Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.ZenRows/zenrows-mcp

NPM · @ZENROWS/MCP · 2 COMPONENTS

Zenrows MCP server: Fetch, Extract, Batch, and Browser Sessions for AI agents

+4 this week 84 Trust /100

Last scanned (19 hours ago)

Scores higher than 82% of npm servers

Category Web Scraping

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 30 of 94 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to ZenRows/zenrows-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 4 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 10090 tokens (~157/item across 64 items; 63 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management55
  • Stability check failed: the tool surface changed between 2.12.0 and 2.18.0: 1 tool removals, 0 breaking changes, 12 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 65 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 51 to 55.

  • 2 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 45 to 48.

  • 31 Oct 26 +16
    • Malware scan: unverified → pass ▲ security
  • 30 Oct 26 −15
    • Malware scan: pass → unverified ▼ security
    • Package version: 2.17.0 → 2.18.0 functional
  • 29 Oct 26 +1
    • CVE-2026-118663 affects this package: high ▼ security
  • 28 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 27 Oct 26 −14
    • Malware scan: pass → unverified ▼ security
    • Package version: 2.16.1 → 2.17.0 functional
  • 25 Oct 26 +21
    • CVE-2023-54404 affects this package: high ▼ security
    • Known CVEs: unverified → fail ▼ security
    • Malware scan: unverified → pass ▲ security
    • Dependency health: unverified → 0.86 ▲ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Analysed npm/@zenrows/mcp@2.18.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo ZenRows/zenrows-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/ZenRows/zenrows-mcp/.github/workflows/deploy.yml@refs/heads/main
Rekor log index 3592171529
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:35104a47b682c0735ea26306b7f2b1de4fba0378477a6f3f6a8299d2235f1ec80e2ec6f5bbad50933f8f966e5610da2888909631fb690c9b643c2c61f

Background: How many MCP packages publish verified provenance →

Vulnerabilities 2 findings
ID CVE Severity Vector Fix available
GHSA-rmxm-3fg6-px4f CVE-2026-118663 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N yes
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 94 packages
Packages resolved 94
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 63 exposed · ~9,933 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
account_signup_answer ~78

Answer the question Zenrows asks before it creates a free account. Use it only when another Zenrows tool reports a signup question: answer that question yourself and pass the answer here. On success the API key is stored and you can retry the original tool call.

NameTypeReqDescription
answerstringyesYour answer to the signup question, as plain text.

No output schema declared.

No examples provided.

account_usage ~247

Read the current plan's credit allowance and how much of it is spent. Useful before a large batch, or after a 402 / AUTH004, to see whether the account has credits left and when the allowance renews. The call is free and does not use a concurrency slot. Credit costs per request: 1 basic, 5 js_render, 10 premium_proxy, 25 both. AUTH004 ("usage exceeded") means this allowance is spent until it renews at the end of the billing period (period_ends_at in this tool's response). Plans and credit options are described at https://www.zenrows.com/pricing. AUTH006 is the concurrency limit, not a credit limit. AUTH014 (Batch: api_key_cap_reached) means this API key hit one of its own credit caps while the account still has credits; other keys keep working. The response's api_key.caps lists the calling key's caps: window, credits, used_credits, remaining_credits, resets_at, and unavailable (usage could not be read). Caps are managed at https://app.zenrows.com/settings/api-keys.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

batch_cancel ~115

Stop a Batch job's current run for good. No task still waiting is started or billed; tasks already in flight finish (and bill). Results so far stay readable with batch_results. Tasks that never started stay pending: batch_rerun (default failed and pending) runs them later. Idempotent: a run that already ended answers with its final status and already_ended:true. To halt without ending the run, use batch_pause.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list

No output schema declared.

No examples provided.

batch_content ~283

Read one Batch task's stored result, by job_id and task_id (from batch_results). A text result (HTML, Markdown, plain text, JSON) comes back inline, cut to max_chars (default 20000); a final note says when it was cut. A binary result (a PDF) is not inlined: the reply gives its result_url, presigned for 2 hours. Finding that URL reads the run's results; on a large run one call may run out of time first and answer with lookup_cursor: call batch_content again with it to go on. BATCH_TASK_NOT_READY: the task has not finished; BATCH_TASK_FAILED: it failed (task_error holds its error); BATCH_RESULT_EXPIRED: past the job's retention (14 days by default); rerun to scrape it again.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list
lookup_cursor––lookup_cursor from a previous batch_content reply on a binary result, to go on looking for its result_url
max_chars––Max characters of a text result to return (default 20000)
run_id––An earlier run's id (from batch_status or batch_rerun). Default: the job's latest run.
task_idstringyestask_id from a batch_results row

No output schema declared.

