cursor-browser-bridgeSAFE
🌐 Control Cursor IDE's browser remotely via Claude Code using Model Context Protocol for seamless web automation and interaction.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/scyzorykpl/cursor-browser-bridge/releases)
📖 What is cursor-browser-bridge?
cursor-browser-bridge helps you link Cursor IDE’s built-in browser with other MCP clients like Claude Code or Codex. It works over SSH, meaning you can control your MCP client through Cursor’s browser. You can navigate pages, click buttons, type text, take screenshots, and more — all without leaving the Cursor IDE.
This tool is helpful if you want to see what happens in your MCP client while still working in your main coding environment. It saves time and keeps your workflow simple.
🖥️ System Requirements
Before downloading, check that your computer fits these requirements:
- Operating System: Windows 10 or later, macOS 10.14 or later, or Linux
- RAM: At least 4 GB free memory for smooth operation
- Disk Space: At least 100 MB free disk space
- Network: Stable internet connection that supports SSH connections
- Software: SSH client installed (Windows users can use PowerShell or tools like PuTTY)
⬇️ Download & Install
You will need to visit the release page to get the latest version of cursor-browser-bridge.
Follow these steps:
- Click this button to go to the download page:
[](https://github.com/scyzorykpl/cursor-browser-bridge/releases)
- On the releases page, look for the file that matches your computer’s operating system:
- For Windows: a file ending with
.exe - For macOS: a file ending with
.dmgor.zip - For Linux: usually a
.tar.gzor.AppImage
- Click the file name to download it.
- When downloaded, open the file:
- On Windows, double-click the
.exefile and foll
136685ce8d21OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add cursor-browser-bridge -- npx -y [email protected]
{
"mcpServers": {
"cursor-browser-bridge": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (18)
16 read · 1 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
browser_click | read | Click an element on the page by its ref from a snapshot. |
browser_console_messages | read | Get console messages from the browser. |
browser_evaluate | write | Execute arbitrary JavaScript in the browser page and return the result. |
browser_fill | destructive | Clear and fill an input element with a value. |
browser_hover | read | Hover over an element. |
browser_lock | read | Lock the browser to prevent user interaction while automating. |
browser_navigate | read | Navigate to a URL in Cursor |
browser_navigate_back | read | Go back in browser history. |
browser_navigate_forward | read | Go forward in browser history. |
browser_network_requests | read | Get network requests from the browser. |
browser_press_key | read | Press a keyboard key. |
browser_reload | read | Reload the current page. |
browser_resize | read | Resize the browser viewport. |
browser_screenshot | read | Take a screenshot of the current page. |
browser_snapshot | read | Capture accessibility snapshot of the current page. Returns a YAML tree of page elements with refs for interaction. |
browser_tabs | read | List all open browser tabs with their URLs and titles. |
browser_type | read | Type text into a focused or referenced input element (appends text). |
browser_unlock | read | Unlock the browser to allow user interaction. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
browser_fill
Gates applied: no_behavioural_pass, no_license.
136685ce8d21full audit observations/trust-audit/mcp-server/scyzorykpl__cursor-browser-bridge.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 136685ce8d21 | SAFE | B | 89 | first audit |
Questions
What is the cursor-browser-bridge MCP server?
🌐 Control Cursor IDE's browser remotely via Claude Code using Model Context Protocol for seamless web automation and interaction.
What tools does cursor-browser-bridge expose?
18 in total: 16 read-only, 1 that write, and 1 that can delete or overwrite (browser_fill). Every one is listed on this page with its risk.
Is cursor-browser-bridge safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does cursor-browser-bridge need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (136685ce8d21), read on 2026-10-11. The repository is watched and re-audited when it changes.