@roveapi/mcp

MCPcommunitylive
v1.10.0UnknownMITUpdated 1d agonpmGitHub

MCP server for Rove browser automation API — use from Claude, Cursor, VS Code

Endpoint healthlive
checked 13h ago · 148ms
100% of the last 1 check reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
242Downloads/wk
1d agoLast update
Reads these credentials
  • ROVE_API_KEYAPI keyoptional

    Your Rove API key (optional — use the authenticate tool to sign up interactively)

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
AuthorUnknown
LicenseMIT
Version1.10.0
Sourcenpm+mcp-registry
Trust Status
C
40/100Caution
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
—Static analysis · clean+0/20
→ Suspicious install scripts or obfuscated code detected
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface31 tools · 1 privileged
Security scan⚠ Warnings (1)v1.10.0 · todayHow well does this scan work?
PROMPTtool:create_viewer_grantExfiltration-shaped instruction
EvalsNone
IndexedOct 14, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

31 tools · 1 privileged · 1 flagged for injection
Statically extracted from the published packagev1.10.0 · 13h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

buy_creditsWithout arguments: shows Rove credit prices and whether this key may buy. With item_id: buys that credit pack and may charge the account owner's saved card, or returns a payment link for a person, within limits the owner set. Pass the same idempotency_key when retrying the same purchase. Without id…

Without arguments: shows Rove credit prices and whether this key may buy. With item_id: buys that credit pack and may charge the account owner's saved card, or returns a payment link for a person, within limits the owner set. Pass the same idempotency_key when retrying the same purchase. Without id…

No input schema was published for this tool.

get_credit_catalogueShows Rove credit packs, subscription tiers and what an action or supervised minute costs. Never buys.

Shows Rove credit packs, subscription tiers and what an action or supervised minute costs. Never buys.

No input schema was published for this tool.

get_credit_balanceShows this account's credits, exact to the millicredit, and whether this key may buy more and within what limits.

Shows this account's credits, exact to the millicredit, and whether this key may buy more and within what limits.

No input schema was published for this tool.

get_purchaseShows one purchase this key made and what to do next (for example, a payment link for a person).

Shows one purchase this key made and what to do next (for example, a payment link for a person).

No input schema was published for this tool.

list_purchasesLists purchases this key made, newest first.

Lists purchases this key made, newest first.

No input schema was published for this tool.

cancel_purchaseCancels an unpaid purchase this key made, so its payment link stops working.

Cancels an unpaid purchase this key made, so its payment link stops working.

No input schema was published for this tool.

simulate_purchaseTest keys only: moves a simulated purchase to paid, expired, failed or needs-authentication. Never charges.

Test keys only: moves a simulated purchase to paid, expired, failed or needs-authentication. Never charges.

No input schema was published for this tool.

navigateNavigate to a URL in a hosted Chromium browser and return the page title and final URL after redirects. Creates a new browser session automatically if no session_id is provided. Use this as the first step in any browser automation workflow. Use stealth mode when visiting public websites that may bl…

Navigate to a URL in a hosted Chromium browser and return the page title and final URL after redirects. Creates a new browser session automatically if no session_id is provided. Use this as the first step in any browser automation workflow. Use stealth mode when visiting public websites that may bl…

No input schema was published for this tool.

interactPerform a click or fill action on a page element in an active browser session. Use "click" to click buttons, links, checkboxes, or any clickable element by CSS selector. Use "fill" to type text into input fields, textareas, or contenteditable elements — pass the target CSS selector and the text val…

Perform a click or fill action on a page element in an active browser session. Use "click" to click buttons, links, checkboxes, or any clickable element by CSS selector. Use "fill" to type text into input fields, textareas, or contenteditable elements — pass the target CSS selector and the text val…

No input schema was published for this tool.

extract_schemaExtract structured data from a web page according to a JSON schema. Navigates to the given URL, renders the page in a headless browser, and returns data matching your schema definition. Use this instead of navigate + get_a11y_tree when you need specific structured fields (e.g. product name, price,…

