Google Flow Browser MCP
Enables AI agents to drive Google Flow through a real Chrome profile to generate images, videos, characters, and scenes without sharing credentials.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
shaig-mahmudov
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
flow_connectLaunch Chrome with the configured Google profile, connect CDP, navigate to Google Flow, and verify account.
flow_disconnectClose the browser and clean up the MCP connection to Google Flow.
flow_statusCheck current connection status: browser connected, Flow page loaded, account verified, job queue state.
flow_account_checkVerify the logged-in Google account matches the configured expected email (Default).
flow_discover_uiNavigate to a Google Flow page and discover all interactive elements (buttons, inputs, links, headings). Updates the internal selectors map for robust automation.
flow_generate_image⚠️ THESE IMAGES CONSUME CREDITS. By default (auto_confirm=false): fills the prompt, selects model/ratio, takes a screenshot and returns "ready_for_confirmation". Does NOT click Generate. When auto_confirm=true: first verifies the UI is in IMAGE mode (not Video), that the model is an image model, tak…
flow_generate_videoSet up a video generation in Google Flow. Fills prompt, selects Omni Flash or Veo model, configures settings. NOTE: Does NOT click final Generate (paid feature — stops at ready-to-generate).
flow_download_latestDownload the most recently generated file from Google Flow.
flow_create_characterCreate a new character in Google Flow Characters with name and description. By default (auto_confirm not false), fills the description and clicks the submit arrow to actually create the character, then renames "Untitled Character" to the given name.
flow_import_characterImport a character from a saved JSON file into Google Flow.
flow_open_charactersOpen the Characters page for the current/target project and list existing characters.
flow_list_mention_optionsList the images and characters in the current project that can be referenced via "@name" in an image/video prompt (opens Flow's "@" reference popup and reads its options).
flow_create_sceneCreate a new scene in Google Flow Scenes with characters and prompt.
flow_open_tools_galleryOpen the Google Flow Tools Gallery and list available tools.
flow_use_grid_architectOpen Grid Architect in Google Flow, fill theme prompt, shot prompts, engine, ratio, and visual logic settings. Supports batch shot generation for brand campaigns.
flow_use_toolOpen any tool by name in Google Flow and optionally fill its configuration parameters.
flow_screenshotTake a screenshot of the current Google Flow page.
flow_queue_statusCheck the job queue: active job, pending queue, completed and failed job history.
flow_queue_resetForcefully reset the job queue. Use this if a job is permanently stuck in "running" state and blocking other generations.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
PROGRAMFILESPROGRAMFILES(X86)Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
19/19 tools missing one or more hints — flow_connect (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); flow_disconnect (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); flow_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +16 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.9.0 (high), @modelcontextprotocol/sdk@1.9.0 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/shaig-mahmudov/google-flow-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check