Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

BrowserMesh

NPM · MULTI-AGENT-BROWSER-MCP · SCANNED AUG 14

Isolated multi-session Chromium runtime for external MCP clients over stdio.

76 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 99 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to scrollDynasty/multi-agent-browser-mcp). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability72
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 3239 tokens (~85/item across 38 items; 38 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage71
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · multi-agent-browser-mcp

# add to Claude Code
claude mcp add scrolldynasty-browsermesh -- npx -y multi-agent-browser-mcp
# add to Codex CLI
codex mcp add scrolldynasty-browsermesh -- npx -y multi-agent-browser-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "scrolldynasty-browsermesh": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "multi-agent-browser-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add scrolldynasty-browsermesh --command npx --arg -y --arg multi-agent-browser-mcp
# ~/.hermes/config.yaml
mcp_servers:
  scrolldynasty-browsermesh:
    command: "npx"
    args: ["-y", "multi-agent-browser-mcp"]
// mcp.json
{
  "mcpServers": {
    "scrolldynasty-browsermesh": {
      "command": "npx",
      "args": [
        "-y",
        "multi-agent-browser-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 14 Aug 26 +11
    • Known CVEs: unverified → pass security
    • Dependency health: unverified → 0.86 functional
  • 13 Aug 26 65

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 14 Aug 2026 · Analysed npm/multi-agent-browser-mcp@0.1.4

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo scrollDynasty/multi-agent-browser-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/scrollDynasty/multi-agent-browser-mcp/.github/workflows/publish.yml@refs/tags/v0.1.4
Rekor log index 2449657370
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:7a1b240fd8513a70b95a9ffa49f59e0f5da07f034960fcca256e3878a1224a1b30a1894c8c512d2370129887e713d30e0df850a636778ae54492022e6
Dependencies 99 packages
Packages resolved 99
Stale 31
Tree resolution Complete
MCP tools · 38 exposed · ~3,239 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
browser_action_and_wait ~156

Atomically register a navigation, response, popup, or dialog waiter first, then click or press on the explicitly addressed page under one shared deadline; the action locator may use a bounded semantic iframe chain. Popup pages receive a new BrowserMesh pageId in the same session with isDefault=false and are closed if the page limit is exceeded. Dialogs must be handled atomically because they cannot be inspected later; specify the expected type and accept/dismiss action. Returned dialog text is bounded. Use this instead of parallel same-session calls when an action triggers the event.

NameTypeReqDescription
actionyes
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
waityes
NameTypeReqDescription
actionyes
eventyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes
waityes

No examples provided.

browser_back ~52

Navigate backward in the history of one explicitly addressed page without affecting pages or sessions used by other roles.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
urlstringyes

No examples provided.

browser_check ~82

Ensure a checkbox or radio located semantically or by CSS is checked on one explicitly addressed page. The operation is idempotent, bounded by timeoutMs, and isolated to the supplied session.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_click ~125

Click exactly one semantic/CSS locator or short-lived snapshot ref on one explicitly addressed page. A locator may select the top document or a bounded outer-to-inner semantic iframe chain. Role locator names match exactly by default and every iframe-chain selector must resolve exactly; ambiguous locators return LOCATOR_AMBIGUOUS and stale or cross-page refs return STALE_ELEMENT_REFERENCE. Prefer semantic locators for durable workflows.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_console_list ~117

List bounded console events captured for one explicitly addressed page. Results are metadata-only unless includeText=true; text is best-effort redacted and bounded, console argument objects are never serialized. Use sinceEventId for a non-destructive checkpoint and inspect gap/droppedCount before treating the evidence as complete.

