Is Ui.Vision MCP server safe?

Yes, with the usual care.

B74/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing

highShell command built from a string (injection risk)

How Ui.Vision MCP compares

Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 74/100; higher than 40% of 866 Scraping and browsing servers
Tools that change things: 29%; typical: 0%. Fewer write tools means less an agent can break

What its tools let an agent do: 12 read · 5 create · 2 change · 1 delete · 1 send or post · 3 run or deploy

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 high

Code scan2 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 2 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

highShell command built from a string (injection risk)exec.shell-concat

uivision-mcp-bridge.js: …$x.ParentProcessId }` const out = execSync(`powershell -NoProfile -NonInteractive -Command "${script.replace(/"/g, '\\"')}"`, { encodi…

Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Other servers that do what Ui.Vision MCP does

Native DevTools
MCP server for desktop, browser (CDP), and Android automation. Screenshot, OCR, click, type.
not reviewed
Established
A
Stealthy Auto Browse
Self-hosted MCP server for stealth browser automation with human-like OS-level input.
not reviewed
Growing
A
GrowBlocks Dev Kit
Build, play-test with screenshots, and ship three.js browser games on GrowBlocks.
5.0(1)
New
A

Ui.Vision MCP reviews, tools and install