No examples provided.

batch_create ~941

Submit a Batch job: many URLs scraped asynchronously in the cloud (Zenrows Batch API). Suited to large URL lists; scrape and extract handle single pages. Not the same as browser_batch. Tasks use automatic mode (mode=auto) by default: Zenrows enables JS rendering and premium proxies only on the pages that need them. Pass just the URLs. Set js_render or premium_proxy (job-level, or per task) only to force a fixed configuration; that turns automatic mode off for those tasks. Cost: the same credits as the regular API, per successful task: 1 for a basic request, 5 with js_render, 10 with premium_proxy, 25 with both; mode=auto bills each task at the configuration that worked. Failed tasks are not billed, except target 404 and 410 answers, billed as on the regular API. Limits: up to 100,000 tasks per call; 3 active jobs per account by default, shared with Crawl (BATCH_QUOTA_EXCEEDED past that); a job frees its slot when its run ends. Creates a closed job with every task in this one call. Each task takes a url plus optional external_id, metadata, method/body (POST tasks) and scrape params. Every call sends an Idempotency-Key, so the bounded retries on network errors and 5xx never create a second job; an error reply carries the key to retry with. Returns job_id, status and stats at once; the job runs asynchronously. Then: batch_wait until it ends, batch_results to list rows (paged), batch_content to read one task's page. A run that ends failed (out of credits, inactive subscription, key cap) answers ok:false with error.code and server_code; batch_rerun recovers it. Submits of 10,000+ tasks keep writing tasks for a while (ingesting:true). Errors: BATCH_INVALID_REQUEST (400, server_code and invalid_tasks say what), BATCH_INSUFFICIENT_CREDITS (402), BATCH_KEY_CAP_REACHED (402, this key's cap), BATCH_QUOTA_EXCEEDED (429, job limit), AUTH_INVALID (401; server_code subscription_inactive means fix Billing), BATCH_ACCESS_DENIED (403, do not retry), BACKEND_UNAVAILABLE. Schedule…

NameTypeReqDescription
idempotency_key––Sent as the Idempotency-Key header, up to 128 characters; generated per call when unset. Reusing a key with the identical request within 24 hours returns the original response instead of doing it aga…
js_renderboolean|null–Force js_render on all tasks (5 credits each). Overrides automatic mode (mode=auto), which already renders when needed.
mode_autoboolean|null–Automatic mode (mode=auto) is on by default; leave unset. False sends plain requests without it.
premium_proxyboolean|null–Force premium_proxy on all tasks (10 credits each, 25 with js_render). Overrides automatic mode (mode=auto), which already uses premium proxies when a page needs them.
proxy_countrystring|null–Job-level ISO country code. Works in automatic mode (mode=auto); with js_render alone it requires premium_proxy.
response_type––Job-level output format. Leave unset for the raw HTML, the default.
tasks––Tasks (each needs a url), up to 100,000. Prefer this over urls when you need per-task params.
urls––Shorthand: list of URLs (converted to tasks), up to 100,000. Ignored when tasks is provided.
waitboolean|null–If true, poll before returning until the run ends or pauses, or wait_timeout passes; a timeout returns the current state with ok:true
wait_timeout––Max wait in seconds when wait=true (default 50). Many MCP clients cancel a call after 60 s.
wait_timeout_ms––Deprecated: the same wait in milliseconds. Use the seconds parameter instead.
zenrows_params––Additional job-level scrape params merged with the flags above. Accepted: allowed_status_codes, autoparse, block_resources, css_extractor, custom_headers, extract, extract_fields, js_instructions, js…

No output schema declared.

No examples provided.

batch_delete ~91

Delete a Batch job with all its runs and results, for good. A run in flight stops picking up tasks at once, and the job frees its active-job slot. The job reads as not found right away; storage is cleaned up in the background. Idempotent. To keep the results, use batch_cancel instead.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list

No output schema declared.

No examples provided.

batch_list ~135

List this account's Batch jobs, newest first, each with its latest run's status and stats. Filter by status (open or closed) and type (regular or scheduled). Pass next_cursor as cursor for the next page; a page can hold fewer than limit jobs while next_cursor is still set, so keep paging until it is null. Deleted jobs are not listed.

NameTypeReqDescription
cursorstring|null–next_cursor from a previous batch_list call
limit––Jobs per page (default 20, max 100)
status––Only jobs with this job status
type––Only jobs of this type

No output schema declared.

