Agent360 Browser MCP

What tools does Agent360 Browser MCP expose? (40)

Taken from the project's README — the server itself was not queried, so check its docs for the exact schemas.

• browser_navigateNavigate to URL (reuses tab, or `new_tab=true`). On "Leave site?" it answers Stay and says so (`beforeunload-blocked`); `leave_page=true` leaves; an armed `browser_handle_dialog` answers instead of either
• browser_get_page_contentGet page text or HTML
• browser_screenshotScreenshot via Chrome Debugger (works even when tab isn't focused; a covered window answers `window-covered`)
• browser_execute_scriptRun JavaScript in the page's own context, through the Chrome debugger (CSP-strict sites too)
• browser_extract_listRead the rows of a long/virtualised list by scrolling its container until no new rows appear; scrolls with real wheel events in the active tab, so feeds that load on wheel (Threads, X) load; in a hidden page (a background tab) a list that l
• browser_clickClick via CSS or text selector (`text=Submit`, `button:text(Next)`); a text selector looks in an open modal dialog first, and it answers `covered` instead of clicking when the mouse would not reach the target
• browser_fillFill input fields (works on CSP-strict sites); with a text selector, nothing is typed (`covered`) when the mouse would not reach the field
• browser_press_keyKeyboard events (Enter, Tab, Escape, modifiers). With ctrl or meta: a, c, x, v, z, y are sent as Chrome's select all, copy, cut, paste, undo, redo commands
• browser_scrollScroll to element or by pixels
• browser_waitWait for element to appear
• browser_hoverHover for tooltips/dropdowns; answers `covered` when the mouse would not reach it
• browser_select_optionNative `` + custom dropdowns (Angular Material, React Select); a custom trigger or option the mouse would not reach is not clicked (`covered`)
• browser_set_comboboxAutocomplete/combobox: type query → wait for filtered listbox → click option (multi-value chip support). Use when `browser_select_option` fails on lazy-rendered options
• browser_set_dateRobust date inputs: tries native value-set → masked typing → calendar-picker navigation (MUI/AntD/react-datepicker/Lexical). Use when `browser_fill` fails on date fields
• browser_dismiss_overlaysBulk-dismiss popups/modals/tooltips/banners via aria-label/text/×-char heuristics. `non_critical` mode preserves dialogs with form data
• browser_handle_dialogAccept/dismiss native alert/confirm/prompt/"Leave site?" dialogs: answers one the extension saw open, or arms for the next (one that opened before anything listened cannot be answered from here)
• browser_double_clickTrue double-click (two trusted press/release pairs); answers `covered` when the mouse would not reach it
• browser_right_clickRight-click to open page-level context menus; answers `covered` when the mouse would not reach it
• browser_click_xyEscape hatch: click at raw viewport coordinates (CSS pixels) with trusted mouse events
• browser_reattach_debuggerRecovery: force-detach and re-attach the Chrome debugger on the current tab
• browser_list_tabsList session's tabs only
• browser_switch_tabSwitch to tab by ID; Chrome stays where it is unless `bring_to_front: true`
• browser_close_tabClose tab (session-owned only)
• browser_get_new_tabGet most recently opened tab (OAuth popups)
• browser_list_framesList iframes on page
• browser_select_frameRun JavaScript in a specific iframe, also one from another site, through the Chrome debugger
• browser_fetchHTTPS request from the extension (bypasses the page's CORS and CSP), without your browser cookies (none are sent, none are stored) - pass a token in headers; plain http only to 127.0.0.1
• browser_wait_for_networkWait for specific API call to complete
• browser_extract_tokenOpen a known provider's API page and get instructions for finding or creating the token there (9 providers, below); it reads nothing itself
• browser_solve_captchaDetect CAPTCHAs and work through them one step per call. Auto-detects reCAPTCHA v2/v3, hCaptcha, Turnstile, FunCaptcha. Actions: `detect`, `click_checkbox` (tries the reCAPTCHA checkbox), `click_grid` (clicks the reCAPTCHA cells you choose;
• browser_ask_userAsk you to act or answer: a small card you can drag aside while you log in or solve a CAPTCHA, or a dialog with fields for a 2FA code. The page can see what you type into it, so it is for secrets that belong to that page. It needs a page th
• browser_get_cookiesGet cookies for a site this session has open
• browser_set_cookiesSet cookies for a domain
• browser_get_local_storageRead localStorage from page
• browser_set_local_storageWrite localStorage values
• browser_console_logsCapture console.log/warn/error messages from page
• browser_upload_fileUpload files to `` via Chrome Debugger API (no dialog). Needs "Allow access to file URLs" for the Agent360 Browser MCP extension, which is off by default for Chrome Web Store installs and also lets the extension open any local file as a pag
• browser_drop_fileUpload via drop-zones: uses the target if it is a file input, then a hidden `` inside it; with none it clicks the target and intercepts the native file chooser. Other file inputs on the page do not get the file. The answer describes the inp
• browser_provide_feedbackSelf-check + report in one call. Compares the connected extension against this server and detects more than one Browser MCP extension connected at once, also the same extension connected more than once (for instance from several Chrome prof
• browser_aboutProject info + pre-filled links to submit a wish, use-case, or bug. From 1.31 it also lists the Browser MCP installations connected to the chat: the profile name from the popup, the installation id and the version

What the code can do

Read from the published package source — never executed. Parsed 7 of 7 source files.

This server can run other programs on your machine, read and write files and execute code it builds at runtime.

• Runs other programsImports Node's child_process module, which starts other programs on your machine with your user's permissions.
• Reads and writes filesImports Node's fs module. Nothing in the package limits this to a particular folder — scoping is whatever you configure when you launch it.
• Executes code built at runtimeUses eval, new Function or the vm module, so some of what it runs is assembled while it runs rather than being visible in the published source.
• Makes network requestsOpens network connections or calls fetch, so data it handles can leave your machine and it can pull data in.
• Reads environment variablesReads process.env. That is how it picks up the API keys you configure — and it is not restricted to only those variables.
• Reads system informationImports os or v8 to read machine details such as hostname, platform or home directory.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

• Last commit 1 day ago — Actively maintained.
• 59 GitHub stars — Community adoption signal.
• 645 weekly downloads — Regularly installed by other developers.

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

• Maintenance30%100%

  Last commit 1 day ago.

• Adoption20%60%

  59 stars, 645 weekly downloads.

• Transparency20%100%

  4/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✓ discoverable tool list.

• Provenance15%100%

  Package and registry entry point at the same repository.

• Packaging15%100%

  Publishes a pinned version (1.30.3).

Excerpt — the full document is on GitHub.

Maintain Agent360 Browser MCP? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

[![Agent360 Browser MCP on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/io-github-agent360dk-browser-mcp)](https://mcp-skills-hub.vercel.app/mcps/io-github-agent360dk-browser-mcp)