- Cdpilot @mehmetnadir/cdpilotZero-dependency browser automation over raw CDP — no Puppeteer, Playwright, or Selenium.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.32 GitHub stars.
- Browserbase @mcparmory/browserbaseCreate and control browser sessions for web automation, testing, and AI agent tasks8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.32 GitHub stars.
- INSSIST @inssist/inssist-mcpDrive your own logged-in Instagram session via the INSSIST extension: read, publish, DMs, analytics.21% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.31 GitHub stars.
- Airtable User MCP @automations-project/airtable-user-mcpManage Airtable bases: schema, field CRUD, views, formula validation, extensions7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.31 GitHub stars.
- WhatsApp Web MCP Server @mario-andreschak/mcp-whatsapp-webWhatsApp MCP via web.js or browserless Baileys: messages, media, chats, groups and contacts13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.28 GitHub stars.
- Ghost @northtekdevs/ghostVerified desktop control for agents on Windows and Linux: apps with no API, windows, shell, browser.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.27 GitHub stars.
- Kitewright MCP @kitewright/mcpLightweight browser automation for AI agents: navigate, screenshot, extract, PDF. One small binary.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.23 GitHub stars.
- Hunch @prithviseran/hunchFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.22 GitHub stars.
- Leclerc Drive @skunkobi/leclerc-driveMCP server for E.Leclerc Drive — search products, manage cart, and order groceries from Claude6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.22 GitHub stars.
- Zen @sh6drack/zen-mcpMCP server for Zen Browser automation via WebDriver BiDi6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.22 GitHub stars.
- Desktop Touch @harusame64/desktop-touch-mcpComputer-use MCP for Windows 10/11: 32 tools — screenshot, UIA, Chrome CDP, type/click/scroll, VBA.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.22 GitHub stars.
- PyreCrawl @sanggonboy/pyrecrawlWeb scraping + research toolkit for AI agents: scrape, crawl, monitor URLs with anti-bot bypass.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.20 GitHub stars.
- Lastest @las-team/lastestRun visual regression tests, review diffs, and manage baselines on a Lastest instance.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.20 GitHub stars.
- jev-ultrafast-mcp @jiawei686/jev-ultrafast-mcpHand browser work off to a server-side agent: read the page as a table, act, then verify.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.19 GitHub stars.
- Svipall @ilien/mcpRead any page past its anti-bot wall, crawl sites, search without an API key, solve captchas locally32% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.19 GitHub stars.
- Zenrows @zenrows/zenrows-mcpZenrows MCP server — Fetch, Extract, Batch, and Browser Sessions for AI coding assistants11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.19 GitHub stars.
- Public Browser @silbercue/public-browserChrome over CDP for AI agents. Blind benchmark vs agent-browser: -33% tokens, -33% cost, -32% time4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- DeepSeek Visionary @xlight/deepseek-visionaryDeepSeek web vision model as an MCP server with browser auto-login.18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.18 GitHub stars.
- Browser Gateway @browser-gateway/browser-gatewayAI browser tools with Chrome CDP. Navigate, screenshot, interact. Multi-provider failover.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.18 GitHub stars.
- Tap @leonting1010/tapBrowser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.18 GitHub stars.
- mac-control-mcp @adelelo13/mac-control-mcpNative Swift macOS automation — 153 tools: AX, EventKit, voice, browser DOM, undo.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.16 GitHub stars.
- ELSTER @lukasschwarz/elster-mcp-serverDrive the German tax portal ELSTER via Puppeteer: submit UStVA, prepare EUER/ESt, sync inbox.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Munim Computer Use @munimtechnologies/munim-computer-useAccessibility-first desktop control for any agent: background input, agent pointer, zoom, Chrome.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Aidemo @tandryukha/aidemoNarrated, captioned product-demo MP4 from a storyboard.json; re-renders itself in CI at ~$0.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
