No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by steel-dev · MCP Server · ★ 55
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is steel-mcp-server safe to install? View the security audit →
Steel MCP Server Give Claude, Cursor, or any MCP client a real Chrome in the cloud. Read pages that block a plain , fill forms, take screenshots, and hand the browser to a person when a login or a CAPTCHA needs one. The browser is run by Steel. Status: . Download it from Releases. It is not published to npm. is not live yet. Install You need a Steel API key. The free tier is enough to try it. Claude for macOS or Windows Download and open it. Claude installs it and asks for your Steel API key. No Node install is needed. When you replace an installed bundle, quit and reopen Claude after the installer finishes, then start a new conversation so Claude reads the new tool catalog. Claude Code bash claude mcp add steel -e STEELAPIKEY=your-steel-api-
| Stars | 55 |
| Forks | 18 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 60.6896990351441/100 |
| Open Issues | 7 |
| Last Updated | 2026-09-09 |
| Created | 2024-12-05 |
| Platforms | browser, claude-code, cli, mcp, node |
| Est. Tokens | ~13k |
These tools work well together with steel-mcp-server for enhanced workflows:
Explore other popular mcp server tools:
steel-mcp-server is Cloud Chrome for MCP clients. Read pages that block plain fetches, fill forms, take screenshots, and hand the browser to a human when a login needs one.. It is categorized as a MCP Server with 55 GitHub stars.
steel-mcp-server is primarily written in TypeScript. It covers topics such as ai, claude, mcp-server.
You can find installation instructions and usage details in the steel-mcp-server GitHub repository at github.com/steel-dev/steel-mcp-server. The project has 55 stars and 18 forks, indicating an active community.
steel-mcp-server is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: