Back to Browse

Riffle MCP Server

Developer ToolsModerate7.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Your agent uses the web as text, not screenshots. Several steps per call, only changes come back.

About

Your agent uses the web as text, not screenshots. Several steps per call, only changes come back.

Security Report

7.6
Moderate7.6Low Risk

Riffle is a browser-automation MCP server that launches its own Chrome instance and exposes page reading and interaction tools, which fits its purpose and the Developer Tools category. The main concerns are the opt-in -keep-state option, which persists session cookies and storage to a local file that grants access to signed-in accounts, and the postinstall script in the npm installer. Only a portion of the Go source was provided, so the review covers the README, go.mod, installer package.json and integration tests, and the core server code should be checked as well. Package verification found 1 issue.

4 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-noetive-riffle": {
      "args": [
        "-y",
        "@noetive/riffle"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!