{ "slug": "io-github-browserbase-mcp-server-browserbase", "name": "io.github.browserbase/mcp-server-browserbase", "title": "mcp-server-browserbase", "description": "MCP server for AI web browser automation using Browserbase and Stagehand", "version": "2.1.1", "publishedAt": "2025-09-12T21:10:44.068065Z", "updatedAt": "2025-09-12T21:10:44.068065Z", "repoUrl": "https://github.com/browserbase/mcp-server-browserbase", "websiteUrl": null, "namespace": { "type": "github", "owner": "browserbase" }, "kind": "local", "packages": [ { "registryType": "npm", "identifier": "@browserbasehq/mcp-server-browserbase", "version": "2.1.1", "transport": "stdio", "runtimeHint": null } ], "remotes": [], "envVars": [ { "name": "BROWSERBASE_API_KEY", "isSecret": true, "isRequired": true, "description": "Your Browserbase API key" }, { "name": "BROWSERBASE_PROJECT_ID", "isSecret": false, "isRequired": true, "description": "Your Browserbase Project ID" }, { "name": "GEMINI_API_KEY", "isSecret": true, "isRequired": true, "description": "Your Gemini API key (default model)" } ], "category": "browser", "subcategory": "automation", "company": "browserbase", "categoryAuto": true, "checks": [ { "id": "source-linked", "label": "Source repository linked", "result": "pass", "detail": "https://github.com/browserbase/mcp-server-browserbase" }, { "id": "version-pinned", "label": "Version pinned", "result": "pass", "detail": "Every package has an explicit version" }, { "id": "secrets-requested", "label": "Secrets requested", "result": "info", "detail": "Asks for 2 secrets: BROWSERBASE_API_KEY, GEMINI_API_KEY" }, { "id": "known-registry", "label": "Known package registry", "result": "pass", "detail": "All packages come from npm, PyPI, OCI, NuGet or MCPB" }, { "id": "namespace", "label": "Namespace ownership", "result": "info", "detail": "Name verified via GitHub account browserbase" }, { "id": "meta-text", "label": "Registry text aimed at the AI", "result": "pass", "detail": "Description and settings contain no hidden characters or instructions to the AI" }, { "id": "install-scripts", "label": "Install scripts", "result": "pass", "detail": "@browserbasehq/mcp-server-browserbase@2.1.1 runs nothing at install" }, { "id": "code-flags", "label": "Code red flags", "result": "pass", "detail": "Read 29 files in @browserbasehq/mcp-server-browserbase@2.1.1: no obfuscation, encoded execution, credential reads or data-collection endpoints found" }, { "id": "ai-text", "label": "Text aimed at the AI", "result": "pass", "detail": "No hidden characters or instructions to the AI in 29 files, including comments and the README" } ], "scannedAt": "2026-10-29", "level": "Scanned", "install": [ { "label": "Claude Desktop (npm)", "kind": "claude_desktop_json", "text": "{\n \"mcpServers\": {\n \"mcp-server-browserbase\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@browserbasehq/mcp-server-browserbase@2.1.1\"\n ],\n \"env\": {\n \"BROWSERBASE_API_KEY\": \"\",\n \"BROWSERBASE_PROJECT_ID\": \"\",\n \"GEMINI_API_KEY\": \"\"\n }\n }\n }\n}" } ], "curated": true, "stars": 3397, "archived": true, "pushedAt": "2026-07-20T21:48:14Z", "review": { "package": "@browserbasehq/mcp-server-browserbase", "version": "2.1.1", "at": "2026-10-31", "files": 27, "lines": 2325, "verdict": "pass-with-notes", "summary": "Lets an AI drive a cloud browser hosted by Browserbase: it opens sessions with your Browserbase key, and the pages you visit are read by an AI model (Google Gemini by default) for the act/extract/observe tools. Nothing runs on your computer beyond the server itself, and there is no hidden telemetry. Note that typed secrets (act 'variables') are written to the server log, and if you turn on the optional HTTP mode, add --host 127.0.0.1 because it otherwise listens on every network interface without a password.", "hosts": [ { "host": "api.browserbase.com (Browserbase API via @browserbasehq/sdk and Stagehand)", "when": "on the first tool call that needs a browser session (sessions are created lazily), and in browserbase_session_create / multi_browserbase_stagehand_session_create (sessions.debug)", "sends": "BROWSERBASE_API_KEY, project ID, session settings (viewport, proxies, stealth, context ID, keepAlive), configured cookies, userMetadata {mcp:'true'}" }, { "host": "Browserbase cloud browser (CDP connection set up by Stagehand)", "when": "while a session is open", "sends": "all browser commands: URLs to visit, clicks, typed text and act 'variables' (e.g. passwords)" }, { "host": "LLM provider chosen by modelName (default Google Gemini; OpenAI, Anthropic, Groq, Cerebras possible), reached through the Stagehand dependency", "when": "browserbase_stagehand_act / extract / observe (and _session variants)", "sends": "the instruction text plus page content (DOM/accessibility tree) of the current page, and the