MCP servers · by job

Browser automation MCP servers

116 MCP servers that drive a real browser: navigate, click, fill forms and read pages. 31 are SAFE, 27 CAUTION and 58 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Browser automation MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/browser-automation/page/4

Verdicts · 116 servers

✓SAFE31!CAUTION27✕BLOCK58

Transports

A server can list more than one transport.

Tool risk

31

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 17 tools.

Servers with no destructive tools →

116 browser automation servers

73–96 of 116 · ranked by trust score, then stars

Pilot

tacosyhorchata/pilot

✕BLOCK D

Chrome extension + MCP server — AI agents control a tab in your real browser, already logged in

★ 324 destructivestdio

scrapfly-mcp

scrapfly/scrapfly-mcp

✕BLOCK D

Official Scrapfly MCP server for Cursor, Claude Desktop, and any MCP-compatible client. Enterprise-grade web scraping, AI extraction, and anti-bot–aware data access as first-class tools.

★ 14Not listed in sourcestdio

assemblash

VidGuiCode/assemblash

✕BLOCK D

Local-first visual document engine with a web editor, CLI, API, and MCP server - built for humans and AI agents.

★ 44 writestreamable-http

libreoffice-mcp

sandraschi/libreoffice-mcp

✕BLOCK D

LibreOffice headless automation via FastMCP — Writer/Calc/Impress convert, ODT merge, PDF combine, folder watch. For Cursor / Claude Desktop.

★ 43 readstdio

selenium-flow

kubed-io/selenium-flow

✕BLOCK D

A selenium mcp and http workflow client.

★ 215 readstdio

Remcp

getremcp/remcp

✕BLOCK D

Remote MCP access to computers you explicitly pair — files, terminal, desktop UI, browser automation, diagnostics, and documents.

★ 14 destructivestreamable-http

cvlac-mcp

stivenson/cvlac-mcp

✕BLOCK D

MCP server that syncs a MinCiencias CvLAC profile with a personal portfolio, via Playwright

★ 13 writestdio

librecrawl-mcp

bridgettmirthful637/librecrawl-mcp

✕BLOCK D

Audit websites with this self-hosted SEO crawler. Connect LibreCrawl to Claude and perform unlimited technical audits without per-crawl fees.

★ 02 writestreamable-http

Antigravity Link

cafetechne/antigravity-link-extension

✕BLOCK D

Mobile companion for Google's Antigravity IDE. Mirror AI sessions on your phone, send messages, stop generation, automate via 9 MCP tools or OpenAPI.

★ 2202 writestdio

Comet

metrostar/comet

✕BLOCK D

React with TypeScript Component Library based on USWDS 3.0

★ 281 writestdio

Inkscape

sandraschi/inkscape-mcp

✕BLOCK D

Headless Inkscape SVG automation via FastMCP — 60+ ops: create, boolean, LPE, export, text, fleet pipeline. Batch without GUI tour. For Cursor / Claude Desktop. Webapp + Tauri.

★ 83Not listed in sourcesse

WEBGhosting

yranjan06/webghosting-mcp

✕BLOCK D

Intelligent stealth browser MCP server for AI agents with 30 tools, 22 anti fingerprint scripts, and LLM powered extraction. Works seamlessly with Cursor, Claude, VS Code, and any OpenAI compatible LLM.

★ 323 readsse

WebDriverIO

webdriverio/mcp

✕BLOCK D

A Model Context Protocol (MCP) server that enables AI assistants to interact with web browsers and mobile applications using WebDriverIO. Automate Chrome browsers, iOS apps, and Android apps—all through a unified interface.

★ 412 destructivestdio

Metro

steve228uk/metro-mcp

✕BLOCK D

🚇 A plugin-based MCP server for React Native runtime debugging, inspection, and automation. Connects to Metro bundler via Chrome DevTools Protocol — no app code changes needed for most features.

★ 831 writestdio

navvi

fellowship-dev/navvi

✕BLOCK D

Turn a browser task into a reusable scraper.

★ 107 read

chrome-bridge

frsorrentino/chrome-bridge

✕BLOCK D

Chrome Bridge by frsorrentino — your real, logged-in Chrome as an MCP server for Claude Code: 60 measured, token-efficient tools. ChromeOS included.

★ 56 destructivestdio

desktop-touch-mcp

Harusame64/desktop-touch-mcp

✕BLOCK F

Windows computer-use MCP server: drive any desktop app via semantic discover-then-act targeting (entities + leases, not pixel coordinates), with per-action perception guards, a native Rust UIA engine, Chrome CDP, and Key Locker credential autofill for ssh/sudo password prompts. Works with Claude, Cu

★ 221 writestdio

page-agent-sdk

whyymj/page-agent-sdk

✕BLOCK F

给网页一个会改页面的 AI 助手。一行代码挂载对话框,AI 通过工具按 schema 安全读写页面数据,实现「对话式」搭建/编辑/运维。

★ 16 destructivestreamable-http

Safari

achiya-automation/safari-mcp

✕BLOCK F

Native Safari browser automation for AI agents. 98 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.

★ 2108 destructivestdio

safari-mcp

achiya-automation/safari-mcp

✕BLOCK F

Native Safari browser automation for AI agents. 98 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.

★ 2108 destructivestdio

AI-Native Open-source Casino Platform Framework

blurifycom/openora

✕BLOCK F

Open-source Casino Platform Framework - AI-Native, Self-hosted, Headless, Plugin-based 🎰

★ 252 writestdio

jelly

FabioFlorey/jelly

✕BLOCK F

Browser instrumentation for agents.

★ 31 destructive

Pi

TGYD-helige/pi

✕BLOCK F

Pluggable extension packages for the Pi AI-agent runtime. Each package exposes LLM-callable tools via MCP — covering IM workspace integrations (Lark, DingTalk, WeCom), browser & computer automation, persistent memory, telemetry, task scheduling, image generation, web access, security policies, and m

★ 792 writestdio

fury-antidetect-browser

furyteamtop/fury-antidetect-browser

✕BLOCK F

Free, open-source anti-detect browser. A Chromium 155 fork that spoofs the fingerprint in C++ rather than with injected JavaScript, with per-profile personas and proxies, a built-in MCP server for AI assistants, and a self-hostable team server with per-project access. No seats, no per-profile pricin

★ 536 write

Other jobs

By risk

Questions

How do you decide which servers are browser automation servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which browser automation MCP servers rank highest on trust?
Playwright (microsoft/playwright-mcp), Browserbase (browserbase/mcp-server-browserbase) and Brightdata Mcp (brightdata/brightdata-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many browser automation servers only read?
24 of the 116 declare tools that all only read; 31 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.