No examples provided.

batch_pause ~92

Pause a Batch job's current run: it picks up no new tasks until batch_resume. Tasks already in flight still finish and bill; for a hard cost stop use batch_cancel. A paused run still counts as an active job. Idempotent; a run that already ended answers with its final status and already_ended:true.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list

No output schema declared.

No examples provided.

batch_rerun ~323

Start a new run of a Batch job whose latest run ended (completed, stopped or failed). By default it reruns only the tasks that failed or never started (status ["failed", "pending"]), and carries the others' results over: the recovery after a run that failed on credits or was cancelled. Pass status to pick other task statuses, or full:true to scrape every task again. Rerun tasks are billed like new ones. A rerun of only some tasks works up to 10 days after the run started (BATCH_RERUN_WINDOW_EXPIRED after that; full:true still works). BATCH_NO_MATCHING_TASKS: no task has those statuses. BATCH_RUN_NOT_FINISHED: the latest run is still in flight. Sends an Idempotency-Key, so a retry never starts two runs. Returns the new run at once (it writes its tasks first, ingesting:true); call batch_wait.

NameTypeReqDescription
fullboolean|null–Rerun every task, not only some (default false)
idempotency_key––Sent as the Idempotency-Key header, up to 128 characters; generated per call when unset. Reusing a key with the identical request within 24 hours returns the original response instead of doing it aga…
job_idstringyesBatch job id returned by batch_create or batch_list
status––Task statuses to rerun (default ["failed", "pending"]). Ignored with full:true.

No output schema declared.

No examples provided.

batch_results ~318

List a Batch run's result rows, a page at a time: up to limit rows (default 100, max 1000) and next_cursor. Pass next_cursor back as cursor to continue; it is null once every row was read. Each row has task_id, external_id, url, metadata, status (successful, failed, pending, processing, expired), type, result_url when successful, and error when failed. A result_url is presigned and expires after 2 hours: call batch_results again for a fresh one, or read the body with batch_content. Results are kept 14 days by default; after that a successful row reads as status "expired", with no result_url, and batch_content answers BATCH_RESULT_EXPIRED. Filter with status: all (default), successful, failed, or processing (not finished yet). A sparse filter can return fewer rows than limit with next_cursor still set: keep paging. While the run is still running or writing its tasks, the list is partial.

NameTypeReqDescription
cursorstring|null–next_cursor from a previous batch_results call
job_idstringyesBatch job id returned by batch_create or batch_list
limit––Max rows to return (default 100, max 1000)
run_id––An earlier run's id (from batch_status or batch_rerun). Default: the job's latest run.
status––Filter rows by status (default all). processing = tasks not finished yet. successful also returns expired rows.

No output schema declared.

No examples provided.

batch_resume ~93

Resume a paused Batch run: it picks up its remaining tasks again, billed as they finish. Idempotent on a run that is not paused; a run that already ended answers with its final status and already_ended:true. Needs credits: BATCH_INSUFFICIENT_CREDITS or BATCH_KEY_CAP_REACHED otherwise.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list

No output schema declared.

No examples provided.

batch_status ~144

Get a Batch job's latest run: job_id, run_id, status (pending, running, completed, stopped, failed), stats (total, completed, successful, failed) and the job. A failed run answers ok:false with error.code BATCH_INSUFFICIENT_CREDITS, BATCH_KEY_CAP_REACHED, AUTH_INVALID (subscription_inactive) or BATCH_RUN_FAILED, error.server_code (the failure_reason) and failure_detail; batch_rerun recovers it once fixed. A paused run has paused:true; one still writing its tasks has ingesting:true.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list

No output schema declared.

No examples provided.

batch_wait ~194

Poll a Batch job until its run ends (completed, stopped or failed) or pauses, and return its status and stats like batch_status. If the wait runs out first, it returns the current state with ok:true, timed_out:true and a note: call batch_wait again. A paused run returns at once with paused:true (it does not move until batch_resume). A failed run answers ok:false with error.code and server_code (insufficient_credits, subscription_inactive or api_key_cap_reached). Transient poll errors are retried. A call that carries a progressToken gets a progress notification after each poll.

NameTypeReqDescription
job_idstringyesBatch job id returned by batch_create or batch_list
timeout––Max wait in seconds (default 50). Many MCP clients cancel a call after 60 s.
timeout_ms––Deprecated: the same wait in milliseconds. Use the seconds parameter instead.

No output schema declared.

