MCP.Market

Weavetab MCP server

by weavetab.dev·dev.weavetab/mcp·v2.5.0·3 stars

Open automation engine for AI agents. Control live browsers and desktop apps locally.

C65/100grade C
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
Growing

3 stars156 downloads/wk

Reviews

Write one

Nobody has reviewed Weavetab yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Weavetab tools (42, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • browser_automation

    Inject self-running background script for monitoring/polling. Cleared on tab close. Don't use persistent scripts for expensive ops.

  • browser_burst

    HIGH-SPEED MULTI-ACTION PIPELINE: Executes 2 or more sequential browser actions in a single round-trip without waiting for LLM turns between steps. PREFER THIS over individual single-action calls (e.g. typing + pressing Enter, filling multiple form fields, clicking tabs/buttons then waiting, searching, navigating + reading) to drastically slash latency and token burn. Supports native primitives (b

  • browser_canvas

    For ALL canvas content (charts, games, graphs). Use 'get_image' to read pixels, 'draw' to simulate gestures. Do NOT use browser_click here.

  • browser_captcha

    Autonomous CAPTCHA detection and solving.

  • browser_checkpoint

    Snapshot and restore browser state (cookies, localStorage, sessionStorage, and scroll/URL) into named checkpoints to time-travel and rollback failed automation branches.

  • browser_click

    Click a DOM element. Use browser_canvas for charts/canvas. If stuck_warning=true, stop and use browser_map. Pass mark: N to click a numbered element from browser_map({ visual: true/"auto" }) without any DOM re-scan.

  • browser_clipboard

    Read or write to the system clipboard.

  • browser_console

    1-5ms latency. Read or clear buffered console API messages, JS exceptions, and network errors.

  • browser_cookies

    Manage browser cookies.

  • browser_detect

    CRITICAL INITIALIZATION TOOL. Detect available browsers and configured desktop apps (Discord, Slack, etc.). Call this FIRST before interacting with the environment to know if apps are online/offline and what tabs they have open.

  • browser_dialog

    Accept or dismiss JS dialogs (alert, confirm, prompt). Browser sessions only.

  • browser_emulate

    Emulate browser conditions over CDP: network throttling (Slow 3G, Fast 3G, 4G, Offline), CPU throttling rate, Geolocation coordinates, Timezone, and User Agent string overrides.

  • browser_evalwrite action

    Run arbitrary JS via CDP. Good for extracting app state. Cannot traverse shadow DOM/cross-origin iframes.

  • browser_extract_design

    Extract design tokens (colors, typography, spacing, shadows, CSS variables), semantic HTML layouts, and clean CSS into structured files and an LLM design blueprint. Ideal for cloning websites, UI components, and design systems with 100% pixel fidelity.

  • browser_fill

    Smart multi-field form-filling and input inspector. Call with scan:true (or empty) to get a lightweight list of all editable inputs on the page without dumping the full DOM. Fill multiple fields in a single turn.

  • browser_find

    Instant text & keyword search across page text, labels, and placeholders. Returns matched element coordinates, selectors, and ref IDs.

  • browser_github

    Interact with GitHub repositories without burning browser turns. Analyze repo trees, read raw source files, search/inspect issues, and examine PR diffs and review comments.

  • browser_highlight

    Highlight elements on page. Supports single or multiple candidates (refs) with styles ('consideration' for candidate evaluation, 'target' for lock-on, 'danger' for destructive actions, 'success', or 'shimmer'), floating badges, and configurable duration.

  • browser_inspect

    15-35ms latency, zero waste. Deep DOM inspection. Useful for debugging failed clicks, verifying z-index & visibility, or computed styles.

  • browser_key

    Press a keyboard key.

  • browser_map

    Snapshot interactive DOM with volatile ref IDs that invalidate after DOM mutations. For complex SPAs (e.g. GitHub dashboards), use `scope` or `query` to reduce tokens. For forms/pagination/sequential loops, ALWAYS use `delta: true` to save 97% tokens. For canvas/WebGL/Figma pages where the DOM has < 5 interactive elements, use `visual: "auto"` to get a numbered screenshot — then use browser_click(

  • browser_navigate

    Navigate to a URL or launch/focus a configured Electron app.

  • browser_network_intercept

    Intercept/stub network responses (e.g. mock APIs, block tracking) OR retrieve detailed raw protocol network telemetry (TLS/SSL certificate info, microsecond timing breakdown, and OS-level failure reasons).

  • browser_office

    Read and extract structured content from office documents (Excel, Word, PDF, CSV). Note: PDF/Word extraction requires local binary dependencies (e.g., poppler) and output is truncated by max_chars/max_rows limits. Two modes: - **url** — fetch a document URL using the browser's live session cookies (works for authenticated downloads, SharePoint, Google Drive exports, etc). Automatically detects for

  • browser_pattern_learn

    Read, register, update, and record execution outcomes for named workflow patterns and site quirks in ~/.weavetab-system/memory/sites/. Use action='get' at session start to inspect a site profile and decide between fast-path replay (reliability ≥ 0.8) or exploratory navigation. Use action='learn' after completing a multi-step flow to persist it. Use action='record_execution' to update reliability s

  • browser_pdf

    Print the current page to a PDF file.

