Browser automation MCP servers

A server here drives a real web browser to navigate, click and fill in forms.

Not here: extracting pages without a browser.

577servers
159 remote418 localTagged by Odel's AI, which can make mistakes

Best fit

420 made for this, ranked by starsRemoteLocal
  1. Browser Automation @dataleadspro/browser-automationProgrammatic headless browser sessions: create, interact, browse, and extract - rendered in a real10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Real Estate Listings @dataleadspro/real-estate-listingsPull property listings, prices, and details from real-estate sites as structured JSON.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. ZeroDOM @devhusnainai/zerodomDeterministic DOM perception for AppSec red teams and AI agents: live Chrome, attack-surface scans.16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  4. Browserless @pipeworx-io/browserlessBrowserless MCP — wraps the Browserless headless-Chromium REST API (browserless.io)6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Ridealong @williamblaismedia-create/ridealongWatch your AI drive a real Chrome live, point, approve, or take the wheel from your phone.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. KitchenSink4Web @kitchensink4ai/kitchensink4webBrowser MCP server: budgeted page reads, honest unread accounting, structured extraction.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. Loadster @loadster/loadster-mcpLoad testing and synthetic monitoring platform: test with Playwright, Browser Bot, or Protocol Bots.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  8. Snapsurf @zumerlab/snapsurfWeb navigation and verification for AI agents: page digest, typed diff per action, assertions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. Pillowfort private rooms @slee1996/pillowfortPrivate encrypted rooms for agents and people to invite, chat, draw, and play. Local and hosted MCP.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  10. WrapGuard MCP @yuni9959/wrapguard-mcpDetect unnatural Korean and English mid-word wrapping in responsive web pages.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. Render — a real browser for agents @rodromer/render-mcpHosted browser for AI agents: screenshots, post-JS DOM, console, WCAG. No install, no API key.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. EditItAll @subcue/edititall-mcpDrive EditItAll's local in-browser editors: PDF, sheet, photo, vector, Word, slides.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Puppetflow @puppetflow/mcpBuild, run, monitor, and control Puppetflow browser automations from AI clients.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  14. Melaya @melaya/melayaCreate and run any AI agents systems from 6k+ tools. Give your AI hands access to your Android.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. Blackbook Protocol Advisor @koynlabs/blackbook-advisorPurchaser-gated MCP for Vault, HMRC TRS, 95/5 equity, and Companies House PSC.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. ClassDojo Classroom MCP @eason0in/classdojo-mcpUnofficial local-first MCP for ClassDojo roster imports and classroom skill synchronization.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. BrowserTap MCP @linvireo/browsertap-mcpMCP server that drives the real Chrome you already use, through an extension and CDP.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. Web Research @csoai-org/web-research-mcpAI-powered web research MCP server for agents. Supports web search, browse page, extract...12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  19. Nexus Browser @paipaipai666/nexus-browser-mcpEvent-driven deterministic browser MCP: HITL gates, audit, console/network/perf observability.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  20. Chrome DevTools MCP @async23/chrome-devtools-mcpMCP server for Chrome DevTools10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  21. uxlint @uxlint-net/uxlintAudit a site's UX the way a design-literate reviewer would, with a concrete fix for every finding.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. FineData @quality-network/finedata-mcpFineData web scraping MCP — JavaScript rendering, captcha solving, markdown for AI agents16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  23. Argus @pochtmanr/argusDrive Argus anti-detect browser profiles: isolated identities with their own fingerprint and proxy.22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  24. BRYG @flexiblepackage/brygDrives a real Chromium browser: navigate, click, type, read pages, OCR, QR, network capture7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.