Extract structured data from a web page according to a JSON schema. Navigates to the given URL, renders the page in a headless browser, and returns data matching your schema definition. Use this instead of navigate + get_a11y_tree when you need specific structured fields (e.g. product name, price,…

No input schema was published for this tool.

screenshotCapture a PNG screenshot of a web page. Operates in two modes: (1) Pass a session_id to screenshot the current page in an active session — use this when you need to see the visual state after interactions. (2) Pass a url without session_id to take a one-shot screenshot without creating a persistent…

Capture a PNG screenshot of a web page. Operates in two modes: (1) Pass a session_id to screenshot the current page in an active session — use this when you need to see the visual state after interactions. (2) Pass a url without session_id to take a one-shot screenshot without creating a persistent…

No input schema was published for this tool.

get_a11y_treeGet a structured accessibility tree snapshot of the current page in an active browser session. Returns a hierarchical representation of all visible elements including their roles, names, values, and states — similar to what a screen reader sees. Use this as the primary way to read page content, as…

Get a structured accessibility tree snapshot of the current page in an active browser session. Returns a hierarchical representation of all visible elements including their roles, names, values, and states — similar to what a screen reader sees. Use this as the primary way to read page content, as…

No input schema was published for this tool.

close_sessionClose a browser session and release its server-side resources (browser context, memory, and any open pages). Call this when you are done with a browser session to free resources and avoid hitting session limits. If the closed session is the currently active session, the internal session reference i…

Close a browser session and release its server-side resources (browser context, memory, and any open pages). Call this when you are done with a browser session to free resources and avoid hitting session limits. If the closed session is the currently active session, the internal session reference i…

No input schema was published for this tool.

clickClick an element on the page by CSS selector, accessible label or a11y tree ref. Use this to interact with buttons, links, checkboxes, and other clickable elements. In a supervised session, a click that opens a popup makes the popup the current page.

Click an element on the page by CSS selector, accessible label or a11y tree ref. Use this to interact with buttons, links, checkboxes, and other clickable elements. In a supervised session, a click that opens a popup makes the popup the current page.

No input schema was published for this tool.

fillType text into a form field. By default clears any existing value first, then types the new value.

Type text into a form field. By default clears any existing value first, then types the new value.

No input schema was published for this tool.

get_textExtract the text content of an element on the page. Useful for reading specific values like prices, headings, or status messages.

Extract the text content of an element on the page. Useful for reading specific values like prices, headings, or status messages.

No input schema was published for this tool.

scrollScroll the page in a given direction, or scroll a specific scrollable element. Useful for loading lazy content or reaching elements below the fold.

Scroll the page in a given direction, or scroll a specific scrollable element. Useful for loading lazy content or reaching elements below the fold.

No input schema was published for this tool.

evaluateExecute arbitrary JavaScript in the browser page context. Returns the result of the expression. Use for advanced DOM queries, custom extraction logic, or page manipulation.

Execute arbitrary JavaScript in the browser page context. Returns the result of the expression. Use for advanced DOM queries, custom extraction logic, or page manipulation.

No input schema was published for this tool.

list_pagesList the pages open in this session's browser, with page ids, opener, URL, title and status, and which page is current. Popups the page opened appear here. Does not count as a fresh observation.

List the pages open in this session's browser, with page ids, opener, URL, title and status, and which page is current. Popups the page opened appear here. Does not count as a fresh observation.

No input schema was published for this tool.

switch_pageMake another open page current. Later actions without page_id run on it, and in a supervised session the viewer shows it.

Make another open page current. Later actions without page_id run on it, and in a supervised session the viewer shows it.

No input schema was published for this tool.

close_pageClose an open page. If it was current, the session returns to the page that was current when it opened. The last open page cannot be closed.

Close an open page. If it was current, the session returns to the page that was current when it opened. The last open page cannot be closed.

