Is Real Browser MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
1 high
- Code scan50 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 7 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatmcp-server/dist/bridge.js: … try { const output = execSync(`lsof -ti :${this.port} -sTCP:LISTEN`, { encoding: 'u…
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Real Browser does
- Browser UseControl a real Chrome browser to complete any task: fill forms, extract data, book flights.not reviewedEstablishedA
- Agent360 Browser MCPDrive your real, logged-in Chrome from any AI agent - 40 tools. Needs our Chrome extension too.not reviewedEstablishedA
Pagerunner — The Browser Layer That LearnsReal Chrome profiles with site intelligence — already logged in, PII anonymization, sessions persistnot reviewedGrowingB