Skip to main content
Glama
115,561 servers. Updated
20 Best Browser Automation MCP Servers: compared and ranked, November 2026Ranked from 5,034 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"MCP server for browser automation via Chrome DevTools" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    MCP server for storing and managing QA workflows, encrypted credentials, and browser test run history. Enables agents to create targets, workflows, and retrieve decrypted credential bundles for test execution.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets AI agents control a real Chrome browser through MCP, with scoped grants, per-site policies, a visible control overlay, an emergency stop, and human confirmation for privilege-raising actions.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to interact with Home Assistant through tiered, human-gated access: free reads and reversible comfort controls, while sensitive actions like locks, alarm, covers, and climate changes require per-operation human approval via Matrix.
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables any agent to drive a dedicated Chromium instance through MCP, including opening and reading pages, taking steps, logging in via a password vault, downloading/uploading files, and replaying saved routines. It also gates sensitive actions behind approvals and can use client certificates or one-time card data for official procedures.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A Model Context Protocol (MCP) server for Chrome Enterprise Premium that exposes DLP rules, content detectors, connector policies, browser telemetry, and license management as MCP tools, enabling any MCP-compatible AI agent to inspect and configure a Chrome Enterprise environment.
    25
    33 npm
    12
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables secure browser automation by letting agents fill Turnkey-stored secrets into web forms without the secret values ever appearing in the conversation, transcript, or model context.
    6 npm
    6
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables local AI agents on macOS to drive the user's own signed-in Chrome through their own isolated tabs, with per-client tokens, blocked site categories, masked secrets and human hand-offs. Agents can open and navigate tabs, read pages, send real clicks and typing, inspect network requests, and hand tabs back to the user, all without touching other tabs or stealing focus.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to control Tor Browser with full anonymity preservation, including navigation, Tor circuit management, and traffic interception.
    22 PyPI
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Read-only observation of a single live URL: parses static HTML to report security posture, forms, links, accessibility signals, and leaks, with described fixes. SSRF-gated and safe, never executes JavaScript.
    123 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server that gives AI agents secure, consent-based access to a single browser tab, supporting read-only snapshots, element interaction with per-action approval, and frozen multi-step plans, all audited.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to drive a self-hosted Chromium through MCP tools for opening pages, reading content, taking screenshots, clicking, filling forms, and triggering final submissions, while a human watches the same browser live and can take over for logins or captchas. Server-side guardrails enforce per-session domain allowlists and denylists, refuse password, payment card, IBAN and one-time-code fields, isolate each token in its own browser context, and route submits, payments and orders through a separate final-action tool that can require human approval.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server that gives AI clients controlled access to a real headless browser with domain allowlisting, SSRF protection, per-session isolation, audit logging, and persistent cookies/state across restarts.
    6 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    This MCP server enables interaction with Google's Verified Access API, allowing users to verify the security posture of Chrome OS and Chrome Browser devices through natural language commands.
    -
  • A
    license
    A
    quality
    F
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    40
    52
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
    58 npm
    35
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.
    1
    MIT No Attribution
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI apps to securely connect to your Chirp home automation, letting you query sensors, control devices, manage automations, view alerts, and more through natural language.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables secure one-time encrypted file and note sharing by encrypting data locally before upload and providing tools for sending, listing, checking, and revoking links.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables coding agents to drive a browser through an authenticated session while being unable to read the credential that created it, by running the browser process under a separate OS user and stripping unsafe code-execution tools. The agent interacts over MCP with a hardened, tool-filtered automation server seeded from a login helper's saved session.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A safety layer and monitoring copilot for AI agents using Splunk MCP, recording tool calls, enforcing policies, and blocking risky actions.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    A remote MCP server that links World ID 4.0 sessions to AI assistants, enabling verified human authentication and tools for claiming Founding Human places, accessing human grants, and interacting with a verified human wall.
    -
  • A
    license
    A
    quality
    A
    maintenance
    Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.
    12
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.
    7
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    MCP server that bridges authenticated sessions from a Chrome extension to CloakBrowser profiles via local WebSocket, enabling agents to sync, verify, and debug persistent login state without exposing raw credentials.
    9
    -