No input schema was published for this tool.

wait_for_popupWait for a popup opened by your last navigate, click, fill, scroll or evaluate, even one that has already opened, and return its page_id. In a supervised session the popup becomes current. In other sessions, call switch_page or pass page_id. A popup Rove blocks answers popup-blocked at once instead…

Wait for a popup opened by your last navigate, click, fill, scroll or evaluate, even one that has already opened, and return its page_id. In a supervised session the popup becomes current. In other sessions, call switch_page or pass page_id. A popup Rove blocks answers popup-blocked at once instead…

No input schema was published for this tool.

list_historyList the pages this API key's supervised browser profile visited, newest first, across sessions: URL, title, time, session id and whether the agent or a human held control. Sign-in callback codes and tokens are never stored. To reopen an entry, navigate to its url.

List the pages this API key's supervised browser profile visited, newest first, across sessions: URL, title, time, session id and whether the agent or a human held control. Sign-in callback codes and tokens are never stored. To reopen an entry, navigate to its url.

No input schema was published for this tool.

restore_pagesAnswer a supervised session's restore offer. When the previous session on this profile ended unexpectedly (crash, hang or restart), list_pages and the session status carry restore.available and the pages that were open; nothing reopens until you choose. restore reopens them (each through the target…

Answer a supervised session's restore offer. When the previous session on this profile ended unexpectedly (crash, hang or restart), list_pages and the session status carry restore.available and the pages that were open; nothing reopens until you choose. restore reopens them (each through the target…

No input schema was published for this tool.

clear_historyDelete this API key's supervised browsing history. Cookies, storage and open-pages restore are kept. Refused (profile-busy) while a supervised session on this key is running.

Delete this API key's supervised browsing history. Cookies, storage and open-pages restore are kept. Refused (profile-busy) while a supervised session on this key is running.

No input schema was published for this tool.

delete_profileprivilegedDelete this API key's whole supervised browser profile: cookies, storage, history and any restore offer. The next session starts signed out. Refused (profile-busy) while a supervised session on this key is running.

Delete this API key's whole supervised browser profile: cookies, storage, history and any restore offer. The next session starts signed out. Refused (profile-busy) while a supervised session on this key is running.

No input schema was published for this tool.

list_sessionsShow the current active browser session for this MCP connection, including its URL, page title, and expiry.

Show the current active browser session for this MCP connection, including its URL, page title, and expiry.

No input schema was published for this tool.

start_supervised_sessionExplicitly create a supervised browser session. Human viewer input is exclusive while control is held; after handback the agent must obtain a fresh observation before mutating again. viewport_mode defaults to follow-human; use fixed when the page layout must stay at the agent viewport.

Explicitly create a supervised browser session. Human viewer input is exclusive while control is held; after handback the agent must obtain a fresh observation before mutating again. viewport_mode defaults to follow-human; use fixed when the page layout must stay at the agent viewport.

No input schema was published for this tool.

create_viewer_grantinjection riskCreate a one-time, origin-bound viewer link for the active supervised session. Give viewer_url to the human operator (one click opens that session). Never send target credentials through chat.

Create a one-time, origin-bound viewer link for the active supervised session. Give viewer_url to the human operator (one click opens that session). Never send target credentials through chat.

INJECTIONExfiltration-shaped instructionck opens that session). Never send target credentials through chat.

No input schema was published for this tool.

authenticateAuthenticate with a verified email and obtain a live API key. Required when no key is configured and when the configured key starts with rvp_test_, because test keys cannot allocate supervised browser streams.

Authenticate with a verified email and obtain a live API key. Required when no key is configured and when the configured key starts with rvp_test_, because test keys cannot allocate supervised browser streams.

No input schema was published for this tool.

account_infoNo description published

This tool published no description. Forge does not invent one.

30 of 31 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for Rove browser automation API — use from Claude, Cursor, VS Code

Keywords
mcpbrowserautomationplaywrighta11yclaudecursor
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-14 — observed resolution, not a publisher declaration.

60 packages resolved · 1 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+42 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in browser automation & scraping