NameTypeReqDescription
includeTextboolean
limitinteger
pageIdstringyes
sessionIdstringyes
sinceEventIdstring
timeoutMsinteger
NameTypeReqDescription
droppedCountintegeryes
eventsarrayyes
gapbooleanyes
nextCursoryes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_double_click ~93

Double-click a semantic or CSS locator on one explicitly addressed page. Use this only when the application assigns distinct double-click behavior; the action is serialized with all browser work in that session and an ambiguous locator returns LOCATOR_AMBIGUOUS.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_drag_and_drop ~80

Drag one semantic or CSS-located element onto another on one explicitly addressed page. Source and target are resolved in the same page and session, with bounded timeout and strict ambiguity errors.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
sourceyes
targetyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_failed_requests_list ~106

List bounded transport-level request failures for one explicitly addressed page. HTTP error responses such as 500 remain response events in browser_network_list; this tool reports request_failed events with correlated IDs, duration, and a bounded safe failure message. No headers, cookies, or bodies are captured.

NameTypeReqDescription
limitinteger
pageIdstringyes
sessionIdstringyes
sinceEventIdstring
timeoutMsinteger
NameTypeReqDescription
droppedCountintegeryes
eventsarrayyes
gapbooleanyes
nextCursoryes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_fill ~78

Fill a form field located on one explicitly addressed page. The value is entered only in that session; use separate sessions for different identities.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
valuestringyes
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_focus ~87

Focus a semantic or CSS locator on one explicitly addressed page without entering a value. Use this for focus-driven UI state or before a separate key action; the locator remains scoped to the supplied sessionId and pageId.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_forward ~48

Navigate forward in the history of one explicitly addressed page without affecting other isolated sessions.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
urlstringyes

No examples provided.

browser_get_title ~47

Read the title of one explicitly addressed page in its owning isolated session.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
titlestringyes

No examples provided.

browser_get_url ~59

Read the current URL of one explicitly addressed page. Use the IDs returned for the intended session; there is no global current page.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
urlstringyes

No examples provided.

browser_hover ~81

Move the pointer over a semantic or CSS locator on one explicitly addressed page. Use this to reveal hover-driven controls or state before inspecting or interacting; BrowserMesh preserves same-session accepted order.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_navigate ~76

Navigate one explicitly addressed page to an absolute HTTP(S) URL. Keep using the sessionId/pageId pair for the intended account or role; navigation never changes a global active page.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
urlstringyes
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
urlstringyes

No examples provided.

browser_network_list ~122

List bounded request and response metadata for one explicitly addressed page. Correlated requestId and durationMs support duplicate/retry analysis. URLs remove credentials and fragments and redact sensitive query values; headers, cookies, bodies, storage, WebSockets, service-worker traffic, data URLs, and blob URLs are never captured. Inspect gap and droppedCount before treating the evidence as complete.

NameTypeReqDescription
limitinteger
pageIdstringyes
sessionIdstringyes
sinceEventIdstring
timeoutMsinteger
NameTypeReqDescription
droppedCountintegeryes
eventsarrayyes
gapbooleanyes
nextCursoryes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_page_close ~49

Close one explicitly addressed page in its owning session. Supply both IDs because BrowserMesh has no global current session or page.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
NameTypeReqDescription
closedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_page_create ~55

Create an additional page inside one explicitly addressed session. Use it for another tab that must share that session's cookies and storage; use a separate session instead when identity or authentication must be isolated.

NameTypeReqDescription
sessionIdstringyes
NameTypeReqDescription
operationIdstringyes
pageobjectyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_page_errors_list ~106

List bounded uncaught page errors for one explicitly addressed page. Results omit messages unless includeText=true; exposed messages are best-effort redacted and bounded and raw stacks are never captured. Cursor, gap, and droppedCount make overflow explicit.

NameTypeReqDescription
includeTextboolean
limitinteger
pageIdstringyes
sessionIdstringyes
sinceEventIdstring
timeoutMsinteger
NameTypeReqDescription
droppedCountintegeryes
eventsarrayyes
gapbooleanyes
nextCursoryes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_page_list ~49

List pages belonging only to the addressed session. Session creation already returns the initial pageId; use this tool to rediscover or inspect all pages in that session.

