auto-browser: what it is, how to install & alternatives

by LvcidPsyche · MCP Server · ★ 900

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is auto-browser safe to install? View the security audit →

About auto-browser

Auto Browser Give your AI agent a real browser, with a human in the loop. Auto Browser is an MCP-native browser control plane for authorized workflows. It gives MCP clients, LLM agents, and operators a shared Playwright browser with human takeover, reusable auth profiles, approvals, audit trails, and local-first deployment. Works with: Claude Desktop Cursor any MCP client that can talk HTTP or stdio direct REST callers when you want curl-first control Why Auto Browser MCP-native from day one. The browser surface is already packaged as an MCP server instead of bolted on after the fact. Human takeover when the web gets brittle. noVNC keeps the same live session available when a person needs to step in. Login once, reuse later. Save named auth profiles and reo

How to install auto-browser

git clone https://github.com/LvcidPsyche/auto-browser.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 67/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

ai-agentai-agentsbrowser-automationclaudedockerfastapillmlocal-firstmcpnovnc

Quick Facts

Stars900
Forks152
LanguagePython
CategoryMCP Server
LicenseMIT
Quality Score67.113164815462/100
Open Issues1
Last Updated2026-10-05
Created2026-03-09
Platformsbrowser, claude-code, docker, mcp, python
Est. Tokens~15k

auto-browser alternative? Top 6 similar tools

Looking for a auto-browser alternative? If you're comparing auto-browser with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • sandboxed.sh by Th0rgal · ⭐ 515

    Safe runtime for autonomous on-chain AI agents: isolated sandboxes, Library skills, encrypted secrets.

  • web-agent-protocol by OTA-Tech-AI · ⭐ 509

    🌐Web Agent Protocol (WAP) - Record and replay user interactions in the browser with MCP support

  • CoWork-OS by CoWork-OS · ⭐ 487

    Rent the model. Own everything else. Free, open-source AI app for real work.

  • mcpproxy-go by smart-mcp-proxy · ⭐ 395

    Supercharge AI Agents, Safely

  • omega-memory by omega-memory · ⭐ 220

    Persistent memory for AI coding agents

  • basic-memory by basicmachines-co · ⭐ 4.2k

    AI conversations that actually remember. Never re-explain your project to your AI again. Join our Discord: htt

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

Frequently Asked Questions

What is auto-browser?

auto-browser is Give your AI agent a real browser — with a human in the loop. Open-source MCP-native browser agent.. It is categorized as a MCP Server with 900 GitHub stars.

What programming language is auto-browser written in?

auto-browser is primarily written in Python. It covers topics such as ai-agent, ai-agents, browser-automation.

How do I install or use auto-browser?

The README on GitHub (github.com/LvcidPsyche/auto-browser) gives: git clone https://github.com/LvcidPsyche/auto-browser.git. Usage details are in the same README.

What license does auto-browser use?

auto-browser is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to auto-browser?

The top alternatives to auto-browser on Agent Skills Hub include sandboxed.sh, web-agent-protocol, CoWork-OS. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools