Fantoma MCP server
io.github.Huzy85/fantoma·v0.11.3·7 starsAccessibility-tree browser for AI agents: read pages, log in, extract data, run tasks.
7 stars117 downloads/wk
Reviews
Write oneNobody has reviewed Fantoma yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Fantoma tools (5, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
fantoma_extractfantoma_healthfantoma_loginfantoma_readfantoma_runwrite action
Public scan report
scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it
- Code scan73 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatfantoma-0.11.3/fantoma/cli.py: … monitor_path.exists(): os.system(f"{sys.executable} {monitor_path} --quick"…
How Fantoma compares
Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 74/100
- higher than 40% of 868 Scraping and browsing servers
- Tools
- 5
- the typical Scraping and browsing server has 6
- Tools that change things
- 20%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 7
- more than 77% of 581 Scraping and browsing servers
- Downloads a week
- 117
- more than 61% of 304 Scraping and browsing servers with a package
What its tools let an agent do: 4 read · 1 change
Install Fantoma in Claude Code, Cursor or VS Code
claude mcp add fantoma -- uvx fantoma
What the publisher says
From the Fantoma repository's README, as published. We do not edit it. Read it on GitHub
Fantoma
A stealth browser for AI agents. It reads pages through the accessibility tree, so small local models can drive it. Fantoma sees a page the way a screen reader does, as structured text rather than screenshots, so the model gets words instead of pixels.
<!-- mcp-name: io.github.Huzy85/fantoma --> mcp-name: io.github.Huzy85/fantoma
No vision model, no pixel coordinates, no mouse telemetry. A step costs about 500 tokens instead of the 1,000-5,000 a screenshot costs, which is what makes a small model on your own hardware practical.
What that buys you, and what it does not. Reading pages works on a small local model. In a 31-site run across 9 models, a 35B local MoE scored 30/31, matching the best cheap API models and beating most of them. That run included sites that block conventional scrapers. Multi-step interaction is a different story: the same local model completed 1 of 6 login and form flows, while a frontier API model completed all of them. So extraction on your own hardware is real. For interaction, Fantoma now does the common steps itself (log in, search, pick an option, type into a field, tick a box, add a named item to the cart) and checks the page afterwards, so the model is only asked about what code cannot settle. On GitHub's machines with qwen2.5 7B and 14B, those steps pass with no model action at all (details). Open-ended multi-page flows still need a stronger model. Several jobs need no model at all:
pip install fantoma
fantoma read https://news.ycombinator.com # any page as clean Markdown, no LLMfrom fantoma import Fantoma, Agent
# Read: clean Markdown + every link. No LLM. Hidden text removed.
browser = Fantoma()
browser.start()
page = browser.read("https://example.com/pricing")
page["markdown"], page["links"], page["blocked"] # blocked: "bot_challenge", "login_wall", ... or ""
# Login: code fills the form. No LLM.
browser.login("https://github.com/login", email="me@example.com", password="...")
browser.stop()
# Tool API: drive it step by step from your own agent loop
browser = Fantoma()
state = browser.start("https://news.ycombinator.com")
# state["aria_tree"] → feed to your LLM, get back an action
result = browser.click(3)
browser.stop()
# Agent: describe a task, a local model does it
agent = Agent(llm_url="http://localhost:11434/v1") # Ollama, llama.cpp, vLLM, or any OpenAI-compatible API
result = agent.run("Go to github.com/trending and tell me the top repo")At a glance
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Fantoma: common questions
- Is Fantoma MCP server safe?
- Mostly: it is graded B (74/100). Read the Fantoma safety report
- How do I install Fantoma?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Fantoma need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Fantoma maintained?
- The last commit was 20 days ago (2026-10-13). The latest release is v0.11.3.
- What can I use instead of Fantoma?
- Servers from other publishers that do the same job: Fortress MCP server, AIHawk MCP server and Unbrowse MCP server. Compare all Fantoma alternatives.
- How does Fantoma compare with other Scraping and browsing MCP servers?
- safety score 74/100 (higher than 40% of 868 Scraping and browsing servers); tools 5 (the typical Scraping and browsing server has 6); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Fantoma
Same job from other publishers: the closest match first, then the best rated.
- FortressStealth browser for AI agents: fetch pages behind Cloudflare/DataDome/CAPTCHA, extract clean data.not reviewedEstablishedB
- AIHawkAI browser agent: browses, clicks, types, and reads real web pages from plain-English instructions.not reviewedWidely usedA
- UnbrowseWebsites as APIs: read pages, run site tasks via learned APIs, cloud browser with saved logins.not reviewedEstablishedA
- Browser UseBrowser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.not reviewedEstablishedA
- SkyvernAI-powered browser automation — navigate, click, fill forms, and extract data from any website.not reviewedEstablishedA