Back to Home
ffffyhffff icon

puppeteer-mcp-server

Verified Safe

by ffffyhffff

Overview

Enables LLMs to perform browser automation, web interaction, and data extraction with anti-detection capabilities.

Installation

Run Command
npx -y @modelcontextprotocol/server-puppeteer

Environment Variables

  • CHROME_PATH
  • PUPPETEER_LAUNCH_OPTIONS
  • ALLOW_DANGEROUS
  • DOCKER_CONTAINER

Security Notes

The server allows executing arbitrary JavaScript code (`puppeteer_evaluate` tool) within the browser's context. While this is a core and expected feature of browser automation, it poses a risk if the input script is untrusted or malformed. Additionally, the `puppeteer_navigate` tool allows navigating to any URL, which could expose the browser to malicious websites. The server does implement validation for dangerous browser launch arguments, requiring explicit opt-in via `ALLOW_DANGEROUS` or `allowDangerous` parameter, which is a good security measure. No direct 'eval' is used within the Node.js server itself. The primary risk stems from the powerful capabilities when fed untrusted inputs, requiring careful consideration of the LLM's output when using this server.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassHigh
Avg Tokens50000
Stars0
Forks0
Last Update2026-01-17

Tags

Browser automationWeb scrapingAnti-detectionLLM toolsPuppeteer