Back to Browse

Openbrowser Ai MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

AI browser automation. Write async Python to navigate, click, type, and extract data.

About

AI browser automation. Write async Python to navigate, click, type, and extract data.

Security Report

4.2
Use Caution4.2High Risk

OpenBrowser is a well-architected browser automation framework with proper dependency management and reasonable security boundaries. However, there are moderate-severity concerns around arbitrary code execution in the MCP server's `execute_code` tool, insufficient input validation on user-provided URLs, and telemetry data collection that may send sensitive information. The permissions (network access, file I/O, environment variables, subprocess spawning) are appropriate for the stated purpose of browser automation, but the code execution capability introduces inherent risks that users should understand. Supply chain analysis found 20 known vulnerabilities in dependencies (2 critical, 9 high severity). Package verification found 1 issue.

4 files analyzed · 31 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

subprocess

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Run browser in headless mode (true/false)Optional

Environment variable: OPENBROWSER_HEADLESS

Comma-separated list of allowed domains (empty for no restrictions)Optional

Environment variable: OPENBROWSER_ALLOWED_DOMAINS

Chrome profile directory for persistent browser sessionsOptional

Environment variable: OPENBROWSER_USER_DATA_DIR

JSON file used to save and restore cookies plus localStorage between MCP restartsOptional

Environment variable: OPENBROWSER_STORAGE_STATE

Use minimal tool description (~500 tokens instead of ~1,430)Optional

Environment variable: OPENBROWSER_COMPACT_DESCRIPTION

Maximum output characters per code execution (default: 10000)Optional

Environment variable: OPENBROWSER_MAX_OUTPUT

Enable anonymized usage telemetry (true/false)Optional

Environment variable: ANONYMIZED_TELEMETRY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "me-openbrowser-openbrowser-ai": {
      "env": {
        "ANONYMIZED_TELEMETRY": "your-anonymized-telemetry-here",
        "OPENBROWSER_HEADLESS": "your-openbrowser-headless-here",
        "OPENBROWSER_MAX_OUTPUT": "your-openbrowser-max-output-here",
        "OPENBROWSER_STORAGE_STATE": "your-openbrowser-storage-state-here",
        "OPENBROWSER_USER_DATA_DIR": "your-openbrowser-user-data-dir-here",
        "OPENBROWSER_ALLOWED_DOMAINS": "your-openbrowser-allowed-domains-here",
        "OPENBROWSER_COMPACT_DESCRIPTION": "your-openbrowser-compact-description-here"
      },
      "args": [
        "openbrowser-ai"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!