model API key" }, { "host": "any website", "when": "browserbase_stagehand_navigate and act", "sends": "fetched by the remote cloud browser, not by the user's machine" } ], "env": [ { "name": "BROWSERBASE_API_KEY", "sent_to": "Browserbase API" }, { "name": "BROWSERBASE_PROJECT_ID", "sent_to": "Browserbase API" }, { "name": "GEMINI_API_KEY (or --modelApiKey)", "sent_to": "the configured LLM provider via Stagehand" } ], "local": "Reads its own ../package.json (program.js:25) and a .env file in the working directory (dotenv, index.js:1-2). Screenshots are kept in memory only. No file writes.", "exec": "None. No child_process, eval or dynamic code loading.", "telemetry": "None in the package code. Sessions are tagged userMetadata {mcp:'true'} at Browserbase (stagehandStore.js:43-45). Any telemetry inside the Stagehand/SDK dependencies was not reviewed.", "tools": [ "multi_browserbase_stagehand_session_create", "multi_browserbase_stagehand_session_list", "multi_browserbase_stagehand_session_close", "multi_browserbase_stagehand_navigate_session", "multi_browserbase_stagehand_act_session", "multi_browserbase_stagehand_extract_session", "multi_browserbase_stagehand_observe_session", "multi_browserbase_stagehand_get_url_session", "browserbase_stagehand_get_all_urls", "browserbase_session_create", "browserbase_session_close", "browserbase_stagehand_navigate", "browserbase_stagehand_act", "browserbase_stagehand_extract", "browserbase_stagehand_observe", "browserbase_screenshot", "browserbase_stagehand_get_url" ], "toolText": "clean (descriptions only steer the model between this server's own single-session and multi-session tools; the 3 MCP prompts are usage guidance; no hidden or invisible text)", "deps": [ "@modelcontextprotocol/sdk", "zod", "dotenv", "commander", "@browserbasehq/stagehand", "@browserbasehq/sdk", "@mcp-ui/server", "playwright-core (types only)" ], "findings": [ { "severity": "note", "at": "dist/context.js:41", "what": "Every tool call's arguments are logged to stderr as JSON, including browserbase_stagehand_act 'variables', which the tool text itself recommends for passwords (act.js:12-15). Secrets typed through act end up in the MCP client's server log." }, { "severity": "note", "at": "dist/transport.js:59", "what": "Optional HTTP mode (--port) calls httpServer.listen(port, host) with host undefined unless --host is given, so Node binds all interfaces, while the docs/config.d.ts say the default is localhost. The /mcp endpoint has no authentication and no Origin/Host check, so anyone on the network could drive the user's Browserbase sessions. Not used in the default stdio mode." }, { "severity": "note", "at": "dist/tools/act.js / extract.js / observe.js", "what": "Page content of every site visited is sent to a third-party LLM (Gemini by default) whenever act/extract/observe run. This is how the product works, but the user should know." }, { "severity": "info", "at": "dist/sessionManager.js:85-89", "what": "Cookies passed with --cookies are injected into the cloud browser, so they are sent to Browserbase." }, { "severity": "info", "at": "dist/tools/session.js:71-75", "what": "Returns an MCP-UI resource named ui://analytics-dashboard/main that iframes the Browserbase live-debugger URL. The name is misleading, but the content is only the session debugger." }, { "severity": "info", "at": "dist/config.js:28-39", "what": "Missing keys are replaced with dummy strings ('dummy-browserbase-api-key') instead of failing fast; harmless." }, { "severity": "info", "at": "dist/mcp/sampling.js", "what": "Dead code: sampling templates are never imported or used." }, { "severity": "info", "at": "index.js:1", "what": "Library entry imports a named export createServer that dist/index.js does not export (it has only a default export), so the programmatic entry is broken. Not a security issue." }, { "severity": "info", "at": "(package)", "what": "package.json was not among the reviewed files; dependencies listed come from the import statements. Line counts use the manifest convention (newline count + 1 per file, i.e. the empty segment after a final newline is counted); every line of every file was read with the Read tool." } ] }, "health": { "score": 10, "parts": { "popularity": 0.6839700477223605, "activity": 0.33, "issues": 0.37037037037037035, "security": 1 }, "fail": 0, "warn": 0, "raw": { "stars": 3397, "forks": 371, "downloads": 792, "hn": { "n": 1, "pts": 2, "t": [ [ "43458346", "Show HN: Browserbase MCP Server – Automate Browsers at Scale in Your Own Cloud", 2, 0, "2025-03-24" ] ] }, "issuesOpen": 34, "issuesClosed": 20, "prsMerged": 79, "commits90": 0, "release": "2026-03-31T01:51:54Z", "pushed": "2026-07-20T21:48:14Z", "growth": null, "growthDays": null, "archived": true }, "at": "2026-10-31T07:42:38.200Z" }, "icon": "/icons/co/browserbase.png" }