Run multi-step tasks in a real Chrome browser: persistent environments, live view, human takeover.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://api.webrun.ai/mcp21 tools · 171msbrowser_taskinjection riskExecute a browser automation task in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai). Creates a session, runs the task, and auto-terminates. Best for simple one-off tasks that no saved workflow covers. May navigate, fill forms, and submit data on third-party websites as…Execute a browser automation task in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai). Creates a session, runs the task, and auto-terminates. Best for simple one-off tasks that no saved workflow covers. May navigate, fill forms, and submit data on third-party websites as…
files: Exfiltration-shaped instructionDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /en…| Parameter | Type | Description |
|---|---|---|
| prompt* | string | Task description in natural language |
| startingUrl | string | Optional starting URL |
| maxDuration | number | Max duration in minutes (default: 20, max: 60) |
| outputType | string | Response format (default: text) |
| outputSchema | object | JSON Schema for structured output (required if outputType is structured_json) |
| webhook | object | Webhook configuration for task completion notification |
| secrets | array | Domain-matched secrets [{match, fields}] passed to instance (not stored) |
| environmentId | string | Environment ID for persistent profile session. Use list_environments to find available IDs. Without this, a disposable instance is used. |
| policyId | string | Policy ID to apply automation guardrails (domain restrictions, capability controls, LLM role). Optional. |
| debugC | boolean | Enable debug mode on the instance (default: false) |
| files | array | Optional file IDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /environments/:id/files). M… |
| proxy | object | Proxy configuration. WebRun-managed: { source: "WebRun", country: "GB" }. Custom: { source: "custom", type: "http"|"socks", host, port, username?, password? }.… |
| reach_out_mode | string | Controls proactive chat-platform messages (Telegram/WhatsApp/Slack/Discord/Teams) to bot users on the same environment. Default: "off" — no messages are sent u… |
| model | string | Optional model name or profile key (from global config). Falls back to the configured default. |
| timezone | string | IANA timezone name for the session, e.g. "America/New_York", "Europe/London", "Asia/Tokyo". Date/time-sensitive instructions (e.g. "tomorrow morning", "today",… |
create_sessionCreate a persistent session in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai), for multi-step interactive work. Returns a sessionId for subsequent commands. With an initial task the browser may act on third-party websites immediately. Do NOT use this to run or test a s…Create a persistent session in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai), for multi-step interactive work. Returns a sessionId for subsequent commands. With an initial task the browser may act on third-party websites immediately. Do NOT use this to run or test a s…
| Parameter | Type | Description |
|---|---|---|
| mode | string | Session mode (default: default) |
| task | object | Initial task configuration |
| environmentId | string | Environment ID for persistent profile session. Use list_environments to find available IDs. Without this, a disposable instance is used. |
| policyId | string | Policy ID to apply automation guardrails (domain restrictions, capability controls, LLM role). Optional. |
| debugC | boolean | Enable debug mode on the instance (default: false) |
| proxy | object | Proxy configuration. WebRun-managed: { source: "WebRun", country: "GB" }. Custom: { source: "custom", type: "http"|"socks", host, port, username?, password? }.… |
| reach_out_mode | string | Controls proactive chat-platform messages (Telegram/WhatsApp/Slack/Discord/Teams) to bot users on the same environment. Default: "off" — no messages are sent u… |
| model | string | Optional model name or profile key (from global config). Falls back to the configured default. |
| timezone | string | IANA timezone name for the session, e.g. "America/New_York", "Europe/London", "Asia/Tokyo". Date/time-sensitive instructions (e.g. "tomorrow morning", "today",… |
send_taskinjection riskSend a new task to an existing browser session (from create_session). The real Chrome browser may navigate, fill forms, and submit data on third-party websites as the task requires.Send a new task to an existing browser session (from create_session). The real Chrome browser may navigate, fill forms, and submit data on third-party websites as the task requires.
