19 deterministic browser tools.
Navigation, interaction, extraction, and an autonomous task loop, all exposed over MCP.
Browser-MCP
An MCP server with a real, sandboxed browser inside. AI agents drive the web while a human can watch live and take over at any moment.
What it is
Browser-MCP is an MCP server with a real browser inside it. A sandboxed Chromium runs in a single container and is exposed to any MCP client as a set of deterministic tools, so AI agents can browse, click, type, and complete tasks on the actual web. And because agents on the open web deserve supervision, a live view lets a human watch everything as it happens and take over the mouse and keyboard at any moment.
Two design decisions make it trustworthy. First, there is no LLM inside the server: it executes browser actions, nothing more, so there is no provider key in the container to leak. Second, credentials never pass through the model. Sessions are persistent and named, so cookies and logins survive restarts, and the agent uses a logged-in session without ever seeing the password that created it.
The result is a browser your agents can use and your security team can approve.
Who it is for
Teams building browser-using AI agents: automation of web tasks, testing, research agents, or any workflow where "the tool has no API" ends the conversation too early.
What it does
Live human takeover.
A JPEG screencast with mouse, keyboard, and IME input, protected by an exclusive takeover lock so agent and human never fight over the controls.
Persistent named sessions.
Cookies and logins survive restarts and never pass through the model.
Real authentication options.
Hashed API keys by default, with an optional OAuth 2.1 resource-server mode.
A minimal attack surface.
A slim container image that ships no interpreter and no source code.
Works with any MCP client.
No LLM in the server means no lock-in to any model or provider.
Under the hood
Built on Deno 2.9 and version 2 of the MCP TypeScript SDK, shipped as one container. Documentation follows the full Diátaxis layout with a software bill of materials, a decision register, and published changelog, security, and contributing guides.
Interested?
If your agents need hands on the web, and you need to keep those hands supervised, this is the tool.