Browser Mcp Cdp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Browser Mcp Cdp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that drives your real local Chrome via the Chrome DevTools Protocol. Designed for agents that need access to your logged-in sessions (Gmail, internal dashboards, banking, etc.) without uploading credentials to a cloud service.
Different tradeoffs from the alternatives:
| browser-mcp-cdp | Playwright MCP | Chrome DevTools MCP | |
|---|---|---|---|
| Browser | Your local Chrome | Managed Playwright Chromium | Your local Chrome |
| Login state | ✅ Snapshot of your profile (cookies, logins, IndexedDB) | ❌ Fresh profile | ✅ Real profile (modifies it) |
| Profile isolation | ✅ Copy-on-start, real profile untouched | N/A | ⚠️ Direct attach |
| Multi-client | ✅ Shared broker across MCP clients | ❌ Per-client | ❌ Per-client |
| Dependencies | Node only (no Playwright download) | Playwright + browsers | Node only |
The profile snapshot pattern means you can ask an agent to "check my email" — it sees your Gmail logged in — but the agent's actions never modify your real Chrome profile. Each session gets a disposable copy.
claude mcp add browser -- npx -y browser-mcp-cdpOr add manually to ~/.claude.json / Claude Desktop config:
{
"mcpServers": {
"browser": {
"command": "npx",
"args": ["-y", "browser-mcp-cdp"]
}
}
}Requires Node 18+ and Google Chrome installed.
| Tool | Purpose |
|---|---|
browser_navigate | Load a URL, return final URL + title |
browser_evaluate | Run JS in the page, return result |
browser_screenshot | PNG of current page |
browser_click | Click via CSS selector |
browser_click_at | Click at pixel coordinates (pierces iframes / overlays) |
browser_fill | Set value on input/textarea/select |
browser_wait_for | Wait for a selector to appear |
browser_get_url | Current URL |
browser_get_text | Visible text of page or element |
browser_get_html | outerHTML of page or element |
browser_scroll | Scroll by (x, y) pixels |
browser_tabs | List open tabs |
browser_new_tab | Open a new tab |
| Var | Default |
|---|---|
BROWSER_MCP_CHROME_PATH | Auto-detected per OS |
BROWSER_MCP_CHROME_PROFILE_ROOT | OS-standard Chrome profile dir |
BROWSER_MCP_BROKER_SOCKET_PATH | ~/.browser-mcp/broker.sock |
BROWSER_MCP_BROKER_LOCK_PATH | ~/.browser-mcp/broker.lock |
BROWSER_MCP_BROKER_IDLE_TIMEOUT_MS | 600000 (10 min) |
--user-data-dir=<temp> and --remote-debugging-port.BROKER_IDLE_TIMEOUT_MS of no activity; temp profile is deleted.This server lets an LLM execute arbitrary JavaScript in a browser that is logged into your accounts. Only use with models and prompts you trust. Profile snapshotting limits damage (no persistent mutations to your real Chrome), but the agent can read cookies, session tokens, and any data visible to logged-in you for the duration of the session.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.