files: Exfiltration-shaped instructionDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /en…| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID from create_session |
| prompt* | string | Task description |
| startingUrl | string | URL to navigate to before starting this task (optional) |
| maxDuration | number | Max duration for this task in minutes (3-60). Defaults to the value the session was created with. |
| maxInputTokens | number | Max input tokens for this task (100-3000000). Defaults to the value the session was created with. |
| maxOutputTokens | number | Max output tokens for this task (100-1000000). Defaults to the value the session was created with. |
| terminateOnCompletion | boolean | Auto-terminate after task (default: false) |
| outputType | string | Response format |
| outputSchema | object | JSON Schema for structured output (required if outputType is structured_json) |
| webhook | object | Webhook configuration |
| secrets | array | Domain-matched secrets [{match, fields}] (not stored) |
| files | array | Optional file IDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /environments/:id/files). M… |
pause_session_taskPause the task currently running in a browser session. Resume it later with resume_session_task.Pause the task currently running in a browser session. Resume it later with resume_session_task.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
resume_session_taskResume a previously paused task in a browser session.Resume a previously paused task in a browser session.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
stop_session_taskCancel the task currently running in a browser session, keeping the session alive for new tasks.Cancel the task currently running in a browser session, keeping the session alive for new tasks.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
terminate_sessionEnd a browser session and free its resources. The session and any running task cannot be resumed afterwards.End a browser session and free its resources. The session and any running task cannot be resumed afterwards.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
guardrail_responseinjection riskRespond to a guardrail trigger when the browser agent needs human input (credentials, clarification, approval). The response is handed to the live agent, which continues acting on it.Respond to a guardrail trigger when the browser agent needs human input (credentials, clarification, approval). The response is handed to the live agent, which continues acting on it.
files: Exfiltration-shaped instructionDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /en…| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
| response | string | Your response/instructions to the agent. Required when newState is 'resume'. |
| newState | string | How to continue: 'resume' (default) provides the requested input and continues the task; 'deny' declines the request (response text optional). |
| files | array | Optional file IDs to attach: ids returned by POST /files/upload, or any file already in one of the user's environment catalogs (GET /environments/:id/files). M… |
get_task_statusCheck the status of a task previously started in a browser session. Use to poll for completion or detect guardrails. Read-only: reports on the task without affecting it.Check the status of a task previously started in a browser session. Use to poll for completion or detect guardrails. Read-only: reports on the task without affecting it.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
| taskId* | string | Task ID to check |
screenshotCapture a screenshot of the current browser page in an active session. Returns the screenshot as an inline image. Read-only.Capture a screenshot of the current browser page in an active session. Returns the screenshot as an inline image. Read-only.
| Parameter | Type | Description |
|---|---|---|
| sessionId* | string | Session ID |
list_sessionsList all active browser sessions for this account. Read-only.List all active browser sessions for this account. Read-only.
No input schema was published for this tool.
list_environmentsList available browser environments (persistent profiles) for this account. Returns environment IDs needed for persistent sessions in browser_task or create_session. Read-only. NOTE: workflows and agents use the connection's environment automatically — you rarely need this tool for those, and shoul…List available browser environments (persistent profiles) for this account. Returns environment IDs needed for persistent sessions in browser_task or create_session. Read-only. NOTE: workflows and agents use the connection's environment automatically — you rarely need this tool for those, and shoul…
No input schema was published for this tool.
list_workflowsList the user's saved workflows (prompt-templated browser automations, docs.webrun.ai). Shows each workflow's title, schedule, {{variables}}, and run stats. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.List the user's saved workflows (prompt-templated browser automations, docs.webrun.ai). Shows each workflow's title, schedule, {{variables}}, and run stats. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.
| Parameter | Type | Description |
|---|---|---|
| scope | string | 'environment' (default when this connection is bound to one) lists workflows deployed to the bound environment; 'all' lists every workflow on the account. |
get_workflowFull detail of one workflow: prompt template, {{variables}} and their defaults, trigger + schedule, run settings (starting URL, timezone, model, proxy, output contract, files), memory state, and any pending logins. Identify by workflowId or exact title. Read-only; proxy credentials are masked.Full detail of one workflow: prompt template, {{variables}} and their defaults, trigger + schedule, run settings (starting URL, timezone, model, proxy, output contract, files), memory state, and any pending logins. Identify by workflowId or exact title. Read-only; proxy credentials are masked.
