# browsermesh Local isolated multi-session browser runtime for external MCP clients - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.2.1 - **Author:** BrowserMesh contributors - **License:** Apache-2.0 - **npm:** browsermesh - **Source:** https://github.com/scrollDynasty/multi-agent-browser-mcp - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 4 days ## Security scan - **Status:** clean - **Scanned:** 2026-08-30T17:26:10.005Z - **Version scanned:** 0.2.1 - **CVEs:** none found by OSV at scan time ## Tools 35 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `browser_runtime_info` — Report bounded, read-only BrowserMesh version, launch state, effective configuration, and session counts without launching Chromium. Use this to diagnose setup - `browser_session_create` - `browser_session_list` — List every browser session with its explicit sessionId, lifecycle status, name, and neutral workflow metadata. Use this to recover the correct session for each - `browser_session_get` — Inspect one explicitly addressed browser session. Session names and metadata are workflow labels, not internal AI agents or owners. - `browser_session_close` — Close one explicitly addressed session and release all of its pages and isolated browser context. Close each role/account session when its workflow is complete. - `browser_page_create` — Create an additional page inside one explicitly addressed session. Use it for another tab that must share that session's cookies and storage; use a separate ses - `browser_page_list` — List pages belonging only to the addressed session. Session creation already returns the initial pageId; use this tool to rediscover or inspect all pages in tha - `browser_page_close` — Close one explicitly addressed page in its owning session. Supply both IDs because BrowserMesh has no global current session or page. - `browser_navigate` — Navigate one explicitly addressed page to an absolute HTTP(S) URL. Keep using the sessionId/pageId pair for the intended account or role; navigation never chang - `browser_back` — Navigate backward in the history of one explicitly addressed page without affecting pages or sessions used by other roles. - `browser_forward` — Navigate forward in the history of one explicitly addressed page without affecting other isolated sessions. - `browser_reload` — Reload one explicitly addressed page in its existing isolated session and authentication state. - `browser_get_url` — Read the current URL of one explicitly addressed page. Use the IDs returned for the intended session; there is no global current page. - `browser_get_title` — Read the title of one explicitly addressed page in its owning isolated session. - `browser_snapshot` - `browser_visible_text` — Read visible text from a semantic or CSS locator on one explicitly addressed page. A locator may select the top document or a bounded outer-to-inner semantic if - `browser_observe` - `browser_click` — Click exactly one semantic/CSS locator or short-lived snapshot ref on one explicitly addressed page. A locator may select the top document or a bounded outer-to - `browser_double_click` — Double-click a semantic or CSS locator on one explicitly addressed page. Use this only when the application assigns distinct double-click behavior; the action i - `browser_hover` — Move the pointer over a semantic or CSS locator on one explicitly addressed page. Use this to reveal hover-driven controls or state before inspecting or interac - `browser_focus` — Focus a semantic or CSS locator on one explicitly addressed page without entering a value. Use this for focus-driven UI state or before a separate key action; t - `browser_check` — Ensure a checkbox or radio located semantically or by CSS is checked on one explicitly addressed page. The operation is idempotent, bounded by timeoutMs, and is - `browser_uncheck` — Ensure a checkbox located semantically or by CSS is unchecked on one explicitly addressed page. The operation is idempotent, bounded by timeoutMs, and isolated - `browser_scroll_into_view` — Scroll one semantic or CSS locator into the viewport of an explicitly addressed page. Use this before inspection or interaction when an off-screen target must b - `browser_scroll` — Scroll an explicitly addressed page by bounded integer pixel deltas. Use deltaX for horizontal and deltaY for vertical movement; this typed operation exposes no - `browser_drag_and_drop` — Drag one semantic or CSS-located element onto another on one explicitly addressed page. Source and target are resolved in the same page and session, with bounde - `browser_fill` — Fill a form field located on one explicitly addressed page. The value is entered only in that session; use separate sessions for different identities. - `browser_press` — Press a key on a locator within one explicitly addressed page, preserving deterministic ordering with other operations in that session. A missing or unsuitable - `browser_select_option` — Select an option on one explicitly addressed page using a semantic or CSS locator. A missing or unsuitable select returns OPERATION_TIMEOUT within timeoutMs (10 - `browser_screenshot` — Capture a bounded in-memory PNG screenshot of one explicitly addressed page, either as the viewport/full page or one semantic element optionally reached through - `browser_wait` — Wait for one deterministic passive condition on an explicitly addressed page: an exact/safe-glob URL, domcontentloaded/load state, locator state (optionally thr - `browser_action_and_wait` - `browser_state_save` — Save cookies and supported storage from one explicitly addressed session under a safe logical stateId. Use this only when a later new isolated session should re - `browser_state_list` — List logical saved-state IDs available for optional restoration when creating a new isolated session; state contents and secrets are not returned. - `browser_state_remove` ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"browsermesh\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"browsermesh\"\n ]\n }\n }\n}" ``` ## Blast radius Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: deletes data; runs on your machine. - Floor 37, ceiling 61 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/browsermesh - Install plan: https://forgeregistry.com/api/v1/packages/browsermesh/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/browsermesh - HTML page: https://forgeregistry.com/registry/browsermesh - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.