Browser UseSAFE
MCP server for browser-use
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://pypi.org/project/mcp-browser-use/) [](https://pypi.org/project/mcp-browser-use/) [](https://pypi.org/project/mcp-browser-use/)
mcp-browser-use is the easiest way to connect any MCP client (like Claude or Cursor) with the browser using browser-use.
Unlike other browser-use MCPs that make you pay for an LLM API key, this one just uses the LLM that's already set up in your MCP client.
Quickstart
You can start using mcp-browser-use with an MCP client by putting the following command in the relevant config:
uvx mcp-browser-use
Note: Provide the full path to uvx to prevent MCP client failing to start the server.
Contributing
Contributions are welcome! Please feel free to submit a pull request.
Versioning
mcp-browser-use uses Semantic Versioning. For the available versions, see the tags on the GitHub repository.
License
This project is licensed under the Apache 2.0 License, see the LICENSE file for details.
cf8b5c7502acOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-browser-use -- uvx mcp-browser-use
{
"mcpServers": {
"mcp-browser-use": {
"command": "uvx",
"args": [
"mcp-browser-use"
]
}
}
}Exposed tools (19)
18 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
click_element | read | |
close_browser | read | Close the current browser instance. |
done | read | |
get_dropdown_options | read | |
go_back | read | |
go_to_url | read | |
initialize_browser | read | Initialize a new browser instance. |
input_text | read | |
inspect_page | read | |
open_tab | read | |
scroll_down | read | |
scroll_to_text | read | |
scroll_up | read | |
search_google | read | |
select_dropdown_option | read | |
send_keys | write | |
switch_tab | read | |
validate_page | read | |
wait | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
cf8b5c7502acfull audit observations/trust-audit/mcp-server/vinayak-mehta__browser-use-3.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | cf8b5c7502ac | SAFE | B | 89 | first audit |
Questions
What is the Browser Use MCP server?
MCP server for browser-use
What tools does Browser Use expose?
19 in total: 18 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Browser Use safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Browser Use need?
No credential environment variables were found in its source, so it appears to need none.
How does Browser Use run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as mcp-browser-use.
How current is this page?
The grade is for one exact copy of the source (cf8b5c7502ac), read on 2026-10-07. The repository is watched and re-audited when it changes.