NameTypeReqDescription
sessionIdstringyes
NameTypeReqDescription
operationIdstringyes
pagesarrayyes
sessionIdstringyes

No examples provided.

browser_press ~98

Press a key on a locator within one explicitly addressed page, preserving deterministic ordering with other operations in that session. A missing or unsuitable element returns OPERATION_TIMEOUT within timeoutMs (10 seconds by default) without closing MCP or browser sessions.

NameTypeReqDescription
keystringyes
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_reload ~46

Reload one explicitly addressed page in its existing isolated session and authentication state.

NameTypeReqDescription
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
urlstringyes

No examples provided.

browser_runtime_info ~58

Report bounded, read-only BrowserMesh version, launch state, effective configuration, and session counts without launching Chromium. Use this to diagnose setup and capacity safely; it never returns paths, launch arguments, environment values, browser state, or raw errors.

Input schema present but exposes no named parameters.

NameTypeReqDescription
activeSessionsintegeryes
browserLaunchStatestringyes
browserProductstringyes
browserVersionyes
defaultTimeoutMsintegeryes
failedSessionsintegeryes
headlessbooleanyes
maxPagesPerSessionintegeryes
maxSessionsintegeryes
nodeVersionstringyes
persistenceEnabledbooleanyes
playwrightVersionstringyes
resourceLimitsobjectyes
serverVersionstringyes

No examples provided.

browser_screenshot ~106

Capture a bounded in-memory PNG screenshot of one explicitly addressed page, either as the viewport/full page or one semantic element optionally reached through a bounded iframe chain. Full-page and element capture use an immutable measured CSS-pixel clip plus encoded-byte validation. BrowserMesh returns image content and does not write to a caller-controlled path or inspect another session.

NameTypeReqDescription
capture
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
bytesintegeryes
heightintegeryes
mimeTypestringyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes
widthintegeryes

No examples provided.

browser_scroll ~87

Scroll an explicitly addressed page by bounded integer pixel deltas. Use deltaX for horizontal and deltaY for vertical movement; this typed operation exposes no arbitrary JavaScript and remains serialized within the session.

NameTypeReqDescription
deltaXintegeryes
deltaYintegeryes
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_scroll_into_view ~85

Scroll one semantic or CSS locator into the viewport of an explicitly addressed page. Use this before inspection or interaction when an off-screen target must become visible; it never accepts arbitrary JavaScript or coordinates.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_select_option ~96

Select an option on one explicitly addressed page using a semantic or CSS locator. A missing or unsuitable select returns OPERATION_TIMEOUT within timeoutMs (10 seconds by default), and the supplied session plus all other sessions remain usable.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
valuestringyes
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_session_close ~44

Close one explicitly addressed session and release all of its pages and isolated browser context. Close each role/account session when its workflow is complete.

NameTypeReqDescription
sessionIdstringyes
NameTypeReqDescription
operationIdstringyes
sessionobjectyes
sessionIdstringyes

No examples provided.

browser_session_create ~188

Create a new isolated browser session with its own cookies, storage, pages, and optional validated contextSettings (viewport, scale, locale, timezone, color scheme, reduced motion, user agent, geolocation, and explicit origin-scoped geolocation grants). Only the geolocation permission is supported; each grant must name one absolute HTTP(S) origin, never a wildcard. Create a separate session whenever a task involves a different user, account, role, authentication state, device profile, accessibility preference, permission profile, or independent parallel workflow; never reuse one session for identities or context settings that must remain isolated. The response directly returns both sessionId and the deterministic initial pageId plus normalized effective settings. Pass stateId only to restore previously saved browser state.

NameTypeReqDescription
contextSettingsobject
metadataobject
namestring
stateIdstring
NameTypeReqDescription
initialPageobjectyes
operationIdstringyes
sessionobjectyes

No examples provided.

browser_session_get ~39

Inspect one explicitly addressed browser session. Session names and metadata are workflow labels, not internal AI agents or owners.