| Parameter | Type | Description |
|---|---|---|
| workflowId | string | 24-hex workflow id (from list_workflows or create_workflow) |
| title | string | Exact workflow title (case-insensitive) — alternative to workflowId |
create_workflowCreate a new saved workflow. READINESS BAR: if you could not execute the prompt yourself as a human in a browser — which site, which records, which fields, delivered where, matched to each recipient how — it is not ready; first collect the missing business facts from the user (see the TASK INTERVIE…Create a new saved workflow. READINESS BAR: if you could not execute the prompt yourself as a human in a browser — which site, which records, which fields, delivered where, matched to each recipient how — it is not ready; first collect the missing business facts from the user (see the TASK INTERVIE…
| Parameter | Type | Description |
|---|---|---|
| title* | string | Workflow title (shown on the dashboard). |
| promptTemplate* | string | The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every t… |
| shortDescription | string | One-line summary shown in workflow lists. |
| triggerPhrase | string | Natural-language phrase that invokes this workflow in chat. |
| useCaseTags | array | Categorisation tags. |
| department | string | Free-text department label (e.g. "inventory"). |
| trigger | object | How the workflow is meant to be invoked (informational — see notes). Defaults to {type:'manual', source:'manual'}. |
| schedule | object | Saved schedule setting. NOTE: record-only — the workflow does NOT run on a timer until deployed as a scheduled agent (dashboard or Telegram bot). |
| startingUrl | string | Page Chrome opens at the start of each run. Omit to let the prompt decide. |
| timezone | string | IANA timezone for runs of this workflow (e.g. "America/New_York"). Leave unset to follow the proxy country. |
| model | string | Model profile key. Omit for the account default. |
| proxy | object | Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host, port, username?, password?}. Custom passwords are encrypted at rest… |
| outputType | string | Output contract: 'text' (default), 'structured' (JSON matching outputSchema), 'structured_csv' (rows for the outputSchema column names). |
| outputSchema | object | array | JSON Schema object (outputType "structured") or array of column-name strings (outputType "structured_csv"). |
| requiredFiles | array | Per-run file attachments. Each row may name its own environmentId; ownership is enforced per-file at dispatch. |
| deployedPolicyId | string | Policy id to run under (must be owned by you). |
| reachOutMode | string | null | Proactive-chat policy for runs: 'off', 'guardrail_only', or 'full'. Omit (or pass null) to inherit the account default (MCP-initiated runs treat inherit as 'of… |
| memoryEnabled | boolean | Persist per-workflow agent memory across runs (default true). |
| memory | string | The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must al… |
| orchestrateFirst | boolean | Discovery mode: one run gathers the WHOLE work list up front, later runs claim one item each. |
| workListEnabled | boolean | Advanced — set automatically when memoryContract is supplied; leave unset. |
| listType | string | Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset. |
| policyOptedOut | boolean | Opt this workflow out of the environment's default policy. |
| conciergeNotify | string | Where the concierge announces results (e.g. 'Telegram', 'Slack', 'WhatsApp', 'Microsoft Teams', 'concierge'). |
update_workflowUpdate an existing workflow. Supply workflowId plus only the fields to change: prompt, trigger, schedule, run settings, variables, presentation. Object and array fields are replaced whole; pass null to clear an optional field. Renaming via title keeps the slug stable. The stored schedule stays a sa…Update an existing workflow. Supply workflowId plus only the fields to change: prompt, trigger, schedule, run settings, variables, presentation. Object and array fields are replaced whole; pass null to clear an optional field. Renaming via title keeps the slug stable. The stored schedule stays a sa…
| Parameter | Type | Description |
|---|---|---|
| workflowId* | string | 24-hex id of the workflow to update (from list_workflows or create_workflow). Required — the title property here is the NEW title for renames, never an identif… |
| environmentId | string | Move the workflow to a different environment you own. |
| title | string | Workflow title (shown on the dashboard). |
| promptTemplate | string | The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every t… |
| shortDescription | string | One-line summary shown in workflow lists. |
| triggerPhrase | string | Natural-language phrase that invokes this workflow in chat. |
| useCaseTags | array | Categorisation tags. |
| department | string | Free-text department label (e.g. "inventory"). |
| trigger | object | How the workflow is meant to be invoked (informational — see notes). Defaults to {type:'manual', source:'manual'}. |
| schedule | object | Saved schedule setting. NOTE: record-only — the workflow does NOT run on a timer until deployed as a scheduled agent (dashboard or Telegram bot). |
| startingUrl | string | Page Chrome opens at the start of each run. Omit to let the prompt decide. |
| timezone | string | IANA timezone for runs of this workflow (e.g. "America/New_York"). Leave unset to follow the proxy country. |
| model | string | Model profile key. Omit for the account default. |
| proxy | object | Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host, port, username?, password?}. Custom passwords are encrypted at rest… |
| outputType | string | Output contract: 'text' (default), 'structured' (JSON matching outputSchema), 'structured_csv' (rows for the outputSchema column names). |
| outputSchema | object | array | JSON Schema object (outputType "structured") or array of column-name strings (outputType "structured_csv"). |
