Browser automation MCP servers

A server here drives a real web browser to navigate, click and fill in forms.

Not here: extracting pages without a browser.

577servers
159 remote418 localTagged by Odel's AI, which can make mistakes

Best fit

420 made for this, ranked by starsRemoteLocal
  1. Oya Browser @oyadotai/oya-browserReal Chrome for agents: start a browser, read pages as numbered markdown, click, type, hand off.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.349 GitHub stars.
  2. Google Surf @harimxchoi/google-surf-mcpWeb, academic and code search with graph RAG, data lineage, ontology and cross-project schema links.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.291 GitHub stars.
  3. gflow-cli @ffroliva/gflow-cliDrive Google Flow from an agent: Veo video and Imagen image generation6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.278 GitHub stars.
  4. OpenBrowser AI @openbrowser/openbrowser-aiAI browser automation. Write async Python to navigate, click, type, and extract data.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.275 GitHub stars.
  5. Safari @achiya-automation/safari-mcpNative Safari browser automation for AI agents — 98 tools, zero Chrome overhead.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.212 GitHub stars.
  6. NotebookLM MCP @roomi-fields/notebooklm-mcpAutomate Google NotebookLM — Q&A with citations, audio, video, content generation6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.193 GitHub stars.
  7. Charlotte @ticktockbent/charlotteRenders web pages into structured, agent-readable representations using headless Chromium.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.181 GitHub stars.
  8. x-use @ihuzaifashoukat/x-useBrowser-native AI agents for X (Twitter): multi-account, MCP-ready, no X API key required.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.171 GitHub stars.
  9. Scrapeless @scrapeless-ai/scrapeless-mcp-serverWeb search, browser automation, scraping, crawling and CAPTCHA solving for AI agents.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.169 GitHub stars.
  10. CloakBrowser MCP @swimmwatch/cloakbrowser-mcpPlaywright MCP-compatible browser automation bridge for CloakBrowser Chromium.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.158 GitHub stars.
  11. BrowserStack MCP @browserstack/mcp-serverBrowserStack's Official MCP Server4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.151 GitHub stars.
  12. One Search @yokingma/one-search-mcpWeb search, URL discovery, scraping & extraction with agent-browser and search providers6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.144 GitHub stars.
  13. Vessel Browser @unmodeled-tyler/vessel-browserAI-native browser runtime for autonomous agents with human-in-the-loop supervision7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.136 GitHub stars.
  14. Native DevTools @sh3ll3x3c/native-devtoolsMCP server for desktop, browser (CDP), and Android automation. Screenshot, OCR, click, type.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.134 GitHub stars.
  15. Uisight @yusufcemres/uisightYour AI sees the screen but can't measure it — measured web UI findings, shared live sessions7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.128 GitHub stars.
  16. Open Computer Use @yambr/open-computer-useGive any LLM its own computer — Docker sandboxes with bash, browser, docs, and sub-agents9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.126 GitHub stars.
  17. Hwatu @hongnoul/hwatuVerification browser for coding agents: headless WebKit, DOM eval, screenshots, pixel-diff.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.115 GitHub stars.
  18. Oxylabs @oxylabs/oxylabs-mcpFetch and process content from specified URLs & sources using the Oxylabs Web Scraper API.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.104 GitHub stars.
  19. Oxylabs @smithery/oxylabs-oxylabs-mcpFetch and process content from specified URLs using the Oxylabs Web Scraper API.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.104 GitHub stars.
  20. Web Browser (kogiQA) @atagon/kogiqa-mcpThis web browser has been designed to help your agent debug and develop complex web applications.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.95 GitHub stars.
  21. gtm-api: LinkedIn MCP Server @gtm-api/linkedin-mcpManaged LinkedIn MCP server for AI agents: search, connect, message and enrich on accounts you own.18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.89 GitHub stars.
  22. Stealthy Auto Browse @psyb0t/stealthy-auto-browseSelf-hosted MCP server for stealth browser automation with human-like OS-level input.35% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.89 GitHub stars.
  23. Secondhand @jlsookiki/secondhand-mcpSearch Facebook Marketplace, eBay, Depop, and Poshmark from AI — filters, photos, full listings.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.86 GitHub stars.
  24. NotebookLM Secure @pantheon-security/notebooklm-mcp-secureSecurity-hardened NotebookLM MCP with post-quantum encryption10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.85 GitHub stars.