# Perplexity Browser MCP (npm · perplexity-browser-mcp)

Search Perplexity using your browser login. Returns answers, sources, and thread URLs. No API key.

- Trust score: 61/100 (medium)
- Change this week: +28
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-18

## Components

- npm · `perplexity-browser-mcp`: 61/100 (this document), [markdown](https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp.md), [page](https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp)

## Channel facts

- Registry: `npm`
- Package: `perplexity-browser-mcp`
- Version: `1.4.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-18.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 31 of 95 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 19/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 7 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 945 tokens (~67/item across 14 items; 14 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the Perplexity Browser MCP server?

Perplexity Browser MCP runs locally as an npm package, launched with npx -y perplexity-browser-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add xs1128-perplexity-browser-mcp -- npx -y perplexity-browser-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "xs1128-perplexity-browser-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "perplexity-browser-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "xs1128-perplexity-browser-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "perplexity-browser-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add xs1128-perplexity-browser-mcp -- npx -y perplexity-browser-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xs1128-perplexity-browser-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "perplexity-browser-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add xs1128-perplexity-browser-mcp --command npx --arg -y --arg perplexity-browser-mcp
```

### Hermes

```yaml
mcp_servers:
  xs1128-perplexity-browser-mcp:
    command: "npx"
    args: ["-y", "perplexity-browser-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "xs1128-perplexity-browser-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "perplexity-browser-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add xs1128-perplexity-browser-mcp -t stdio -c npx -a -y perplexity-browser-mcp
```

### Other

```json
{
  "mcpServers": {
    "xs1128-perplexity-browser-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "perplexity-browser-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-14 (score 61, +28)

- [security improvement] Injection markers: unverified → pass
- [security] First check of Judged manipulation: pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Tool coverage: 0
- [functional] First check of Schema quality: fail
- [functional] First check of Destructive annotations: 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: good

### 2026-10-11 (score 33)

First indexed and scored.

## MCP tools (14)

### `search` (~84 tokens)

Ask Perplexity a question directly on its website. Automatically connect, submit the exact query, and wait for the complete answer. Return DOM answer text, deduplicated source links, and the thread URL. Use this for research, not web_start/web_step. May take up to 90 seconds; sign in in the opened window if required.

Input parameters:

- `query` (string, required)

### `ask_start` (~64 tokens)

Start a browser task planned through Perplexity Ask with manual copy/paste. Returns a prompt to show the user; wait for their actual Ask reply before executing any action.

Input parameters:

- `demo` (boolean)
- `goal` (string, required)
- `url` (string)

### `ask_prompt` (~34 tokens)

Read or refresh the current Perplexity Ask prompt and handoffId. No model is called and no browser action is executed.

### `ask_reply` (~70 tokens)

Execute one user-pasted Perplexity Ask JSON response for the current handoffId. Supports JSON fences and multiline JSON. Returns the updated snapshot and next prompt. Never fabricate the response; wait for the user to paste it.

Input parameters:

- `handoffId` (string, required)
- `response` (string, required)

### `web_connect` (~50 tokens)

Open Perplexity Ask in a dedicated window. The user signs in directly in the browser. Arc and Safari reuse the browser account; Chromium uses a separate persistent profile. Returns connection status without reading account history.

### `web_status` (~33 tokens)

Check whether the dedicated Perplexity Ask window is signed in and ready. Does not submit a prompt or return account history.

### `web_start` (~68 tokens)

Open a target page with a goal for automatic Perplexity Ask website planning. Call web_connect and complete sign-in first. Call web_step to send a prompt and execute one actual website reply.

Input parameters:

- `demo` (boolean)
- `goal` (string, required)
- `url` (string)

### `web_step` (~69 tokens)

Send the current target snapshot and goal to the real Perplexity Ask website, wait for its complete validated JSON reply, execute one action, and return the updated target snapshot. Stops without executing if the reply is invalid, times out, or the target snapshot changed. May take up to 90 seconds.

### `web_close` (~36 tokens)

Close both owned browser windows and reset workflows. Website login persists in the dedicated profile or existing native browser account. Does not close unrelated windows.

### `browser_start` (~64 tokens)

Start a local task browser using the selected Chromium, Arc, or Safari adapter. Choose url or demo=true. Native browsers control a dedicated tab and uses a DOM role/name snapshot. Close before starting another session.

Input parameters:

- `demo` (boolean)
- `url` (string)

### `browser_snapshot` (~49 tokens)

Read the current page snapshot (up to 8000 characters), tabs, steps, and recent results. Arc and Safari use DOM role/name mapping; Chromium uses its accessibility tree. Call browser_start first.

### `browser_action` (~54 tokens)

Execute one local browser action and return the updated snapshot. Match accessible roles/names from the snapshot. Actions count toward the session step limit. done records the planner outcome; it does not independently verify success.

Input parameters:

- `command` (required)

### `browser_screenshot` (~44 tokens)

Return a PNG image of the current viewport in Chromium mode. Arc and Safari native scripting do not support screenshots. Use only when text snapshots are insufficient; no file is written.

### `browser_close` (~46 tokens)

Close the owned task browser and reset its step limit. Chromium discards task cookies; Arc and Safari keep your normal account login. The separate Perplexity Ask window remains until web_close.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp#diagnostics

## Score history

- 2026-10-18: 61
- 2026-10-17: 61
- 2026-10-16: 61
- 2026-10-15: 61
- 2026-10-14: 61
- 2026-10-13: 33
- 2026-10-12: 33
- 2026-10-11: 33

## Common questions

### What is the Perplexity Browser MCP server?

Perplexity Browser MCP is listed in the public MCP registry as io.github.xs1128/perplexity-browser-mcp. Search Perplexity using your browser login. Returns answers, sources, and thread URLs. No API key. This page covers its npm package (perplexity-browser-mcp).

### Is the Perplexity Browser MCP server safe to use?

Perplexity Browser MCP scores 61 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 18 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Perplexity Browser MCP server expose?

Perplexity Browser MCP exposes 14 tools: search, ask_start, ask_prompt, ask_reply, web_connect, and 9 more. Their descriptions and schemas cost roughly 765 tokens of context every time the server is loaded.

### Is the Perplexity Browser MCP server still maintained?

Perplexity Browser MCP is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Perplexity Browser MCP server under?

Perplexity Browser MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/perplexity-browser-mcp
- Socket report: https://socket.dev/npm/package/perplexity-browser-mcp
- Website: https://git.xsooi.com/xs1128/perplexity
- Changelog RSS feed: https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp.json
- HTML version of this page: https://verifymcp.io/servers/xs1128-perplexity-browser-mcp/perplexity-browser-mcp