| requiredFiles | array | Per-run file attachments. Each row may name its own environmentId; ownership is enforced per-file at dispatch. |
| deployedPolicyId | string | Policy id to run under (must be owned by you). |
| reachOutMode | string | null | Proactive-chat policy for runs: 'off', 'guardrail_only', or 'full'. Omit (or pass null) to inherit the account default (MCP-initiated runs treat inherit as 'of… |
| memoryEnabled | boolean | Persist per-workflow agent memory across runs (default true). |
| memory | string | The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must al… |
| orchestrateFirst | boolean | Discovery mode: one run gathers the WHOLE work list up front, later runs claim one item each. |
| workListEnabled | boolean | Advanced — set automatically when memoryContract is supplied; leave unset. |
| listType | string | Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset. |
trigger_workflowRun a workflow now in its deployed environment. This is the ONLY correct way to run or TEST a saved workflow — a run started here carries the workflow's rules, tracking and memory; browser_task/create_session runs do not. When the user says "run it", "run it once", "test it" or "try it" about a wor…Run a workflow now in its deployed environment. This is the ONLY correct way to run or TEST a saved workflow — a run started here carries the workflow's rules, tracking and memory; browser_task/create_session runs do not. When the user says "run it", "run it once", "test it" or "try it" about a wor…
| Parameter | Type | Description |
|---|---|---|
| workflowId | string | 24-hex workflow id |
| title | string | Exact workflow title (case-insensitive) — alternative to workflowId |
| variables | object | Values for the workflow's {{variables}}, keyed by exact variable name. Merged over the workflow's stored variableValues defaults. |
| force | boolean | Work-list workflows only: when the list reports complete, re-open it for a fresh full pass. |
create_agentCreate a scheduled agent — a recurring or one-time automation that runs on a timer in a real Chrome browser. Two modes. WORKFLOW MODE: pass workflowId plus a schedule — the platform copies everything else (prompt, starting URL, output contract, model, proxy, policy, files) from the workflow and bak…Create a scheduled agent — a recurring or one-time automation that runs on a timer in a real Chrome browser. Two modes. WORKFLOW MODE: pass workflowId plus a schedule — the platform copies everything else (prompt, starting URL, output contract, model, proxy, policy, files) from the workflow and bak…
| Parameter | Type | Description |
|---|---|---|
| workflowId | string | WORKFLOW MODE: 24-hex id of the workflow to deploy (from list_workflows). The prompt, starting URL, output contract, model, proxy, policy, and files are all co… |
| schedule* | object | When the agent fires. Required. |
| expiresAt | string | ISO 8601 date-time after which the agent auto-pauses (recurring schedules). |
| name | string | Agent name. Required standalone; defaults to the workflow title in workflow mode. |
| variables | object | WORKFLOW MODE, and only when the workflow's prompt actually contains {{variables}}: values for them, BAKED IN at deploy and reused every run (stored variableVa… |
| prompt | string | STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `… |
| startingUrl | string | STANDALONE MODE: page Chrome opens at the start of each run. |
| proxy | object | STANDALONE MODE (workflow mode inherits the workflow proxy instead): Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host… |
| outputType | string | STANDALONE MODE: output contract (same rules as create_workflow). |
| outputSchema | object | array | STANDALONE MODE: JSON Schema object (structured) or column-name array (structured_csv). |
| memory | string | STANDALONE MODE: the agent's private notebook, shown to it every run and updated automatically after each run. Seed ONLY durable facts the next run must know (… |
| environmentId | string | STANDALONE MODE, rarely needed — OMIT it: the connection-bound environment (or your only one) is applied automatically; never ask the user to choose. Workflow… |
list_agentsList the account's scheduled agents (cron deployments): schedule, status, next/last run, and whether each is standalone or deployed from a workflow. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.List the account's scheduled agents (cron deployments): schedule, status, next/last run, and whether each is standalone or deployed from a workflow. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.
| Parameter | Type | Description |
|---|---|---|
| scope | string | 'environment' (default when bound) lists agents in the bound environment; 'all' lists every agent on the account. |
pause_agentPause an active scheduled agent — it stops firing until resumed. Get agentId from list_agents.Pause an active scheduled agent — it stops firing until resumed. Get agentId from list_agents.
| Parameter | Type | Description |
|---|---|---|
| agentId* | string | 24-hex agent id (from list_agents or create_agent) |
resume_agentResume a paused scheduled agent — recomputes its next run and reactivates it. A completed work-list agent restarts with a fresh full pass. Refuses if the agent's expiry has passed (extend it on the dashboard first).Resume a paused scheduled agent — recomputes its next run and reactivates it. A completed work-list agent restarts with a fresh full pass. Refuses if the agent's expiry has passed (extend it on the dashboard first).
| Parameter | Type | Description |
|---|---|---|
| agentId* | string | 24-hex agent id (from list_agents) |
21 of 21 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Run multi-step tasks in a real Chrome browser: persistent environments, live view, human takeover.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.