NameTypeReqDescription
sessionIdstringyes
NameTypeReqDescription
operationIdstringyes
sessionobjectyes
sessionIdstringyes

No examples provided.

browser_session_list ~48

List every browser session with its explicit sessionId, lifecycle status, name, and neutral workflow metadata. Use this to recover the correct session for each role/account; there is no global active session.

Input schema present but exposes no named parameters.

NameTypeReqDescription
operationIdstringyes
sessionsarrayyes

No examples provided.

browser_snapshot ~256

Inspect a bounded accessibility-oriented snapshot of one explicitly addressed page, optionally scoped by a locator including a bounded semantic iframe chain. BrowserMesh rejects oversized DOM sources before native ARIA serialization. Use interactiveOnly to retain interactive nodes with ancestor context and maxChildren to limit every node after filtering. A nextCursor continues the immutable captured serialization without rereading a changed DOM; cursors are page-scoped, expire after 30 seconds, and become stale on navigation or close. Semantic scope, depth, boxes, character/byte bounds, omissions, and truncation are explicit; partial content is aria-yaml-fragment. Non-empty password-input values are redacted before content crosses MCP. Optional 30-second element refs are separate short-lived action conveniences.

NameTypeReqDescription
cursorstring
includeBoundingBoxesboolean
includeRefsboolean
interactiveOnlyboolean
maxBytesinteger
maxCharsinteger
maxChildreninteger
maxDepthinteger
maxRefsinteger
pageIdstringyes
scope
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
appliedBoundsobjectyes
contentFormatstringyes
omissionsobjectyes
operationIdstringyes
pageIdstringyes
paginationobjectyes
partialbooleanyes
refsarrayyes
sessionIdstringyes
snapshotstringyes
truncationobjectyes

No examples provided.

browser_state_list ~33

List logical saved-state IDs available for optional restoration when creating a new isolated session; state contents and secrets are not returned.

Input schema present but exposes no named parameters.

NameTypeReqDescription
operationIdstringyes
statesarrayyes

No examples provided.

browser_state_remove ~46

Delete persisted browser state by its safe logical stateId when it should no longer be restorable. This does not close or alter currently live sessions.

NameTypeReqDescription
stateIdstringyes
NameTypeReqDescription
operationIdstringyes
removedbooleanyes
stateIdstringyes

No examples provided.

browser_state_save ~57

Save cookies and supported storage from one explicitly addressed session under a safe logical stateId. Use this only when a later new isolated session should restore that authentication state.

NameTypeReqDescription
sessionIdstringyes
stateIdstringyes
NameTypeReqDescription
operationIdstringyes
sessionIdstringyes
stateobjectyes

No examples provided.

browser_uncheck ~81

Ensure a checkbox located semantically or by CSS is unchecked on one explicitly addressed page. The operation is idempotent, bounded by timeoutMs, and isolated to the supplied session.

NameTypeReqDescription
locator
pageIdstringyes
refstring
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
completedbooleanyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.

browser_visible_text ~80

Read visible text from a semantic or CSS locator on one explicitly addressed page. A locator may select the top document or a bounded outer-to-inner semantic iframe chain; the lookup remains confined to that page and session.

NameTypeReqDescription
locatoryes
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
operationIdstringyes
pageIdstringyes
sessionIdstringyes
textstringyes
truncationobjectyes

No examples provided.

browser_wait ~123

Wait for one deterministic passive condition on an explicitly addressed page: an exact/safe-glob URL, domcontentloaded/load state, locator state (optionally through a bounded semantic iframe chain), or case-sensitive top-document text presence/absence. The wait occupies that session queue, is bounded by timeoutMs, and must not depend on a later action queued in the same session; use browser_action_and_wait for action-triggered events.

NameTypeReqDescription
conditionyes
pageIdstringyes
sessionIdstringyes
timeoutMsinteger
NameTypeReqDescription
conditionyes
operationIdstringyes
pageIdstringyes
sessionIdstringyes

No examples provided.