No examples provided.

browser_batch ~188

Execute a sequence of browser actions in a single call against an existing session. Use this when you already know the full sequence of steps — it reduces round trips and is faster than calling each tool individually. Actions run sequentially and stop at the first failure unless stop_on_error is false. Each step result is returned in the results array at the same index. Note: screenshots in batch results are returned as base64 strings inside the JSON; browser_screenshot returns them as images. A batch can include evaluate, so it can change or delete page state the same way browser_evaluate can.

NameTypeReqDescription
actionsarrayyesOrdered list of actions to perform. Each action has a 'type' field plus type-specific parameters.
session_idstringyesSession ID returned by browser_navigate
stop_on_errorboolean|null–Stop executing on the first failed action (default true)

No output schema declared.

No examples provided.

browser_check ~45

Check a checkbox or radio button.

NameTypeReqDescription
selectorstringyesCSS selector of the checkbox or radio element
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_clear_cookies ~34

Clear all cookies for the current browser session.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_clear_local_storage ~36

Delete every localStorage entry in the current page context.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_click ~48

Click an element on the page using a CSS selector.

NameTypeReqDescription
selectorstringyesCSS selector of the element to click
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_close ~40

Close a browser session and free all associated resources, including the concurrency slot it holds.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_drag ~64

Drag an element from its current position to a target element.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate
source_selectorstringyesCSS selector of the element to drag
target_selectorstringyesCSS selector of the drop target

No output schema declared.

No examples provided.

browser_evaluate ~76

Execute JavaScript in the browser context and return the result. The script can change or delete the session's page state, such as cookies, storage and form data.

NameTypeReqDescription
scriptstringyesJavaScript expression or function body to evaluate in the page context
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_fill ~67

Clear an input field and set its value, replacing what was there (browser_type appends instead).

NameTypeReqDescription
selectorstringyesCSS selector of the input element
session_idstringyesSession ID returned by browser_navigate
valuestringyesValue to fill in

No output schema declared.

No examples provided.

browser_focus ~49

Move focus to an element, triggering focus-dependent UI changes.

NameTypeReqDescription
selectorstringyesCSS selector of the element to focus
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_generate_pdf ~73

Render the current page as a PDF document.

NameTypeReqDescription
landscapeboolean|null–Landscape orientation (default false)
print_backgroundboolean|null–Print background graphics (default false)
scale––Page scale factor (default 1)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_accessibility_tree ~91

Get the ARIA accessibility tree of the current page as readable text. Shows the page structure and the selectors needed to interact with elements, in fewer tokens than a screenshot. The tree shows all interactive elements (buttons, inputs, links) with their roles, labels, and states — everything needed to drive browser interactions.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_attribute ~71

Get the value of a specific attribute on an element.

NameTypeReqDescription
attributestringyesAttribute name to retrieve (e.g. 'href', 'src', 'data-id')
selectorstringyesCSS selector of the element
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_cookies ~33

Get all cookies for the current page.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_html ~55

Get the HTML source of an element or the full page.

NameTypeReqDescription
selectorstring|null–CSS selector of the element (omit for full page HTML)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_local_storage ~47

Read one localStorage value in the current page context.

NameTypeReqDescription
keystringyesStorage key to read
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_text ~58

Get the visible text content of an element or the entire page body.

NameTypeReqDescription
selectorstring|null–CSS selector of the element (omit for full page body text)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_title ~32

Get the title of the current page.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_get_url ~33

Get the current URL of the browser session.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_go_back ~35

Navigate back to the previous page in the browser history.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_go_forward ~35

Navigate forward to the next page in the browser history.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_hover ~50

Move the mouse cursor over an element to trigger hover effects.

NameTypeReqDescription
selectorstringyesCSS selector of the element to hover over
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_navigate ~234

Open a Zenrows Browser Sessions session and navigate to a URL. This is the entry point for all browser automation. It creates a new session backed by Zenrows' hosted browser infrastructure and navigates to the given URL in one step. Returns a session_id that every other browser_* tool takes. The session holds one concurrency slot until browser_close closes it. When to use options: - proxy_country: geo-restricted content (ISO 3166-1 alpha-2, e.g. "US", "DE") - proxy_region: world region for geo-targeted proxy (eu, na, ap, sa, af, me)

NameTypeReqDescription
proxy_countrystring|null–ISO 3166-1 alpha-2 country code for geo-targeted proxy (e.g. 'US', 'GB', 'DE')
proxy_regionstring|null–World region code for geo-targeted proxy (eu=Europe, na=North America, ap=Asia Pacific, sa=South America, af=Africa, me=Middle East)
urlstringyesThe URL to navigate to

No output schema declared.

No examples provided.

browser_new_tab ~59

Open a new browser tab. Returns a tab_id to use with browser_switch_tab.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate
url––URL to open in the new tab (opens blank tab if omitted)

No output schema declared.

