Back to Browse

Nexus Browser MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Event-driven deterministic browser MCP: HITL gates, audit, console/network/perf observability.

About

Event-driven deterministic browser MCP: HITL gates, audit, console/network/perf observability.

Security Report

4.2
Use Caution4.2High Risk

A well-engineered browser automation MCP server with strong governance features (HITL gates, audit logging, parameter redaction). Code quality is high with thoughtful error handling and state management. However, there are moderate security concerns around overly broad JavaScript execution capabilities (browser_evaluate disabled by default but unconditional when enabled), potential sensitive data exposure through network body reads, and lack of explicit input validation on some parameters. Permissions appropriately match the purpose of browser automation. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

3 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

clipboard

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

isolatedOptional

Environment variable: BROWSER_MODE

http://localhost:9222Optional

Environment variable: BROWSER_CDP_ENDPOINT

""Optional

Environment variable: BROWSER_CHANNEL

""Optional

Environment variable: BROWSER_USER_DATA_DIR

falseOptional

Environment variable: BROWSER_HEADLESS

30000Optional

Environment variable: BROWSER_DEFAULT_TIMEOUT_MS

60000Optional

Environment variable: BROWSER_TOOL_TIMEOUT_MS

800Optional

Environment variable: BROWSER_STABLE_WINDOW_MS

2Optional

Environment variable: BROWSER_STABLE_REQUIRED

3000Optional

Environment variable: BROWSER_STABLE_TIMEOUT_MS

100Optional

Environment variable: BROWSER_SNAPSHOT_MAX_NODES

600Optional

Environment variable: BROWSER_CONTEXT_TTL_SEC

16000Optional

Environment variable: BROWSER_STREAM_CHAR_CAP

64000Optional

Environment variable: BROWSER_STREAM_PAGE_CAP

500Optional

Environment variable: BROWSER_EVENT_MAX_ENTRIES

500Optional

Environment variable: BROWSER_EVENT_TEXT_CAP

50Optional

Environment variable: BROWSER_EVENT_HANDLE_MAX

falseOptional

Environment variable: BROWSER_ALLOW_NETWORK_BODY

4000Optional

Environment variable: BROWSER_NETWORK_BODY_CAP

stdioOptional

Environment variable: BROWSER_TRANSPORT

127.0.0.1Optional

Environment variable: BROWSER_HTTP_HOST

8817Optional

Environment variable: BROWSER_HTTP_PORT

""Optional

Environment variable: BROWSER_HTTP_TOKEN

falseOptional

Environment variable: BROWSER_ALLOW_JS_EXECUTION

[]Optional

Environment variable: BROWSER_HITL_RULES

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-paipaipai666-nexus-browser-mcp": {
      "env": {
        "BROWSER_MODE": "your-browser-mode-here",
        "BROWSER_CHANNEL": "your-browser-channel-here",
        "BROWSER_HEADLESS": "your-browser-headless-here",
        "BROWSER_HTTP_HOST": "your-browser-http-host-here",
        "BROWSER_HTTP_PORT": "your-browser-http-port-here",
        "BROWSER_TRANSPORT": "your-browser-transport-here",
        "BROWSER_HITL_RULES": "your-browser-hitl-rules-here",
        "BROWSER_HTTP_TOKEN": "your-browser-http-token-here",
        "BROWSER_CDP_ENDPOINT": "your-browser-cdp-endpoint-here",
        "BROWSER_USER_DATA_DIR": "your-browser-user-data-dir-here",
        "BROWSER_EVENT_TEXT_CAP": "your-browser-event-text-cap-here",
        "BROWSER_CONTEXT_TTL_SEC": "your-browser-context-ttl-sec-here",
        "BROWSER_STABLE_REQUIRED": "your-browser-stable-required-here",
        "BROWSER_STREAM_CHAR_CAP": "your-browser-stream-char-cap-here",
        "BROWSER_STREAM_PAGE_CAP": "your-browser-stream-page-cap-here",
        "BROWSER_TOOL_TIMEOUT_MS": "your-browser-tool-timeout-ms-here",
        "BROWSER_EVENT_HANDLE_MAX": "your-browser-event-handle-max-here",
        "BROWSER_NETWORK_BODY_CAP": "your-browser-network-body-cap-here",
        "BROWSER_STABLE_WINDOW_MS": "your-browser-stable-window-ms-here",
        "BROWSER_EVENT_MAX_ENTRIES": "your-browser-event-max-entries-here",
        "BROWSER_STABLE_TIMEOUT_MS": "your-browser-stable-timeout-ms-here",
        "BROWSER_ALLOW_JS_EXECUTION": "your-browser-allow-js-execution-here",
        "BROWSER_ALLOW_NETWORK_BODY": "your-browser-allow-network-body-here",
        "BROWSER_DEFAULT_TIMEOUT_MS": "your-browser-default-timeout-ms-here",
        "BROWSER_SNAPSHOT_MAX_NODES": "your-browser-snapshot-max-nodes-here"
      },
      "args": [
        "nexus-browser-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Nexus Browser MCP Server - Event-driven deterministic browser MCP: HITL gates, audit, | MCP Marketplace