MCP servers · by job

Browser automation MCP servers

116 MCP servers that drive a real browser: navigate, click, fill forms and read pages. 31 are SAFE, 27 CAUTION and 58 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Browser automation MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/browser-automation/page/2

Verdicts · 116 servers

✓SAFE31!CAUTION27✕BLOCK58

Transports

A server can list more than one transport.

Tool risk

31

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 17 tools.

Servers with no destructive tools →

116 browser automation servers

25–48 of 116 · ranked by trust score, then stars

Browserai

brightdata/browserai-mcp

✓SAFE B

A powerful Model Context Protocol (MCP) server that provides an access to serverless browser for AI agents and apps

★ 352 write

1point3acres-toolkit

vivian-labs/1point3acres-toolkit

✓SAFE B

一亩三分地自动签到 + 每日答题:在你自己电脑的 Chrome 里、用你自己的登录完成,不经过第三方;也是给 Claude Code / Codex 用的 MCP 服务。1point3acres daily check-in & quiz automation, local-only, plus an MCP server for AI assistants.

★ 141 writestdio

@putervision/behavior-mcp

putervision/behavior-mcp

✓SAFE B

⚡ High-frequency (~60Hz) in-browser behavior tree execution engine for autonomous AI agents. Reactive priority interrupts, safety guardrails & deterministic action replay over MCP.

★ 121 writestdio

CloakBrowser-Agent

CloakHQ/CloakBrowser-Agent

!CAUTION B

Jev-powered stealth browser agent. TypeSafe Jev decides each step in ~0.3 s, CloakBrowser carries it out like a human. MCP server, CLI and Python API.

★ 34 read

josesepulvedapino-zahori

josesepulvedapino/zahori

!CAUTION B

Find the media stream behind any web page: browser-driven HLS/DASH/MP4 resolution with learnable site profiles

★ 31 writestdio

stanislawherjan1-gdocs-comments

stanislawherjan1/gdocs-comments-mcp

✓SAFE B

MCP server for adding inline, range-anchored comments to Google Docs — the one comment operation the Google Docs & Drive APIs can't do. For AI agents (Claude, Cursor, Copilot) that review documents.

★ 31 writestdio

fluent-mcp-servers

Dominotypist3077/fluent-mcp-servers

!CAUTION B

Connect AI agents to the Fluent WordPress ecosystem using standardized MCP servers for CRM, support, boards, community, and affiliate management.

★ 126 destructivestdio

Opencode-chrome

G10hdz/Opencode-chrome

✓SAFE B

A Chrome extension that gives OpenCode browser control, similar to Claude or Codex in Chrome.

★ 13 writestdio

velric-agent

ikooky/velric-agent

!CAUTION B

Agent 自主渗透测试工具: SPA/MPA 接口枚举、运行时流量捕获、权限树还原、参数矩阵合并。

★ 12 writestdio

cursor-browser-bridge

scyzorykpl/cursor-browser-bridge

✓SAFE B

🌐 Control Cursor IDE's browser remotely via Claude Code using Model Context Protocol for seamless web automation and interaction.

★ 01 destructive

gdocs-comments-mcp

Abdulreh4874/gdocs-comments-mcp

✓SAFE B

Master modern software development through Stanford's CS146S assignments, featuring hands-on Python projects, Poetry workflows, and Conda environment setup for building production-ready skills.

★ 01 writestdio

nslookup-mcp

Ayushje/nslookup-mcp

✓SAFE B

Run DNS lookups, SSL checks, security scans, GEO scores, and domain intelligence via MCP with nslookup.io

★ 01 writestdio

shade-mcp

noisefactorllc/shade-mcp

✓SAFE B

MCP dev tools for Noisemaker and Portable shader effects

★ 019 readstdio

siteglass

siteglassio/siteglass-mcp

✓SAFE B

Archive any URL to a shareable snapshot (rrweb/pdf/png) + agent-driven web QA — an MCP server for siteglass.io. No CAPTCHA, no signup.

★ 04 writestdio

Web Eval Agent

refreshdotdev/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

Web Eval Agent

withrefresh/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

WebEvalAgent

operative-sh/web-eval-agent

!CAUTION B

An MCP server that autonomously evaluates web applications.

★ 1,2352 readstdio

Invisible Playwright

feder-cr/invisible_playwright_mcp

!CAUTION B

Anti-detect agentic stealth browser: undetected browsing, browser automation, Python AI web browsing agent, computer use, scraping, lead generation. No captchas.

★ 31,631Not listed in sourcestdio

jev-ultrafast-mcp

jiawei686/jev-ultrafast-mcp

!CAUTION B

Hand a whole browser task off in one call: a decision model drives the page server-side, so a flow costs one call, not a turn per click. Ref-based element tables, code-checked assertions, zero-model macro replay, over the Chrome DevTools Protocol.

★ 19Not listed in sourcestdio

jev-browser-control

nexibeo/jev-browser-control

!CAUTION B

Let Claude code, chatgpt codex or control your own Chrome. Chrome extension + MCP server: Jev, TypeSafe's decision model, picks each click in ~0.5 s for a fraction of a cent. MIT, bring your own OpenRouter key.

★ 52 write

browden

nishantsny/browden

!CAUTION B

Read-only browser MCP server — a local, configurable MCP shell around real Chrome for LLM agents.

★ 12 readsse

Cloudflare Playwright

cloudflare/playwright-mcp

!CAUTION B

Playwright MCP fork that works with Cloudflare Browser Rendering

★ 2581 destructivesse

Stealthy Auto Browse

psyb0t/docker-stealthy-auto-browse

!CAUTION B

Stealth browser automation that actually works. Runs Camoufox (custom Firefox) in Docker with zero Chrome DevTools Protocol exposure, real OS-level mouse and keyboard input via PyAutoGUI, and a JSON HTTP API + MCP server to control it all remotely. Watch it live via noVNC.

★ 88Not listed in sourcestreamable-http

chrome-devtools-mcp

ChromeDevTools/chrome-devtools-mcp

✓SAFE B

Chrome DevTools for coding agents

★ 53,8942 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are browser automation servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which browser automation MCP servers rank highest on trust?
Playwright (microsoft/playwright-mcp), Browserbase (browserbase/mcp-server-browserbase) and Brightdata Mcp (brightdata/brightdata-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many browser automation servers only read?
24 of the 116 declare tools that all only read; 31 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.