Back to Browse

Browser Automation MCP Server

Developer ToolsUse Caution2.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Programmatic headless browser sessions: create, interact, browse, and extract - rendered in a real

About

Programmatic headless browser sessions: create, interact, browse, and extract - rendered in a real

Remote endpoints: streamable-http: https://data.dataleads.pro/mcp/browser-automation

Security Report

2.2
Use Caution2.2Critical Risk

This MCP server acts as a client to the DataLeads browser automation API. While the code structure is straightforward, there are significant authentication and credential handling concerns: the API key is transmitted in both the request body and Authorization header (redundant and increases exposure), there is no validation of the API key before use, and error handling is minimal. Additionally, the server lacks input validation on payloads passed to the upstream API, which could enable users to accidentally or intentionally send malformed requests. The server's permissions are appropriate for its purpose (network_http to call an external API, env_vars for credentials), but the implementation quality and security practices need improvement. Supply chain analysis found 6 known vulnerabilities in dependencies (1 critical, 5 high severity).

3 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Browser Automation API (Headless Sessions)

Programmatic headless browser sessions: create, interact, browse, and extract - rendered in a real browser.

Part of the DataLeads API suite (Tools category). Requests render in a real browser with anti-bot handling and protected-page support built in - no proxies to manage, no infrastructure to run.

Endpoints

MethodPathDescription
POST/session/createV1 Session Create
POST/interactV1 Interact
POST/session/listV1 Session List
POST/session/deleteV1 Session Delete
POST/browseV1 Browse

Quick start

curl -X POST https://data.dataleads.pro/v1/session/create \
  -H 'Content-Type: application/json' \
  -d '{"clientKey": "YOUR_CLIENT_KEY", "url": "https://example.com", "extract": ["title", "markdown"]}'

Replace YOUR_CLIENT_KEY with your key. Get one at https://data.dataleads.pro - free tier included.

MCP server

  • Remote (Streamable HTTP): https://data.dataleads.pro/mcp/browser-automation
  • Stdio (Docker): docker run -e DATALEADS_API_KEY=yourkey ghcr.io/dataleads/browser-automation-mcp:latest

Pricing

TierPriceRequests
Free$0500/mo
Starter$9/mo5,000
Pro$29/mo25,000
Business$99/mo100,000
Enterprisecustomcustom

Full plan details at https://data.dataleads.pro.

License

MIT - see LICENSE.

Reviews

No reviews yet

Be the first to review this server!