Skip to main content
Glama
91,189 servers. Updated
20 Best Browser Automation MCP Servers: compared and ranked, September 2026Ranked from 3,330 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"How to Read the Browser Console" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    A secure email gateway MCP server that protects AI agents from prompt injection attacks by scanning emails for malicious instructions before they reach the agent.
    7
    4
    Apache 2.0
  • A
    license
    B
    quality
    C
    maintenance
    Gives AI assistants hands-on control over Google Play Console and Google Cloud Console using an authorized Google identity. Exposes 95 tools for shipping app builds and release tracks, managing store listings, reviews, in-app products, GCP projects and IAM, Firebase projects and App Distribution, and Cloud Storage or Artifact Registry resources.
    95
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables secure browser automation by letting agents fill Turnkey-stored secrets into web forms without the secret values ever appearing in the conversation, transcript, or model context.
    2 npm
    6
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to control Tor Browser with full anonymity preservation, including navigation, Tor circuit management, and traffic interception.
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to interact with the npm registry, covering package intel, dist-tags, trusted publisher configuration, access and team governance, tokens, security advisories, and publishing, with read-only tools by default.
    3
    23 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Official reference MCP server for A202, the Verifiable Agreement Protocol for Agent-Led Commerce. Gives an agent the seven capabilities two organisations need to buy and sell directly: issue a mandate, check what an agent may do under it, approve an act needing a person, form an agreement, exchange obligations, verify a record by replay, and read the transaction record back.
    7
    4
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A read-only MCP server that enables Claude to audit Firewalla network security configurations and monitor network activity. It provides tools to inspect devices, rules, alarms, and traffic flows without making any changes to the Firewalla system.
    8
    50 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to read live macOS processes and identify monitoring software, including Chinese enterprise EDR/DLP/MDM tools, through a read-only MCP server.
    5
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Investigate fraud directly from Claude, Cursor, or any MCP-compatible client. Analyze suspicious activity with clear, evidence-backed verdicts. Pivot from a single signup to every account sharing the same device, IP address, or email inbox. Check entities against a cross-operator abuse network, review linked accounts, and efficiently process your fraud review queue. Read-only by default, with no r
    10
    89 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Exposes Adobe's User Management API (UMAPI) as MCP tools for listing users, managing product profiles, and assigning or removing Acrobat/PDF licenses in Enterprise organizations.
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to access authenticated websites by reusing your existing browser profile and cookies, so you never share passwords and sessions persist between runs.
    5
    5
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    A read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token.
    5
    -
  • A
    license
    A
    quality
    A
    maintenance
    Answer CTRLRun approvals from your assistant: list the agent actions waiting on a human, inspect one action's full history, and approve, deny or resolve it, plus read receipts, effects and stats. Reads answer without a credential; the three write tools refuse without one that names a person.
    4
    8
    9,119 PyPI
    22
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Read-only attack-path tools for cloud and Kubernetes: list the reachable routes from internet exposure to sensitive assets, explain each hop and the evidence behind it, and simulate a fix before recommending it. Connects to a running PerspectiveGraph engine.
    48
    8
    7
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables agents to sign into websites through a real browser without exposing passwords, keeping cookies in a local Chrome profile and providing tools for browsing and managing authenticated sessions.
    5
    1
    MIT