selenium-mcp-server

Provides an MCP server that lets an MCP client (e.g., Cursor) control web browsers via Selenium WebDriver, exposing tools for navigation, interaction, waiting, screenshots, and extracting page information like an accessibility snapshot.

Evaluated Apr 04, 2026 (16d ago)
Repo ↗ Automation mcp selenium browser-automation llm cursor webdriver
⚙ Agent Friendliness
56
/ 100
Can an agent use this?
🔒 Security
25
/ 100
Is it safe for agents?
⚡ Reliability
25
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
70
Documentation
75
Error Messages
0
Auth Simplicity
95
Rate Limits
0

🔒 Security

TLS Enforcement
30
Auth Strength
10
Scope Granularity
10
Dep. Hygiene
45
Secret Handling
40

MCP server access control is not documented; without authentication/authorization, any party that can reach the process could potentially drive a browser and perform actions like visiting arbitrary URLs. The README does not describe secret handling practices, sandboxing, or safeguards against prompt-driven navigation to sensitive sites. TLS is not meaningfully applicable from the README (no mention of remote endpoints or HTTPS); security likely depends on local execution and network controls. Dependency list suggests typical JS tooling, but no vulnerability/SBOM/SCA info is provided.

⚡ Reliability

Uptime/SLA
0
Version Stability
40
Breaking Changes
30
Error Recovery
30
AF Security Reliability

Best When

You want an agent to drive a real browser with a standardized MCP tool interface and you can manage local/headless browser execution and environment setup.

Avoid When

You need audited security boundaries, centralized auth, or you cannot control what the agent can do within the browser (e.g., arbitrary URL navigation).

Use Cases

  • LLM-assisted browser automation for QA workflows
  • Automated form filling and UI regression checks
  • Scraping page structure/links via accessibility snapshots
  • Generating screenshots for documentation or monitoring
  • CI-driven end-to-end flows using an MCP client

Not For

  • High-security environments requiring strict browser isolation or strong auth controls
  • Financial/PII processing where data exfiltration risk must be minimized
  • Use cases requiring a public REST/HTTP API for integration (it is MCP-first)
  • Deterministic, fully idempotent operations without side effects

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
Yes
SDK
No
Webhooks
No

Authentication

OAuth: No Scopes: No

No authentication mechanism is described for the MCP server. This likely means access control is left to the network/process environment (e.g., local-only usage), not app-level auth.

Pricing

Free tier: No
Requires CC: No

No pricing information provided (appears to be an open-source npm package).

Agent Metadata

Pagination
none
Idempotent
False
Retry Guidance
Not documented

Known Gotchas

  • Tool calls can have side effects in the browser (click/type/navigation), so replays are not inherently safe/idempotent.
  • Agent reliability may depend on dynamic pages and robust use of wait tools; the README lists waits but does not specify retry/backoff behavior.
  • Running with non-headless/visible mode may affect execution speed and test stability; headless/headful differences can break selectors.
  • Browser/environment setup (Java, browser binaries/drivers) is required; misconfiguration may surface as runtime failures rather than structured MCP errors.

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for selenium-mcp-server.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-04-04.

8642
Packages Evaluated
17761
Need Evaluation
586
Need Re-evaluation
Community Powered