MCP servers · by job

Browser automation MCP servers

116 MCP servers that drive a real browser: navigate, click, fill forms and read pages. 31 are SAFE, 27 CAUTION and 58 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Browser automation MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/browser-automation/page/5

Verdicts · 116 servers

✓SAFE31!CAUTION27✕BLOCK58

Transports

A server can list more than one transport.

Tool risk

31

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 17 tools.

Servers with no destructive tools →

116 browser automation servers

97–116 of 116 · ranked by trust score, then stars

brave-browser-mcp

ahmadhass0un/brave-browser-mcp

✕BLOCK F

MCP server that gives AI assistants full control of your real Brave/Chrome profile via a lightweight MV3 extension — tabs, clicks, typing, screenshots, PDF, cookies, CAPTCHA wait, network capture, and 9-platform search

★ 11 destructivestdio

Browser

agent360dk/browser-mcp

✕BLOCK F

The browser tool that can stop and ask you. A 2FA code, a CAPTCHA, a choice only you can make: it asks on your screen, then carries on in the same signed-in Chrome. 40 tools, MCP clients that run local servers, MIT.

★ 532 destructivestdio

hronaut

hronaut/hronaut

✕BLOCK F

The browser your coding agent can come back to — visible, persistent, isolated workspaces over MCP.

★ 618 readstdio

Trusty Squire

Trusty-Squire/trusty-squire

✕BLOCK F

Trusty Squire signs up / in to websites for you so you don’t have to.

★ 33 writestdio

android-agent

Dynaevangelical2652/android-agent

✕BLOCK F

Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.

★ 45 writestreamable-http

pairbrowse

pairbrowse/pairbrowse

✕BLOCK F

Multiplayer browser sessions for developers and AI coding agents

★ 47 write

browser-mcp

Agent360dk/browser-mcp

✕BLOCK F

The browser tool that can stop and ask you. A 2FA code, a CAPTCHA, a choice only you can make: it asks on your screen, then carries on in the same signed-in Chrome. 40 tools, MCP clients that run local servers, MIT.

★ 532 destructivestdio

QA-Use

desplega-ai/qa-use

✕BLOCK F

Agent-first E2E testing CLI

★ 271 destructivestdio

Hwatu

hongnoul/hwatu

✕BLOCK F

Headless verification browser for AI coding agents: 35 ms one-call checks, pixel diffs, live human hand-off

★ 115Not listed in sourcestdio

Muggle Works

multiplex-ai/muggle-ai-works

✕BLOCK F

Your AI coding agent writes code fast — we make sure the web product actually works. Paste a URL, the agent clicks through signup/checkout/dashboards like a real user, reports failures with screenshots. Currently web only. Works with Claude Code, Cursor, Codex, Windsurf.

★ 1612 destructivestdio

Ui.Vision - Browser and Desktop Automation

a9t9/rpa

✕BLOCK F

Browser and desktop automation with an MCP server for AI assistants. Record macros or write JavaScript to automate websites, extract data, and control desktop apps with OCR and image recognition.

★ 2,0251 destructivestdio

Flyto Core

flytohub/flyto-core

✕BLOCK F

AI said it finished. Flyto2 shows the proof.

★ 4833 readstdio

husk

Hotragn/husk

✕BLOCK F

Husk gives your AI chat a real computer of its own: files, a browser, and somewhere to run code. It can build things, look stuff up online and keep your work between chats. Turn a chat you already had into a bot that does the job again tomorrow. Free and open source; there is no paid tier.

★ 02 destructivestdio

NotebookLM Secure

pantheon-security/notebooklm-mcp-secure

✕BLOCK F

Secure NotebookLM MCP Server - Query Google NotebookLM from Claude/AI agents with 17 security hardening layers

★ 856 destructivestdio

Blender

sandraschi/blender-mcp

✕BLOCK F

Headless Blender automation via FastMCP — 41 portmanteau tools (150+ ops). Batch mesh/VSE/Grease Pencil, VRM, Gaussian splats; optional live bridge. For Cursor / Claude Desktop. React dashboard + Tauri app.

★ 551 destructivesse

Oya Browser

OyadotAI/oya-browser

✕BLOCK F

The browser control plane for AI agents. One API over Oya Cloud, Browserbase, Steel, Anchor, Browser Use and your own Chrome, with persistent personas, CAPTCHA and MFA handling, and live human takeover.

★ 3471 destructivestreamable-http

OpenBrowser

billy-enrizky/openbrowser-ai

✕BLOCK F

OpenBrowser is a framework for intelligent browser automation. It combines direct CDP communication with a CodeAgent architecture, where the LLM writes Python code executed in a persistent namespace, to navigate, interact with, and extract information from web pages autonomously.

★ 273Not listed in sourcestdio

Notte

nottelabs/notte

✕BLOCK F

Cloud browser infrastructure and web automation platform for your AI and coding agents

★ 2,0022 readstreamable-http

ApiTap

n1byn1kt/apitap

✕BLOCK F

CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.

★ 1271 writestdio

SceneScout

brunoboto96/SceneScout

✕BLOCK F

🔭 Your coding agent, turned into a QA tester for any web app. Finds what is broken and shows you the proof: pictures, replays, journey videos and test reports. Over MCP, with Claude Code, Cursor, VS Code, Codex, Gemini CLI and more.

★ 13 writestdio

Other jobs

By risk

Questions

How do you decide which servers are browser automation servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which browser automation MCP servers rank highest on trust?
Playwright (microsoft/playwright-mcp), Browserbase (browserbase/mcp-server-browserbase) and Brightdata Mcp (brightdata/brightdata-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many browser automation servers only read?
24 of the 116 declare tools that all only read; 31 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.