Back to Browse

Openbrowser Ai MCP Server

Developer ToolsUse Caution3.5MCP RegistryLocal
Free

Server data from the Official MCP Registry

AI browser automation. Write async Python to navigate, click, type, and extract data.

About

AI browser automation. Write async Python to navigate, click, type, and extract data.

Security Report

3.5
Use Caution3.5High Risk

OpenBrowser is a well-engineered browser automation framework with appropriate authentication and reasonable permission scoping for its developer-tools category. However, several moderate security concerns warrant attention: the MCP server lacks explicit domain allowlisting by default despite providing the feature, code execution via LLM-generated Python introduces inherent risks that are incompletely mitigated, dependency on `cdp-use` (third-party CDP wrapper) and `bubus` (undocumented package) creates supply-chain blindspots, and environment variable handling could be more robust. The framework demonstrates good security awareness (env var usage, storage isolation, profile leasing) but falls short of production-hardened practices in a few critical areas. Supply chain analysis found 20 known vulnerabilities in dependencies (2 critical, 8 high severity). Package verification found 1 issue.

4 files analyzed · 32 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

clipboard

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Run browser in headless mode (true/false)Optional

Environment variable: OPENBROWSER_HEADLESS

Comma-separated list of allowed domains (empty for no restrictions)Optional

Environment variable: OPENBROWSER_ALLOWED_DOMAINS

Optional explicit Chrome profile directory. Omit for an isolated profile per MCP server instance; concurrent owners of one explicit profile are rejectedOptional

Environment variable: OPENBROWSER_USER_DATA_DIR

Optional JSON file used as a one-time seed for cookies plus localStorage in managed MCP profiles; later updates are saved to the active profile copyOptional

Environment variable: OPENBROWSER_STORAGE_STATE

Use minimal tool description (~500 tokens instead of ~1,430)Optional

Environment variable: OPENBROWSER_COMPACT_DESCRIPTION

Maximum output characters per code execution (default: 10000)Optional

Environment variable: OPENBROWSER_MAX_OUTPUT

Enable anonymized usage telemetry (true/false)Optional

Environment variable: ANONYMIZED_TELEMETRY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "me-openbrowser-openbrowser-ai": {
      "env": {
        "ANONYMIZED_TELEMETRY": "your-anonymized-telemetry-here",
        "OPENBROWSER_HEADLESS": "your-openbrowser-headless-here",
        "OPENBROWSER_MAX_OUTPUT": "your-openbrowser-max-output-here",
        "OPENBROWSER_STORAGE_STATE": "your-openbrowser-storage-state-here",
        "OPENBROWSER_USER_DATA_DIR": "your-openbrowser-user-data-dir-here",
        "OPENBROWSER_ALLOWED_DOMAINS": "your-openbrowser-allowed-domains-here",
        "OPENBROWSER_COMPACT_DESCRIPTION": "your-openbrowser-compact-description-here"
      },
      "args": [
        "openbrowser-ai"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!