Back to Browse

Headlessstage MCP Server

Developer ToolsModerate5.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Browser automation: navigate, click, fill, screenshot and evaluate in a headless browser.

About

Browser automation: navigate, click, fill, screenshot and evaluate in a headless browser.

Security Report

5.0
Moderate5.0Moderate Risk

headlessstage is a browser automation MCP server that bundles no browser and whose default executor fails safely, so it performs no network or browser actions out of the box. The main concerns are caller-controlled safety guards: allowDangerous is set by the same caller that supplies launchOptions, and launchOptions accepts arbitrary keys such as executablePath, which could point an injected executor at an arbitrary binary. Its permissions (browser control, page JavaScript evaluation, file: URL navigation) match its stated purpose. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

browser_control

Check that this permission is expected for this type of plugin.

javascript_eval

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-headlessstage": {
      "args": [
        "-y",
        "@reneturcios/headlessstage"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

headlessstage

Browser automation through a headless browser page, as a CLI and a stdio MCP server in one bin. Navigate to a URL, click, hover, fill and select form elements, take named screenshots and evaluate JavaScript in the page.

The browser itself sits behind an injectable executor interface (BrowserExecutor in src/types.ts). This package bundles no browser and downloads none: with no executor configured, browser commands fail with a clear "Browser unavailable" error. Deployments inject a Puppeteer-compatible executor to drive a real browser. Launch options that weaken browser security (--no-sandbox, --disable-web-security, --allow-insecure-localhost) are rejected unless a call explicitly passes allowDangerous: true.

Install

npx -y @reneturcios/headlessstage mcp

CLI

headlessstage mcp                     # stdio MCP server
headlessstage navigate <url>
headlessstage screenshot <name> [selector]
headlessstage click <selector>
headlessstage fill <selector> <value>
headlessstage evaluate <script>
headlessstage --version

Exit codes: 0 success, 1 browser error, 2 usage error.

MCP tools

ToolPurpose
puppeteer_navigateNavigate to any URL in the browser
puppeteer_screenshotCapture screenshots of the entire page or specific elements
puppeteer_clickClick elements on the page
puppeteer_hoverHover elements on the page
puppeteer_fillFill out input fields
puppeteer_selectSelect an element with a SELECT tag
puppeteer_evaluateExecute JavaScript in the browser console

MCP client config:

{
  "mcpServers": {
    "headlessstage": {
      "command": "npx",
      "args": ["-y", "@reneturcios/headlessstage", "mcp"]
    }
  }
}

Docker

docker run -i ghcr.io/cloudcorprecords/headlessstage          # MCP server
docker run --rm ghcr.io/cloudcorprecords/headlessstage --version

Development

npm install
npm run build
npm test

MIT license.

Reviews

No reviews yet

Be the first to review this server!