Skip to main content
Glama
97,619 servers. Updated
20 Best Browser Automation MCP Servers: compared and ranked, October 2026Ranked from 3,678 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information about browser usage or browser use statistics" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables secure browser automation by letting agents fill Turnkey-stored secrets into web forms without the secret values ever appearing in the conversation, transcript, or model context.
    5 npm
    6
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to control Tor Browser with full anonymity preservation, including navigation, Tor circuit management, and traffic interception.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Read-only observation of a single live URL: parses static HTML to report security posture, forms, links, accessibility signals, and leaks, with described fixes. SSRF-gated and safe, never executes JavaScript.
    69 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    An MCP server that gives AI clients controlled access to a real headless browser with domain allowlisting, SSRF protection, per-session isolation, audit logging, and persistent cookies/state across restarts.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables a constrained subagent to perform foreground GUI actions on Hyprland—observing, focusing windows, clicking, typing, scrolling, dragging, and managing the clipboard—under per-action approval with lease, audit log, and kill-switch gating.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Rate-limits MCP tool calls with Upstash Redis, allowing a configurable number of invocations per sliding window and sharing counters across server instances.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to automate macOS desktop GUI applications through a policy-governed MCP proxy over Cua Driver, with fail-closed per-app allowlisting, a hardcoded sensitive-app denylist, an emergency kill-switch, masked audit logging, and self-healing app recovery with durable task journaling.
    2 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables Large Language Models to safely browse and interact with local file systems through secure directory listing, file reading, and content search capabilities. Built with comprehensive security controls and high-performance handling of large directories and files.
    1
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Demonstrates Agent Passport System pre-dispatch authorization by issuing one-use grants and verifying signed authorization envelopes before proxied tool calls reach the upstream server.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables an MCP server to enforce External Verifier Contract authorization before proxied tool calls, allowing or denying requests based on a supplied bundle.
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server demonstrating OAuth 2.1 authentication with Scalekit, enabling per-user identity in MCP tools through JWT verification.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    MCP server for Legit Security that answers questions about security issues, Actions, inventory, posture, and platform usage across one or multiple tenants.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables querying and analyzing Tenable Vulnerability Management audit logs, including activity summaries, API key usage, and anomaly detection through MCP tools.
    6
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to securely use real secrets (API keys, database passwords) by requiring human approval for each release, ensuring secrets never enter the model's context.
    2
    Apache 2.0