# @weavetab/mcp The open automation engine for AI agents. Control live browsers and desktop apps locally with instant execution. - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 2.5.1 - **Author:** fy2ne - **License:** AGPL-3.0-only - **npm:** @weavetab/mcp - **Source:** https://github.com/Weavetab/mcp - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** warnings - **Scanned:** 2026-10-19T19:17:40.828Z - **Version scanned:** 2.5.1 - **CVEs:** none found by OSV at scan time ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `browser_map` — Snapshot interactive DOM with volatile ref IDs that invalidate after DOM mutations. For complex SPAs (e.g. GitHub dashboards), use `scope` or `query` to reduce - `browser_navigate` — Navigate to a URL or launch/focus a configured Electron app. - `browser_click` — Click a DOM element. Use browser_canvas for charts/canvas. If stuck_warning=true, stop and use browser_map. Pass mark: N to click a numbered element from browse - `browser_type` — Type text into an input field or currently focused element. If id/selector/label is omitted, automatically types directly into document.activeElement without ne - `browser_type_secret` — Inject a secret from an environment variable. - `browser_key` — Press a keyboard key. - `browser_scroll` — Scroll the page. - `browser_dialog` — Accept or dismiss JS dialogs (alert, confirm, prompt). Browser sessions only. - `browser_burst` - `browser_tabs` — Manage browser and Electron app tabs/windows (open, switch, close, list). Specify 'app' when targeting desktop apps (e.g. app: 'discord') to avoid opening web b - `browser_wait` — Pause until a condition is met. - `browser_captcha` — Autonomous CAPTCHA detection and solving. - `browser_thoughts` — Agent-to-user communication. Renders in the middle down of the page. Use 'question' mode to ask a free-text question. Use 'feedback' mode to provide status upda - `browser_pointer` — Advanced pointer control (hover, click, double_click, drag_and_drop, hover_chain). Use hover_chain for Photoshop/Photopea, Figma, and multi-level flyout submenu - `browser_select` — Select an option from a native dropdown or custom UI dropdown. - `browser_fill` — Smart multi-field form-filling and input inspector. Call with scan:true (or empty) to get a lightweight list of all editable inputs on the page without dumping - `browser_highlight` — Highlight elements on page. Supports single or multiple candidates (refs) with styles ('consideration' for candidate evaluation, 'target' for lock-on, 'danger' - `browser_upload` — Upload files to a file input. - `browser_find` — Instant text & keyword search across page text, labels, and placeholders. Returns matched element coordinates, selectors, and ref IDs. - `browser_storage` — Manage localStorage and sessionStorage. - `browser_network_intercept` — Intercept/stub network responses (e.g. mock APIs) OR retrieve captured network telemetry: per-request TLS/SSL certificate details (when the connection exposes t - `browser_console` — 1-5ms latency. Read or clear buffered console API messages, JS exceptions, and network errors. - `browser_pdf` — Print the current page to a PDF file. - `browser_eval` — Run arbitrary JS via CDP. Good for extracting app state. Cannot traverse shadow DOM/cross-origin iframes. - `browser_cookies` — Manage browser cookies. - `browser_canvas` — For ALL canvas content (charts, games, graphs). Use 'get_image' to read pixels, 'draw' to simulate gestures. Do NOT use browser_click here. - `browser_scrape` — Sub-5ms latency, zero waste extraction. Best for batch list extraction, table parsing, targeted data mining. Prefer this over browser_map for pure data extracti - `browser_snapshot` — Capture or restore an MHTML snapshot. Best for offline archival, replay testing, and compliance audits. - `browser_screenshot` — 95-135ms capture. Best for visual layout validation, canvas/image inspection. For multimodal models only. Text-only models should use browser_map or browser_can - `browser_viewport` — Set viewport dimensions and device emulation (device presets, geolocation, locale, timezone, color scheme, touch, orientation). - `browser_clipboard` — Read or write to the system clipboard. - `browser_inspect` — 15-35ms latency, zero waste. Deep DOM inspection. Useful for debugging failed clicks, verifying z-index & visibility, or computed styles. - `browser_extract_design` — Extract design tokens (colors, typography, spacing, shadows, CSS variables), semantic HTML layouts, and clean CSS into structured files and an LLM design bluepr - `browser_automation` — Inject self-running background script for monitoring/polling. Cleared on tab close. Don't use persistent scripts for expensive ops. - `browser_recording` — Record video screencast for compliance/audit. Compiles captured frames into video/animation (.webp, .gif, .webm, .mp4). - `browser_detect` — CRITICAL INITIALIZATION TOOL. Detect available browsers and configured desktop apps (Discord, Slack, etc.). Call this FIRST before interacting with the environm - `browser_performance` — Retrieve page performance metrics: Core Web Vitals (FCP, LCP, CLS, INP, TTFB), JS heap memory, navigation timing, slowest resources, and raw CDP counters. - `browser_pattern_learn` — Read, register, update, and record execution outcomes for named workflow patterns and site quirks in ~/.weavetab-system/memory/sites/. Use action='get' at sessi - `browser_office` - `browser_emulate` — Emulate browser conditions over CDP: network throttling (Slow 3G, Fast 3G, 4G, Offline), CPU throttling rate, Geolocation coordinates, Timezone, and User Agent ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@weavetab/mcp\"\n ]\n }\n }\n}" ``` ## Blast radius Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs commands; runs on your machine. - Floor 45, ceiling 73 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40weavetab%2Fmcp - Install plan: https://forgeregistry.com/api/v1/packages/%40weavetab%2Fmcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40weavetab%2Fmcp - HTML page: https://forgeregistry.com/registry/%40weavetab%2Fmcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.