Skip to main content
Glama
115,147 servers. Updated
20 Best Browser Automation MCP Servers: compared and ranked, November 2026Ranked from 5,034 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"A guide to developing Chrome extensions" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.
    Apache 2.0
  • F
    license
    Not graded
    quality
    D
    maintenance
    MCP server for storing and managing QA workflows, encrypted credentials, and browser test run history. Enables agents to create targets, workflows, and retrieve decrypted credential bundles for test execution.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.
    -
  • A
    license
    A
    quality
    B
    maintenance
    A Model Context Protocol (MCP) server for Chrome Enterprise Premium that exposes DLP rules, content detectors, connector policies, browser telemetry, and license management as MCP tools, enabling any MCP-compatible AI agent to inspect and configure a Chrome Enterprise environment.
    25
    33 npm
    12
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server that gives AI agents secure, consent-based access to a single browser tab, supporting read-only snapshots, element interaction with per-action approval, and frozen multi-step plans, all audited.
    1
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    This MCP server enables interaction with Google's Verified Access API, allowing users to verify the security posture of Chrome OS and Chrome Browser devices through natural language commands.
    -
  • F
    license
    A
    quality
    A
    maintenance
    An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.
    2
    1
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.
    1 npm
    1
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Claude to list Iceberg tables and run read-only DuckDB SQL queries, including time travel by snapshot, with per-caller token authentication and audit logging.
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Gemmein is the backend for AI-powered products: sign-in, data under seven access rules, AI tools priced in credits, and payments through Stripe, a relay, or RevenueCat. The @gemmein/mcp server gives a coding agent that whole contract as tools: the builder guide, the SDK reference, doc search, rule and error explainers, and check_integration, a live check of an app's access boundaries.
    9
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables agents to sign into websites through a real browser without exposing passwords, keeping cookies in a local Chrome profile and providing tools for browsing and managing authenticated sessions.
    5
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables agents to reuse a human-completed Chrome login session to open confirmed origins, read visible page text, and perform single click, fill, or key press actions without ever handling passwords or exposing cookies.
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A security gate MCP server that audits agent extensions (skills, MCP servers, tools) by scanning for risks, adversarial analysis, and sandbox execution, returning a trust verdict of allow, quarantine, or block.
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to inspect and configure Chrome Enterprise Premium environments, including DLP rules, content detectors, connector policies, browser telemetry, and license management.
    27
    33 npm
    Apache 2.0
  • F
    license
    A
    quality
    B
    maintenance
    MCP server that bridges authenticated sessions from a Chrome extension to CloakBrowser profiles via local WebSocket, enabling agents to sync, verify, and debug persistent login state without exposing raw credentials.
    9
    -
  • A
    license
    A
    quality
    A
    maintenance
    Terminal-native DOM perception layer for AppSec and AI. Hook into live Chrome sessions, compress HTML tokens by 98.9%, and map attack surfaces deterministically.
    40
    295 PyPI
    3
    Apache 2.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI assistants to search agents, triage alerts, review target groups, organizations, and locations, follow scans and tasks, inspect rules and extensions, and—with explicit confirmation—scan or isolate hosts through the Datto EDR API.
    36
    Apache 2.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables an AI agent to drive a real Chrome instance on a hidden Windows desktop, acting on accessibility element references instead of coordinates, with each session isolated on its own private desktop, profile, and ports. Credentials are typed into a masked popup and injected by an origin-bound, DPAPI-encrypted broker, so passwords never reach the model.
    27
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    MCP server for Sitecore that provides tools to interact with Sitecore via GraphQL, Item Service API, and Sitecore PowerShell Extensions, enabling content and security management.
    121
    394 npm
    52
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables local AI agents on macOS to drive the user's own signed-in Chrome through their own isolated tabs, with per-client tokens, blocked site categories, masked secrets and human hand-offs. Agents can open and navigate tabs, read pages, send real clicks and typing, inspect network requests, and hand tabs back to the user, all without touching other tabs or stealing focus.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets AI agents control a real Chrome browser through MCP, with scoped grants, per-site policies, a visible control overlay, an emergency stop, and human confirmation for privilege-raising actions.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to drive many parallel stealth headless Chrome sessions — navigating, clicking, typing, extracting, and screenshotting pages — through MCP tools. Also provides an encrypted credential vault with RFC 6238 TOTP codes, so logins persist and agents can operate unattended without a human at the keyboard.
    Apache 2.0