Control Chrome, Android, macOS, and Windows apps via automation APIs from AI agents.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js is vulnerable to RCE in React flight protocol
Authorization Bypass in Next.js Middleware
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Next.js Vulnerable to Denial of Service with Server Components
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
process.env. You'll be asked to provide them before it can run.ADB— Everything up to the session handshake (, APK install, instrumentation, HTTP ready) is validated; this is purely an Android-side accessibility-policy issue on certain devices.ANDROID_HOMEANDROID_MCP_ADB— Users must have adb on PATH or set / $ANDROID_SDK_ROOT. Devices listed by adb devices are detected automatically; multiple devices require select_device first.ANDROID_MCP_APK_LOCAL— Set =/abs/path/to.apk to use a hand-placed APK instead of downloading.ANDROID_MCP_APK_TEST_URLANDROID_MCP_APK_URLANDROID_MCP_CACHE_DIRANDROID_MCP_ENDPOINTANDROID_MCP_FEEDBACK_ENDPOINTANDROID_MCP_FEEDBACK_NO_GHANDROID_MCP_FEEDBACK_REPOANDROID_MCP_FLOWS_DIRANDROID_MCP_LOCAL_PORTANDROID_MCP_PIN_VERSIONANDROID_MCP_REFRESH_LOADERANDROID_MCP_SKIP_UPDATEANDROID_MCP_SQLITE3ANDROID_MCP_U2_PORTANDROID_SDK_ROOT— Users must have adb on PATH or set ANDROID_MCP_ADB / $. Devices listed by adb devices are detected automatically; multiple devices require select_device first.CHROME_BINCHROME_DEBUG_HOSTCHROME_DEBUG_PORTCHROME_MCP_CACHE_DIR— /path — override the cache locationCHROME_MCP_ENDPOINTCHROME_MCP_FEEDBACK_ENDPOINTCHROME_MCP_FEEDBACK_NO_GHCHROME_MCP_FEEDBACK_REPOCHROME_MCP_LOCK_DIRCHROME_MCP_NO_AUTOSPAWNCHROME_MCP_PIN_VERSION— 0.2.0 — pin to a specific version, skip update checksCHROME_MCP_REFRESH_LOADERCHROME_MCP_SKIP_UPDATE— 1 — use cached bundle, skip networkCHROME_USER_DATA_DIRCLAUDE_CODE_SESSION_IDGITHUB_FEEDBACK_TOKENMACOS_MCP_CACHE_DIRMACOS_MCP_ENDPOINTMACOS_MCP_FEEDBACK_ENDPOINTMACOS_MCP_FEEDBACK_NO_GHMACOS_MCP_FEEDBACK_REPOMACOS_MCP_FLOWS_DIRMACOS_MCP_FORCE_PREBUILTMACOS_MCP_FORCE_REBUILDMACOS_MCP_HELPERMACOS_MCP_PIN_VERSIONMACOS_MCP_REFRESH_LOADERMACOS_MCP_SKIP_UPDATEORCH_MCP_CACHE_DIRORCH_MCP_CLAUDE_BINORCH_MCP_ENDPOINTORCH_MCP_FEEDBACK_ENDPOINTORCH_MCP_FEEDBACK_NO_GHORCH_MCP_FEEDBACK_REPOORCH_MCP_PIN_VERSIONORCH_MCP_PROJECT_DIRORCH_MCP_REFRESH_LOADERORCH_MCP_SKIP_UPDATEProgramFilesProgramFiles(x86)REFRESH_APKSSTATIC_PORTUIAUTOMATOR2_VERSIONWINDOWS_MCP_CACHE_DIRWINDOWS_MCP_ENDPOINTWINDOWS_MCP_FEEDBACK_ENDPOINTWINDOWS_MCP_FEEDBACK_NO_GHWINDOWS_MCP_FEEDBACK_REPOWINDOWS_MCP_FLOWS_DIRWINDOWS_MCP_HELPERWINDOWS_MCP_PIN_VERSIONWINDOWS_MCP_REFRESH_LOADERWINDOWS_MCP_SANDBOXWINDOWS_MCP_SANDBOX_BUNDLE_URLWINDOWS_MCP_SANDBOX_PAYLOADWINDOWS_MCP_SANDBOX_PROJECTWINDOWS_MCP_SANDBOX_PROJECT_RWWINDOWS_MCP_SANDBOX_WORKSPACEWINDOWS_MCP_SKIP_UPDATE[](https://m8ven.ai/mcp/actuallyroy-chrome-mcp-83r0h9)