MCP.Market

Is Vibe MCP — Real Chrome, Remotely MCP server safe?

Yes, with the usual care.

B72/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing
  • highcurl | sh in a script

How Vibe MCP — Real Chrome, Remotely compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 35% of 1,297 Productivity servers

Public scan report

scanner v0.1.10 · 2026-11-02 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan50 source files scanned8/25
  • Live reliabilityremote reachable in 557ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityauth enforced (unknown)9/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (2)

  • highcurl | sh in a scriptinstall.curl-pipe
    dist/ollama.js: … } else { execSync('curl -fsSL https://ollama.com/install.sh | sh', { stdio: 'inherit' }); } …
  • mediumeval / new Function usedexec.eval
    dist/tool-annotations.js: … JavaScript expression through `new Function()` in the * page.…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Vibe MCP — Real Chrome, Remotely does

  • Agent Webbridge
    Drive your real, logged-in Chrome (many profiles, parallel tabs) from any MCP client. Local only.
    A
  • INSSIST
    Drive your own logged-in Instagram session via the INSSIST extension: read, publish, DMs, analytics.
    A
  • DOMShell
    Drive Chrome with filesystem commands (ls, cd, grep, click, type). One MCP tool, multi-agent.
    A

Vibe MCP — Real Chrome, Remotely reviews, tools and install