- Anybrowse @kc23go/anybrowseConverts any URL to clean, LLM-ready Markdown using real Chrome browsers9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
- webEmbedding @jongko54/web-embeddingSource-first URL clone, capture, rebuild, and fidelity verification tools.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
- Apple Safari @mgcrea/mcp-apple-safariRead and act on Safari — history, tabs and reading list, writes off by default7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Yad Agent @holistis/yad-agent-mcpMCP wrapper for Yad, a local browser-automation companion, for coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Lan Direct @farshadmomo/lan-directBrowser MCP: the app under test egresses via the real ISP while the agent stays on the VPN.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- LinkedIn MCP Server @prakharagarwal-dev/linkedin-mcp-serverFind LinkedIn jobs and people, research companies, manage network, posts, and messages with MCP.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
- StudioMeyer Video @studiomeyer/videoVideo production: recording, editing, effects, captions, TTS, screenshots. 8 tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Helmdeck @tosin2013/helmdeckSelf-hosted MCP server: sandboxed browser, desktop, vision, code-edit packs for any agent.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Cws @mikusnuz/cwsMCP server for Chrome Web Store — extension upload, publish, status, and rollout6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Feedthrough @feedthrough/feedthroughDebug bridge inside your web app: an agent reads the DOM, console and network. Any browser.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Zendriver MCP @bituq/zendriver-mcpUndetectable browser automation for LLM agents, spoken over MCP.39% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Pagebolt @custodia-admin/pageboltScreenshots, PDFs, OG images, page inspection, and narrated video recording for Claude and Cursor.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Sniff @aboudjem/sniffQA + a11y scanner: walks your running app's real user flows and reports what's broken.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.4 GitHub stars.
- FourA @foura/mcpReliable web access for AI agents: smart HTTP, rotating proxies, and full-browser rendering.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
- AInotate @dontpayfull/ainotateAnnotated screenshots for AI agents: steps, Skitch-style arrows, boxes, labels, solid redaction.Not assessed yet.Runs on your machine, installed from PyPI.3 GitHub stars.
- MateMCP @vrassouli/matemcpYour agent hit a limit? Keep working. MateMCP securely connects AI chats to your computer via MCP.Not assessed yet.Runs on your machine, installed from a package registry.3 GitHub stars.
- Screen Browser @screenbrowser/screenbrowserNarrated demo and tutorial videos of your web app, from a guide or your coding agent.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
- Prism @tulipe1735/prismComplete web tasks in the user's own Chrome via an observe-decide-act browser agent.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Novada @novadalabs/novada-mcpSearch, extract, crawl, map, research, scrape 16 platforms, browser automation, proxy — one API key.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
- Clickcast @alexkay28/clickcastDrive a real Playwright browser: annotated screenshot + structured page state after every action.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- WebOperator @kazkozdev/weboperatorHands your live Chrome tab to any MCP client — snapshot, navigate, click, type, extract.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- QualityMax QA MCP @quality-max/qmax-mcpLocal QA MCP: scan URLs, inspect pages, generate Playwright repros, and run tests.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- BrowserMesh @scrolldynasty/browsermeshIsolated multi-session Chromium runtime for external MCP clients over stdio.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- Vibe MCP — Real Chrome, Remotely @vibetechnologies/vibe-mcpDrive your real, logged-in Chrome from any MCP client — even from a remote machine, no inbound port.25% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