No examples provided.

browser_press_key ~78

Press a keyboard key. Examples: "Enter", "Tab", "Escape", "ArrowDown", "Control+a".

NameTypeReqDescription
keystringyesKey to press (e.g. "Enter", "Tab", "Escape", "ArrowDown", "Control+a")
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_query_selector_all ~53

Find all elements matching a CSS selector and return their text, HTML, and attributes.

NameTypeReqDescription
selectorstringyesCSS selector to query
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_reload ~32

Reload the current page of a browser session.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_screenshot ~90

Take a screenshot of the current page or a specific element. Use for visual verification or when the accessibility tree is not sufficient.

NameTypeReqDescription
full_pageboolean|null–Capture full page including content below the fold (default false)
selectorstring|null–CSS selector to capture only a specific element (overrides full_page)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_scroll ~52

Scroll the page in a given direction.

NameTypeReqDescription
directionstringyesScroll direction
distance––Pixels to scroll (default 500)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_select_option ~63

Select an option from a <select> dropdown element.

NameTypeReqDescription
selectorstringyesCSS selector of the <select> element
session_idstringyesSession ID returned by browser_navigate
valuestringyesValue of the option to select

No output schema declared.

No examples provided.

browser_set_cookies ~63

Set one or more cookies in the browser session. A cookie with the same name, domain and path replaces the existing one.

NameTypeReqDescription
cookiesarrayyesArray of cookie objects to set
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_set_local_storage ~67

Write one localStorage value in the current page context. An existing value under the same key is replaced.

NameTypeReqDescription
keystringyesStorage key to write
session_idstringyesSession ID returned by browser_navigate
valuestringyesValue to store

No output schema declared.

No examples provided.

browser_switch_tab ~47

Switch focus to a different browser tab.

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate
tab_idstringyesTab ID returned by browser_new_tab

No output schema declared.

No examples provided.

browser_type ~81

Type text into an input element. Appends to existing content unless clear_first is set.

NameTypeReqDescription
clear_firstboolean|null–Clear existing content before typing (default false)
selectorstringyesCSS selector of the input element
session_idstringyesSession ID returned by browser_navigate
textstringyesText to type

No output schema declared.

No examples provided.

browser_uncheck ~52

Uncheck a checkbox, found by CSS selector, in a browser session.

NameTypeReqDescription
selectorstringyesCSS selector of the checkbox element
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_wait ~56

Wait for a fixed duration. browser_wait_for_selector waits only until an element appears.

NameTypeReqDescription
msintegeryesMilliseconds to wait (max 30000)
session_idstringyesSession ID returned by browser_navigate

No output schema declared.

No examples provided.

browser_wait_for_navigation ~110

Wait for the page to navigate to a new URL. It waits for the next navigation event, so a navigation that already finished is not seen and the call waits until timeout_ms. Pages that update without changing URL (AJAX/SPA) fire no navigation event. Optional timeout_ms (default 30000ms).

NameTypeReqDescription
session_idstringyesSession ID returned by browser_navigate
timeout_ms––How long to wait in milliseconds (default 30000, max 60000)

No output schema declared.

No examples provided.

Install

How do I install the io.github.ZenRows/zenrows-mcp server?

io.github.ZenRows/zenrows-mcp runs locally as an npm package, launched with npx -y @zenrows/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @zenrows/mcp

# add to Claude Code
claude mcp add zenrows-zenrows-mcp -- npx -y @zenrows/mcp
Common questions

What is the io.github.ZenRows/zenrows-mcp server?

io.github.ZenRows/zenrows-mcp is listed in the public MCP registry as io.github.ZenRows/zenrows-mcp. Zenrows MCP server: Fetch, Extract, Batch, and Browser Sessions for AI agents. This page covers its npm package (@zenrows/mcp).

Is the io.github.ZenRows/zenrows-mcp server safe to use?

io.github.ZenRows/zenrows-mcp scores 84 out of 100 on VerifyMCP. We recorded 2 known advisories against it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.ZenRows/zenrows-mcp server expose?

io.github.ZenRows/zenrows-mcp exposes 63 tools: account_signup_answer, scrape, extract, prepare_domain, prepared_domain_status, and 58 more. Their descriptions and schemas cost roughly 9,933 tokens of context every time the server is loaded.

Is the io.github.ZenRows/zenrows-mcp server still maintained?

io.github.ZenRows/zenrows-mcp is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.ZenRows/zenrows-mcp server under?

io.github.ZenRows/zenrows-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.