Bright DataCAUTION
A powerful Model Context Protocol (MCP) server that provides an all-in-one solution for public web access.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Bright Data MCP
Web search, page scraping, structured data extraction, and browser automation for AI agents and LLMs over the Model Context Protocol. Works with AI agents, coding agents, chat assistants, and any MCP-compatible client.
Quick Start • Pricing • Use Cases • Tools • Agent Skills • Docs • Support
Free tier: 5,000 requests per month. No credit card required. Renews monthly.
Overview
The Bright Data MCP server gives AI agents real-time access to public web data. It exposes 69 tools covering:
- Web search — Google, Bing, and Yandex results as structured data
- Page scraping — any URL as Markdown or HTML, with bot detection, CAPTCHA solving, and proxy rotation handled automatically on every request
- Structured data extraction — clean JSON from Amazon, LinkedIn, Instagram, TikTok, YouTube, X, Reddit, Facebook, Crunchbase, Zillow, and other major platforms, without parsing HTML
- Browser automation — navigate, click, type, screenshot, and read page
7c70d865c467OBSERVED · 2026-09-22Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp --env API_TOKEN=${API_TOKEN} -- npx -y @brightdata/[email protected]Exposed tools (24)
22 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Code | read | Developer tools and package information datasets. |
Custom | read | Placeholder for user-defined tool selections. |
E-commerce | read | Retail and marketplace datasets for product intel. |
Research | read | App stores, news, and developer data feeds. |
Travel | read | Travel information. |
diagnose_scraping_approach | write | Run a two-step diagnostic to discover the correct |
discover | read | Search the web and rank results by AI-driven relevance. |
extract | read | Scrape a webpage and extract structured data as JSON. |
list_dataset_fields | read | List the filterable fields of a searchable dataset |
scrape_as_html | read | Scrape a single webpage URL with advanced options for |
scrape_as_markdown | read | Scrape a single webpage URL with advanced options for |
scrape_batch | read | Scrape multiple webpages URLs with advanced options for |
scraping_browser_get_html | read | Get the HTML content of the current page. Avoid using this |
scraping_browser_get_text | read | Get the text content of the current page |
scraping_browser_go_back | read | Go back to the previous page |
scraping_browser_go_forward | read | Go forward to the next page |
scraping_browser_navigate | read | Navigate a scraping browser session to a new URL |
scraping_browser_screenshot | read | Take a screenshot of the current page |
scraping_browser_scroll | read | Scroll to the bottom of the current page |
search_dataset | read | Search a Bright Data dataset by a filter and get matching |
search_engine | read | Scrape search results from Google, Bing or Yandex. Returns |
search_engine_batch | write | Run multiple search queries simultaneously. Returns |
session_stats | read | Tell the user about the tool usage during this session |
web_scraping_strategy | read | Decision tree for picking the right Bright Data tool. |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (11)
brightdata-mcp-2.7.1.mcpb
const password = 'canary-zone-password-should-not-leak';
.mcpbignore
__BRD_TEST_STUB_URL: `http://127.0.0.1:${port}`,url: `http://127.0.0.1:${port}/request`,__BRD_TEST_STUB_URL: `http://127.0.0.1:${port}`,__BRD_TEST_STUB_URL: `http://127.0.0.1:${port}`,axios, fastmcp, playwright, remark, strip-markdown, zod
assets/Demo.gif
assets/Demo2.gif
assets/Demo3.gif
Gates applied: no_behavioural_pass.
7c70d865c467full audit observations/trust-audit/mcp-server/brightdata__bright-data-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-22 | 7c70d865c467 | CAUTION | B | 89 | source changed, verdict held |
Questions
What is the Bright Data MCP server?
A powerful Model Context Protocol (MCP) server that provides an all-in-one solution for public web access.
What tools does Bright Data expose?
24 in total: 22 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Bright Data safe to connect to an agent?
With care. The audit graded it B (89/100) and found 11 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Bright Data need?
It reads API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Bright Data run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @brightdata/mcp at 2.11.3.
How current is this page?
The grade is for one exact copy of the source (7c70d865c467), read on 2026-09-22. The repository is watched and re-audited when it changes.