  • browser_performance

    Retrieve page performance metrics.

  • browser_pointer

    Advanced pointer control (hover, click, double_click, drag_and_drop, hover_chain). Use hover_chain for Photoshop/Photopea, Figma, and multi-level flyout submenus.

  • browser_recording

    Record video screencast for compliance/audit. Compiles captured frames into video/animation (.webp, .gif, .webm, .mp4).

  • browser_scrape

    Sub-5ms latency, zero waste extraction. Best for batch list extraction, table parsing, targeted data mining. Prefer this over browser_map for pure data extraction. Note: XPath selectors lack shadow-DOM support; use CSS selectors for shadow DOMs.

  • browser_screenshot

    95-135ms capture. Best for visual layout validation, canvas/image inspection. For multimodal models only. Text-only models should use browser_map or browser_canvas instead.

  • browser_scroll

    Scroll the page.

  • browser_select

    Select an option from a native dropdown.

  • browser_snapshot

    Capture or restore an MHTML snapshot. Best for offline archival, replay testing, and compliance audits.

  • browser_storage

    Manage localStorage and sessionStorage.

  • browser_tabs

    Manage browser and Electron app tabs/windows (open, switch, close, list). Specify 'app' when targeting desktop apps (e.g. app: 'discord') to avoid opening web browser.

  • browser_thoughts

    Agent-to-user communication. Renders in the middle down of the page. Use 'question' mode to ask a free-text question. Use 'feedback' mode to provide status updates, analysis, or decisions. Supports element anchoring (e.g. 'w:15') and presentation styles ('observation', 'decision', 'warning', 'question').

  • browser_type

    Type text into an input field or currently focused element. If id/selector/label is omitted, automatically types directly into document.activeElement without needing a redundant click or browser_map. If target is already focused, skips click to prevent unfocus bugs.

  • browser_type_secret

    Inject a secret from an environment variable.

  • browser_uploadwrite action

    Upload files to a file input.

  • browser_viewport

    Set viewport dimensions and device emulation.

  • browser_wait

    Pause until a condition is met.

Public scan report

scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan278 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/index.js: …" "); try { exec(`npx -y @weavetab/skills@latest ${subArgs}`.trim(), { stdio: "inherit" });…
  • mediumeval / new Function usedexec.eval
    dist/tools/automation.js: …turn; } (async function() { return eval(${JSON.stringify(script)}); })().then(fu…
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Weavetab compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
65/100
higher than 20% of 48,255 servers
Tools
42
the typical server has 7
Tools that change things
5%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
3
more than 80% of 28,688 servers
Downloads a week
156
more than 71% of 12,191 servers with a package

What its tools let an agent do: 40 read · 2 change

Install Weavetab in Claude Code, Cursor or VS Code

Runs npx -y @weavetab/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @weavetab/mcp
Add to Cursor

What the publisher says

From the Weavetab repository's README, as published. We do not edit it. Read it on GitHub

The open automation engine for AI agents.Control live browsers and desktop apps locally with instant execution.

Tool Reference &nbsp;&middot;&nbsp; Documentation &nbsp;&middot;&nbsp; Architecture &nbsp;&middot;&nbsp; Support &nbsp;&middot;&nbsp; Security

Weavetab is the open automation engine for AI agents. It connects models directly to live Chromium browsers and Electron desktop applications via native Chrome DevTools Protocol (CDP) sockets — no WebDriver binaries, no cloud relay, zero telemetry.

Actions execute with sub-10ms latency. Web pages are translated into agent-readable semantic maps with turn-by-turn diffing that reduces token usage by up to 95%. Built-in security enforces local domain policies, role-based access control, and client-side credential injection.

Built and architected by fy2ne.

Why not Playwright or Puppeteer?

The standard approach — Playwright over MCP — works. But it carries fundamental architectural costs that compound at scale.

Architecture

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Weavetab: common questions

Is Weavetab MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the Weavetab safety report
How do I install Weavetab?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Weavetab need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Weavetab maintained?
The last commit was 11 days ago (2026-10-24). The latest release is v2.5.0.
What can I use instead of Weavetab?
Servers from other publishers that do the same job: Mobilerun MCP server.
How does Weavetab compare with other MCP servers?
safety score 65/100 (higher than 20% of 48,255 servers); tools 42 (the typical server has 7); tools that change things 5% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Weavetab

Same job from other publishers: the closest match first, then the best rated.

  • Mobilerun
    Let AI agents control Android and iOS devices on Mobilerun Cloud: screen, input, apps, workflows.
    A