Reflex MCP server

Read from the package source without running it. The installed server may list more.

• reflex_actwrite action

  Run a batch of browser steps in one call; stops at the first failure with a forensic report (reason, near-miss candidates, console and network errors, pre-failure page changes). Success returns only what changed, not the full page.

• reflex_auth

  Sign in to Reflex (required before billed calls). Free. login opens the user's browser to sign in and stores the key locally; logout clears it; status shows the signed-in account and credit balance. Tell the user to complete the sign-in in the browser tab that opens.

• reflex_check

  Audit the page: visual defects (overlaps, low contrast, clipped text, broken images) plus recent console errors and failed network requests.

• reflex_evalwrite action

  Run JavaScript in the page and return the result. For reading values back; act already has an eval step for side effects.

• reflex_extract

  Extract complete data from a table, list, or text region that snapshots fold (e.g. '200 rows'), or a captured JSON data feed by its net<id> handle. Output over 6KB is saved to a file and returned as a preview plus path.

• reflex_flow

  Reusable automation: save this session's recorded steps as a flow, run a saved flow (deterministic replay, no page reading needed), list flows, or save auth state (cookies and localStorage) for reflex_open.

• reflex_open

  Open a URL in the local Chrome and return a distilled snapshot with stable element refs like [a3f2].

• reflex_read

  Re-read the current page. Returns only the delta since the last look, '(page unchanged)', or a full snapshot.

• reflex_session

  List or stop parallel browser sessions. Free (no credit). Sessions spawn on demand the first time any tool is called with a new session name; each is a fully isolated browser, safe for concurrent agents.

• reflex_shot

  Screenshot the page or one element. Returns the image and its file path.

• reflex_tab

  List, switch to, or close browser tabs. Popups and target=_blank are followed automatically.

• Code scan5 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenanceno repository listed3/15
• Maintainer identityno repository or website to verify2/10

Safety score

65/100

higher than 20% of 866 Scraping and browsing servers

Tools

11

the typical Scraping and browsing server has 6

Tools that change things

18%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

73

more than 48% of 309 Scraping and browsing servers with a package

Reflex: common questions

Is Reflex MCP server safe?

With care: it is graded C, so read the findings first (65/100). Read the Reflex safety report

How do I install Reflex?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Reflex need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Reflex maintained?

The latest release is v0.4.12.

What can I use instead of Reflex?

Servers from other publishers that do the same job: Agentic Browser MCP server, unbrowser by Unchained MCP server and AIHawk MCP server.

How does Reflex compare with other Scraping and browsing MCP servers?

safety score 65/100 (higher than 20% of 866 Scraping and browsing servers); tools 11 (the typical Scraping and browsing server has 6); tools that change things 18% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.