mcp-captcha-solver
by Zureyat
Overview
Automated captcha solving for AI agents to bypass various captcha types (text, math, reCAPTCHA, hCaptcha, sliders, etc.) during web automation.
Installation
node index.jsSecurity Notes
The server makes requests to hardcoded external and untrusted HTTP services (e.g., `http://ca.zwhyzzz.top:8092/`) for captcha solving. Communication over HTTP is unencrypted and vulnerable to Man-in-the-Middle attacks, data interception, and tampering. The `captcha_solver.js` userscript, intended for browser integration, requests `GM_xmlhttpRequest` permissions for `*` (any domain), which is overly broad and allows it to send user data to arbitrary, potentially malicious, endpoints. It also prompts users for a 'disclaimer' on first use, a common social engineering tactic. The `Function` constructor is used for evaluating math expressions, posing a potential remote code execution risk if `expression` is not perfectly sanitized. A hardcoded developer tag (`41acabfb0d980a24e6022e89f9c1bfa4`) for the `jfbym` service could be a shared secret.
Similar Servers
Scrapling
Provides adaptive web scraping capabilities to AI chatbots and agents, allowing them to fetch, parse, and extract targeted data from websites, including dynamic content and anti-bot protected sites.
kreuzberg
Extracts text, tables, images, and metadata from a wide range of document formats (PDF, Office, images, HTML, etc.), with support for multiple OCR backends and an extensible plugin system. Can be run as a Micro-Agent Communication Protocol (MCP) server.
mcp-server-browserbase
Enables LLMs to perform cloud browser automation tasks such as navigating, interacting with elements, extracting data, and capturing screenshots on web pages.
mcp
This server provides Hyperbrowser's Model Context Protocol (MCP) interface, offering tools for web scraping, structured data extraction, crawling, and general-purpose browser automation using AI agents like OpenAI's CUA and Anthropic's Claude Computer Use.