Back to Home
getfoundry icon

unbrowse-mcp

by getfoundry

Overview

Enables AI agents to interact with websites and APIs at a network level, offering faster, more reliable, and cost-effective web automation.

Installation

Run Command
npx unbrowse-mcp

Environment Variables

  • SOLANA_PRIVATE_KEY
  • UNBROWSE_API_KEY
  • UNBROWSE_SESSION_TOKEN
  • SOLANA_RPC_URL
  • UNBROWSE_PASSWORD
  • DEV_MODE
  • ENABLE_INDEX_TOOL
  • SENTRY_DSN
  • PROXY_URL
  • UNBROWSE_API_BASE_URL

Security Notes

The server dynamically executes JavaScript code (`wrapper_code` for abilities and `transform_code` for result processing) using `vm.Script.runInContext`. While `vm.Script` provides a form of isolation, it's not a hardened sandbox for untrusted code, and the context explicitly exposes `process.env`. This means that if malicious code is injected (e.g., through a compromised upstream Unbrowse API or via a crafted `transform_code` parameter), it could potentially read and exfiltrate sensitive environment variables such as `SOLANA_PRIVATE_KEY`, `UNBROWSE_API_KEY`, or `UNBROWSE_PASSWORD`. This constitutes a significant remote code execution and secret exfiltration vulnerability.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2025-12-02

Tags

AI AgentsWeb AutomationAPI IntegrationSolanax402