BrowserTap MCP server
io.github.LinVireo/browsertap-mcp·v0.4.12MCP server that drives the real Chrome you already use, through an extension and CDP.
0 stars21 downloads/wk
Reviews
Write oneNobody has reviewed BrowserTap MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
BrowserTap MCP tools (55, 7 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
activate_tabcall_extensioncapture_desktop_screenshotCapture the complete visible virtual desktop across all displays and return text metadata plus MCP image content; this is not a background-tab screenshot, save_path only adds a disk copy, and return_base64 is opt-in. width/height/left/top are PHYSICAL screen pixels and are exactly the range mouse_click accepts, unscaled.
capture_page_screenshotcdp_batchwrite actionRun a CDP bridge batch command; pass the full JSON command object as text.
cdp_commandCall one Chrome DevTools Protocol command. session_id accepts client:tabId; tab_id accepts either a native number or the same composite session string.
close_tabsconsole_capture_startconsole_capture_stopcreate_bookmarkwrite actiondebugger_targetsdelete_cookieswrite actiondownload_fileexecute_jswrite actionExecute arbitrary JS in the requested real-browser tab under one total deadline. BTAP pins every monitor/retry/result roundtrip to an explicit session, uses the service-worker/page route first, and falls back to directed Runtime.evaluate on SPA/CSP bridge failures without retargeting. Use wait_for/wait_for_url instead of setTimeout or sleep Promises; BTAP retries only proven-undelivered work, neve
extension_pathGet absolute path to the unpacked Chrome extension directory for manual installation.
get_automation_profileget_bookmarksReturn the browser bookmark tree. Works with no tabs open.
get_console_messagesget_cookiesGet cookies for the current page or specified tab via the Chrome extension bridge.
get_setup_statusReturn component versions, stale-build actions, extension path, bridge ports, and connection status for setup/diagnostics.
handle_dialoghotkeywrite actionSend a hotkey chord like 'command,l' or 'ctrl,shift,p' via the real keyboard.
list_all_tabslist_extensionsList installed browser extensions (id, name, enabled, type, version). Works with no tabs open.
list_tabsList connected tabs across all connected browsers; each tab has a browser field (chrome/edge/opera) and a session id to pass verbatim.
mouse_clickmouse_dragDrag the real mouse from one point to another, both in absolute virtual-desktop PHYSICAL screen pixels (see mouse_click for how that differs from page_drag's CSS pixels). Either endpoint on no display is refused with coordinates_off_screen.
mouse_moveMove the real mouse cursor to absolute virtual-desktop coordinates in PHYSICAL screen pixels (the space pointer_info and capture_desktop_screenshot report, not the CSS pixels page_click takes). A point on no display is refused with coordinates_off_screen rather than clamped to a screen edge.
network_capture_startnetwork_capture_stopopen_new_tabOpen one real-browser tab in the background by default with an operation_id-backed exactly-once create. Pass active=true only when foreground work is genuinely required. If the create ACK is lost, the same operation_id is reconciled within one total deadline; a completed result is registered only with its exact client_id, tab_id, and generation. Before create is dispatched, an unresolved probe ret
open_urlpage_clickpage_dragpage_presspage_typepointer_infoReport the current desktop mouse position and screen geometry in PHYSICAL pixels. screen_width/screen_height are the PRIMARY display only; screen_bounds is the virtual desktop across every display and is the range mouse_click will accept. These are not the CSS pixels the page_* tools take.
remove_bookmarkwrite actionreset_site_permissionsresolve_leave_dialogsave_pdfscan_pagescroll_pageset_automation_profileset_cookiesset_extension_enabledset_site_permissionstorage_getstorage_setswitch_tabtype_textuninstall_extensionupload_fileswrite actionwait_forwait_for_url
Public scan report
scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it
- Code scan19 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 24 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (1)
- mediumeval / new Function used
exec.evalbrowsertap_mcp-0.4.12/src/browsertap_mcp/chrome_extension/background.js: …e))(); } else { try { r = eval(jsCode); if (r instanceof Promise) r = a…
How BrowserTap MCP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 55
- the typical server has 7
- Tools that change things
- 13%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 21
- more than 8% of 12,191 servers with a package
What its tools let an agent do: 40 read · 5 create · 7 change · 2 delete · 1 run or deploy
Install BrowserTap MCP in Claude Code, Cursor or VS Code
claude mcp add browsertap-mcp -- uvx browsertap-mcp
What the publisher says
From the BrowserTap MCP repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.LinVireo/browsertap-mcp -->
browsertap-mcp
English | 中文文档
Usage guide · Troubleshooting · Security · Privacy · Contributing · Changelog
Browser automation for the Chrome, Edge, or Opera you already use. BTAP connects your MCP client to a browser extension, reusing your open tabs and logged-in profile. Your agent can read pages, fill forms, download attachments, and inspect network activity. Page input runs in the selected tab in the background by default, without moving your desktop cursor.
BTAP controls a real browser profile, not a disposable sandbox. Give it access only to accounts and data that the connected agent may use. First-time extension installation is manual; setup and security are below.
Start in 60 seconds
Claude Code and Codex: install the plugin. It includes the MCP server and caller Skills. Install uv first; dependency downloads and the manual browser step can take longer than a minute.
- Add BrowserTap to your agent. Choose your client:
Claude Code:
claude plugin marketplace add LinVireo/browsertap-mcp
claude plugin install browsertap-mcp@browsertapCodex:
codex plugin marketplace add LinVireo/browsertap-mcp
codex plugin add browsertap-mcp@browsertapto call getsetupstatus for the extensionpath. Open chrome://extensions, enable Developer mode, choose Load unpacked**, and select that directory. Use edge://extensions or opera://extensions for those browsers.
- Load the browser extension manually. Open a new agent session and ask it
without navigating or closing it."
- Start a browser task: "List my open tabs, then summarize the page I select
Plugin setup and updates also covers browsertap doctor through the plugin's environment. For Cursor, Claude Desktop and other MCP clients, use the standard MCP installation below. Existing MCP configurations continue to work.
Documentation by audience
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
BrowserTap MCP: common questions
- Is BrowserTap MCP server safe?
- Mostly: it is graded B (82/100). Read the BrowserTap MCP safety report
- How do I install BrowserTap MCP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does BrowserTap MCP need an API key?
- No secret keys are declared. It reads 4 settings from the environment.
- Is BrowserTap MCP maintained?
- The last commit was 27 days ago (2026-10-08). The latest release is v0.4.12.
- How does BrowserTap MCP compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 55 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.