Atlas / MCP servers / nishantsny / browden

browdenCAUTION

Name: browden
Author: nishantsny

mcp/nishantsny/browden

MCP server by nishantsny · agent · browser · browser automation · Audited 2026-10-11

⚑ Report / re-scan Source ↗

Read-only browser MCP server — a local, configurable MCP shell around real Chrome for LLM agents.

Verdict

CAUTION

Grade

Trust score

87 /100

Exposed tools

2 2r · 0w · 0d

Transport

sse · stdio

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/nishantsny/browden/actions/workflows/e2e.yml) [](./LICENSE) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io)

A local, cross-platform, read-only (configurable) MCP shell around a real Chrome browser. It lets an LLM agent look at and navigate the web through your own browser. The agent can read pages, query the DOM, and take screenshots, but can never execute any write action. The MCP is configurable to allow button-clicks and text-fill, allowlisted per website and visible element.

Short demo video: https://youtu.be/q-W3Z9nlj58

Disclaimer

With great power comes great responsibility: Only point this MCP to sites whose Terms of Service permit automated access.

When to use browden

browden is deliberately narrow: safe, local, undetected, and read-only, with allowlisted writes. This allows your agent to run wild on your own logged-in Chrome. Use browden for your daily research needs + a few writes. Defer to richer automation tools when you need to drive the browser rather than read it.

Typical usecases:

Let an agent read and navigate your logged-in pages while it stays

structurally unable to click "Buy", send mail, or delete anything.

You need a prompt-injection perimeter around the agent.

When NOT to use browden

Read from source at commit a9f16e72059fOBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add browden -- uvx browden

claude-desktop

{
  "mcpServers": {
    "browden": {
      "command": "uvx",
      "args": [
        "browden"
      ]
    }
  }
}

Exposed tools (2)

2 read · 0 write · 0 destructive.

Tool	Risk	Description
`list_tabs`	read	List all open browser tabs across all profiles
`new_blank_tab`	read	Open a new blank tab and return it (navigate it afterwards).

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (9 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (12)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

browden/web_navigator/selenium_chrome/backend.py:223

f"--remote-allow-origins=http://127.0.0.1:{port}",

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

browden/web_navigator/selenium_chrome/backend.py:263

url = f"http://127.0.0.1:{port}/json/version"

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

perf_benchmark/mem_profile.py:425

page_url = f"http://127.0.0.1:{httpd.server_address[1]}/"

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

setup/onetime_setup.py:148

service_name: {"type": "sse", "url": f"http://127.0.0.1:{port}/sse"}

MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94

perf_benchmark/mem_profile.py:236

print(f"\n{'phase':<16}{'n':>4}{'uss_mb':>9}{'Δidle':>8}"

LOWInventory / provenance · inv.binary · CWE-1104

test/fixtures/tranco-mini.txt.gz

tranco-mini.txt.gz

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59

test/e2e/test_upload_file.py:64

(tmp_path / "id_rsa").write_text("PRIVATE KEY")