{"id":"holon-run-webmcp-bridge","name":"webmcp-bridge","homepage":"https://webmcp-bridge.holon.run","repo_url":"https://github.com/holon-run/webmcp-bridge","category":"automation","subcategories":[],"tags":["mcp","webmcp","browser-automation","playwright","agent-tools","stdio","adapters"],"what_it_does":"webmcp-bridge provides a local stdio MCP server that proxies MCP tool calls into a browser session running WebMCP. It prefers native WebMCP via the page’s `navigator.modelContext`, and falls back to injected adapter shims when native WebMCP isn’t available, using Playwright to drive the browser page.","use_cases":["Connect a local MCP client to native WebMCP-capable websites in the same logged-in browser session","Use fallback WebMCP adapters on sites that don’t expose native WebMCP","Enable AI agents to collaborate with humans on the same browser/WebMCP surface (e.g., board demo)","Run integration/contract tests using deterministic fixture adapters"],"not_for":["Unauthorized data collection or bulk scraping","Bypassing access controls, rate limits, or platform restrictions","Credential theft or moving credentials out of the browser session","Automating sites without user authorization or violating site terms"],"best_when":"You want a stable local MCP interface to browser-only WebMCP capabilities while keeping the authenticated browser context and optionally supporting headed collaboration.","avoid_when":"You need a server-to-server API with strong built-in auth guarantees, or you require formal uptime/SLA and enterprise operational guarantees from the provider.","alternatives":["Using a direct native WebMCP connection (when available) without a local bridge","Implementing/using third-party WebMCP adapters only (no bridge) where feasible","Other Playwright-based browser automation bridges to MCP-compatible tool layers","Custom adapter implementations following the WebMCP adapter contract"],"af_score":53.5,"security_score":46.8,"reliability_score":33.8,"package_type":"mcp_server","discovery_source":["github"],"priority":"high","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-03-30T15:31:51.335057+00:00","interface":{"has_rest_api":false,"has_graphql":false,"has_grpc":false,"has_mcp_server":true,"mcp_server_url":null,"has_sdk":false,"sdk_languages":["TypeScript"],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["Browser session authentication (user already logged in)"],"oauth":false,"scopes":false,"notes":"The README states the tool assumes users are already authenticated in the browser session; it also notes it does not implement credential vaulting or auth bypass."},"pricing":{"model":null,"free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":"No pricing information provided in the supplied README/repo metadata."},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":53.5,"security_score":46.8,"reliability_score":33.8,"mcp_server_quality":85.0,"documentation_accuracy":80.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":35.0,"rate_limit_clarity":20.0,"tls_enforcement":60.0,"auth_strength":45.0,"scope_granularity":10.0,"dependency_hygiene":50.0,"secret_handling":70.0,"security_notes":"Strengths: avoids credential vaulting/auth bypass by operating within an authenticated browser session; includes a user-facing use policy discouraging scraping/abuse. Risks/uncertainties: the bridge can automate user-authorized actions and run injected adapters; if misused, it could facilitate unauthorized automation. Details on TLS usage, dependency vulnerabilities, and structured error codes are not provided in the supplied content; scope granularity for tool authorization is not described.","uptime_documented":0.0,"version_stability":40.0,"breaking_changes_history":50.0,"error_recovery":45.0,"idempotency_support":"false","idempotency_notes":null,"pagination_style":"none","retry_guidance_documented":false,"known_agent_gotchas":["Requires Playwright installation and browser binaries (`npx playwright install`) before use.","Assumes authenticated browser session; if auth state is missing/expired, tool calls may fail until the user completes a headed sign-in.","Bridge-managed headless vs headed mode can differ after reattachment; if the site is sensitive to fingerprint/headed/headless switching, use separate profiles.","Session/profile reuse is important: `uxc` links intended to reuse the same daemon/session; running two modes concurrently may not be supported for all sites.","Adapter behavior depends on the target site and the adapter shim; failures may be adapter-specific rather than pure WebMCP failures."]}}