Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a C
Reads the console, network traffic, screenshots and Lighthouse audits of the Chrome you already use, logins included, through an unpacked DevTools extension. Mostly one developer at AgentDesk: no release for 17 months, then a 2.0 rewrite in August 2026 that listens only on 127.0.0.1, needs a token and scrubs credentials. Version 1.x (the old @1.2.0 setup) has a critical flaw: a website or anyone on your network could read what it captured, write files and, on a Mac, run commands. It was public for 149 days before 2.0 fixed it, and 1.x will never be patched, so upgrade. Biggest deduction: one all-access token guards the local connector, with no scopes. What the agent may do is set by flags instead: clicking, typing and running scripts stay off unless you add --allow-input or --allow-eval. As a general-purpose tool, what it exposes depends on the tabs you open DevTools on.
How to connect
// Cursor Settings > MCP > New MCP Server
{ "mcpServers": { "browser-tools": { "command": "npx",
"args": ["-y", "@agentdeskai/browser-tools-mcp@latest"] } } }// claude_desktop_config.json
{ "mcpServers": { "browser-tools": { "command": "npx",
"args": ["-y", "@agentdeskai/browser-tools-mcp@latest"] } } }Is BrowserTools MCP safe?
Is BrowserTools MCP safe to use?
BrowserTools MCP grades C (usable with care). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. Past advisories were fixed slowly, so stay on the latest release. It runs locally over stdio, so it acts with your machine's access.
Does BrowserTools MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does BrowserTools MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Browser & Web Automation
- A Apify MCP ServerOfficial Apify server to find and run thousands of ready-made scrapers and automation Actors, then read their results.
- C Chrome DevTools MCPLet an agent drive and debug a live Chrome with DevTools, including performance traces, network, console, screenshots, and scripts.
- C Playwright MCPDrive a real browser to navigate, click, fill, and extract via MCP.
- C browser-use MCPLLM-oriented browser automation with a high-level action API.
Embed this badge
[](https://trustedmcp.io/servers/browser-tools-mcp)<a href="https://trustedmcp.io/servers/browser-tools-mcp"><img src="https://trustedmcp.io/badge/browser-tools-mcp.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.