Skip to main content
Glama
ironessi

browser-firefox-mcp

by ironessi

browser-firefox-mcp

Security-focused Firefox browser MCP server for penetration testing agents. Built on Playwright with a Python-native API designed for vulnerability scanning, session manipulation, network inspection, and reconnaissance.

Features

  • Firefox-first: Uses Playwright's native Firefox engine for accurate rendering (especially useful for anti-bot detection)

  • Security tooling: XSS payload injection, form enumeration, DOM analysis, sensitive data leak detection

  • Session management: Cookie export/inject, token extraction, storage manipulation

  • Network inspection: Request/response interception and capture via CDP

  • Reconnaissance: Technology stack fingerprinting, framework detection, metadata extraction

  • MCP stdio transport: Works with cyberstrikeai, Claude Code, Cursor, and any MCP-compatible client

Related MCP server: mcp-browser-automation

Quick Start (Kali Linux)

git clone https://your-repo/browser-firefox-mcp.git
cd browser-firefox-mcp
uv venv && source .venv/bin/activate
uv pip install -e .
playwright install firefox
python server.py  # or: browser-firefox-mcp

Integration with cyberstrikeai

Add to your ~/.config/cyberstrikeai/config.json (or equivalent):

{
  "mcp_servers": {
    "firefox-browser": {
      "command": "python",
      "args": ["server.py"],
      "cwd": "/path/to/browser-firefox-mcp"
    }
  }
}

The agent will automatically discover tools: navigate, click, fill, screenshot, inject_payload, scan_forms, capture_network, get_session_info, recon_technology_stack, etc.

Architecture

┌──────────────────┐     JSON-RPC (stdio)     ┌──────────────────┐
│  cyberstrikeai   │ ◄──────────────────────► │     server.py    │
│   (agent)        │                          │ (MCP stdio)      │
└──────────────────┘                          └────────┬─────────┘
                                                       │
                                          ┌────────────▼─────────┐
                                          │  core/ modules        │
                                          │  engine | page        │
                                          │  security | session   │
                                          │  network | recon      │
                                          └────────────┬─────────┘
                                                       │
                                               ┌───────▼───────┐
                                               │ Firefox (headless) │
                                               └─────────────────┘

License

MIT

Install Server
A
license - permissive license
C
quality
B
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

View all related MCP servers

Related MCP Connectors

  • MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

  • Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

  • Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ironessi/browser-firefox-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server