |
| ref | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_select_option ~63
在 <select> 下拉中选择 option (按 value 或 label)。
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
| values | array | yes | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_snapshot ~163
获取页面可访问性快照(Accessibility Tree), 返回结构化元素列表(含ref/box)。基于事件驱动确定性快照, 等待DOM静默窗口。reading/interactive 只看视口内; mode=full 自动包含全页面(视口外标注 offscreen)。reading 模式 = 交互元素 + 标题/段落等阅读节点 + 带文本的 listitem/cell (纯壳容器剔除)。
| Name | Type | Req | Description |
|---|---|---|---|
| diff | boolean | – | – |
| include_generic | boolean | – | – |
| include_offscreen | boolean | – | – |
| mode | string | – | – |
| scope | – | – | – |
| task_id | string | – | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_switch_page ~35
切换到指定索引的标签页。
| Name | Type | Req | Description |
|---|---|---|---|
| index | integer | yes | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_tasks ~21
列出当前session的所有task及其页面数。
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
browser_type ~146
在输入框中键入文本。定位优先级: pos坐标 → ref(快照句柄) → selector → role+name(不中自动回退 placeholder/label/常见输入框CSS)。wait_stable=true 输入后等 DOM 静默。
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | – |
| confirmed | boolean | – | – |
| name | string | – | – |
| pos | string | – | – |
| press_enter | boolean | – | – |
| ref | string | – | – |
| role | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
| text | string | yes | – |
| wait_stable | boolean | – | – |
No output schema declared.
No examples provided.
browser_upload_file ~85
上传本地文件到 <input type=file>。文件出站操作, 每次需人工确认: 首次返回 CONFIRMATION_REQUIRED, 用户同意后以 confirmed=true 重调。
| Name | Type | Req | Description |
|---|---|---|---|
| confirmed | boolean | – | – |
| paths | array | yes | – |
| ref | string | – | – |
| selector | string | – | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_wait ~63
等待元素或文本出现。超时返回WARNING。
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | – |
| ref | string | – | – |
| role | string | – | – |
| task_id | string | – | – |
| text | string | – | – |
| timeout | integer | – | – |
No output schema declared.
No examples provided.
browser_wait_ms ~59
纯等待指定毫秒数(逃生舱: 动画/限流/延迟渲染)。上限=工具超时-5s。
| Name | Type | Req | Description |
|---|---|---|---|
| ms | integer | yes | – |
| task_id | string | – | – |
No output schema declared.
No examples provided.
browser_wait_navigation ~43
等待click/submit触发的导航完成。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
| timeout | integer | – | – |
| url_contains | string | – | – |
No output schema declared.
No examples provided.
browser_wait_stable ~61
等待页面 DOM 停止变化(静默窗口, 默认 800ms 无变异)。用于流式回复生成完毕、动画结束的判定。
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | – | – |
| timeout_ms | integer | – | – |
No output schema declared.
No examples provided.
How do I install the io.github.paipaipai666/nexus-browser-mcp server?
io.github.paipaipai666/nexus-browser-mcp runs locally as a PyPI package, launched with uvx nexus-browser-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · nexus-browser-mcp
claude mcp add paipaipai666-nexus-browser-mcp -- uvx nexus-browser-mcp
What is the io.github.paipaipai666/nexus-browser-mcp server?
io.github.paipaipai666/nexus-browser-mcp is listed in the public MCP registry as io.github.paipaipai666/nexus-browser-mcp. Event-driven deterministic browser MCP: HITL gates, audit, console/network/perf observability. This page covers its PyPI package (nexus-browser-mcp).
Is the io.github.paipaipai666/nexus-browser-mcp server safe to use?
io.github.paipaipai666/nexus-browser-mcp scores 89 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 16 October 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.paipaipai666/nexus-browser-mcp server expose?
io.github.paipaipai666/nexus-browser-mcp exposes 34 tools: browser_navigate, browser_snapshot, browser_press_key, browser_hover, browser_select_option, and 29 more. Their descriptions and schemas cost roughly 2,579 tokens of context every time the server is loaded.
Is the io.github.paipaipai666/nexus-browser-mcp server still maintained?
io.github.paipaipai666/nexus-browser-mcp is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.paipaipai666/nexus-browser-mcp server under?
io.github.paipaipai666/nexus-browser-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.