Install
$ agentstack add mcp-mantou132-browser4agent ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Browser for AI Agent
[English](./README.md) | [中文](./README.zh-CN.md)
[](https://chromewebstore.google.com/detail/cddjomjjojijahpjngcfebapepdecaff) [](https://microsoftedge.microsoft.com/addons/detail/kgofhkkibnooojbchfppjblmajdcboib) [](https://addons.mozilla.org/firefox/addon/browser4agent@xianqiao.wang) [](https://github.com/mantou132/browser4agent/releases/latest)
A browser extension that lets AI agents read browser tab content and drive the browser.
- Read content — page text, cookies, localStorage, page errors, screenshots, and more.
- Drive the browser — manage tabs and windows from a background script the agent writes itself.
- Run scripts in a tab — agents can write one-off scripts on the fly; complex flows should ship as [page tools](#page-tools) and be called directly.
> ⚠️ Security > - Make sure your AI agent environment is not vulnerable to prompt injection — otherwise an attacker can read your browser data through the extension. > - Only install page tools from sources you trust; a malicious tool can execute arbitrary scripts in your browser.
Page tools
Agents can call tools scoped to the current tab. Two sources:
- Subscribed toolsets — subscribe from the in-extension marketplace (or paste any URL in settings); available tools are filtered by the tab URL.
- Developer-provided — page authors register tools via the [WebMCP][webmcp] API.
[webmcp]: https://webmachinelearning.github.io/webmcp/
Install
- Install the extension from your browser's store (Chrome · Edge · Firefox).
- The welcome page that opens after install walks you through:
- downloading and registering the Native Host,
- optionally wiring up MCP for any of Codex, Claude Code, VS Code, Cursor, and Zed that it detects,
- optionally installing the Skill for those same agents.
> Note: the extension listens on a local port, so if it is installed and active in multiple browsers at the same time, only one of them will work.
Manual install
Prefer not to use a store? Grab extension-chrome.zip or extension-firefox.zip from the latest release, unzip, then load it unpacked:
- Chrome / Edge — open
chrome://extensions, enable Developer mode, click Load unpacked, choose the unzipped folder. - Firefox — open
about:debugging, click Load Temporary Add-on, choosemanifest.jsoninside the unzipped folder.
CLI
After setup, browser4agent is also a one-shot CLI that forwards a single tool call to the running Native Host — handy for shell scripts and quick checks:
browser4agent --tool list_tabs
browser4agent --tool read_tab --input '{"tab_id": 123}'
echo '{"tab_id":123}' | browser4agent --tool read_tab --stdin
browser4agent --tool read_tab --help # inspect a tool's input schema
Build from source
# Browser extension, output in extension/dist/
pnpm -C extension run build --browser=chrome
# Native Host — running the binary with no arguments enters setup mode
cargo run
Load extension/dist/ via Load unpacked above.
Privacy policy
Browser for AI Agent processes browser data only to provide its core MCP browser automation features. Depending on the user's request, the extension may access tab metadata, page content, cookies, localStorage, page errors, screenshots, and toolset configuration. Data is sent only to the local Native Messaging Host and the user-configured MCP client / AI agent. We do not sell user data, use it for advertising, or use it for unrelated purposes. Only connect AI agents you trust, and only install toolsets you trust.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mantou132
- Source: mantou132/browser4agent
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.