Puppeteer MCP Server (sultannaufal/puppeteer-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 40 out of 100, grade D. It declares 16 tools. No publisher has claimed this listing.

Caution

40/100

Puppeteer MCP Server

Item: Puppeteer MCP Server
Rating: 40
Author: M8ven

Self-hosted MCP server for browser automation using Puppeteer, with tools for navigation, screenshots, mouse interactions, cookie management, and multiple transport protocols.

→ sultannaufal/puppeteer-mcp-server · listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

sultannaufal

Source: Glama · also listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 1 credential: API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes16 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

puppeteer_click

Click an element on the page

puppeteer_delete_cookies

Delete cookies from the current page. Useful for logout scenarios, clearing authentication state, and cookie cleanup.

puppeteer_evaluate

Execute JavaScript in the browser console

puppeteer_fill

Fill out an input field

puppeteer_get_cookies

Get cookies from the current page. Useful for reading authentication state, session tokens, and other cookie-based data.

puppeteer_hover

Hover over an element

puppeteer_mouse_click

Click at precise coordinates with mouse button options

puppeteer_mouse_down

Press mouse button down at precise coordinates

puppeteer_mouse_drag

Drag from start coordinates to end coordinates (drag and drop)

puppeteer_mouse_move

Move mouse to precise coordinates on the page

puppeteer_mouse_up

Release mouse button at precise coordinates

puppeteer_mouse_wheel

Scroll mouse wheel at precise coordinates

puppeteer_navigate

Navigate to a URL

puppeteer_screenshot

Take a screenshot of the current page or a specific element

puppeteer_select

Select an option from a select element

puppeteer_set_cookies

Set authentication cookies for the current page. Supports session tokens, JWT, OAuth, and other auth cookies with security features.

// known CVEs in dependencies3 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.22.0GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.22.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.22.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

lowjoi@17.13.3GHSA-q7cg-457f-vx79

joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

lowuuid@9.0.1GHSA-w5hq-g745-h8pq

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretAPI_KEYecho "=your-secure-api-key-here" > .env

configBROWSER_RESTART_THRESHOLD

configBROWSER_TIMEOUTBrowser operation timeout (ms) 30000 ❌

configCORS_ORIGIN

configHEALTH_CHECK_ENABLED

configHEALTH_CHECK_PATH

configHOSTServer host 0.0.0.0 ❌

configLOG_FORMAT

configLOG_LEVELLogging level (error, warn, info, debug) info ❌

configMAX_CONCURRENT_PAGES

configMAX_PAGES_PER_SESSION

configMEMORY_LIMIT_MB

configMETRICS_ENABLED

configMETRICS_PATH

configPAGE_CLEANUP_INTERVAL

configPUPPETEER_EXECUTABLE_PATH/usr/bin/chromium

configPUPPETEER_LAUNCH_OPTIONS{"headless":true,"args":["--no-sandbox","--disable-setuid-sandbox"]}

configPUPPETEER_SKIP_CHROMIUM_DOWNLOAD

configRATE_LIMIT_MAXMax requests per window 100 ❌

configRATE_LIMIT_WINDOW

configSCREENSHOT_BINARY_URL_TTL

configSCREENSHOT_CLEANUP_INTERVAL

configSCREENSHOT_DEFAULT_HEIGHT

configSCREENSHOT_DEFAULT_WIDTH

configSCREENSHOT_ENABLE_BINARY_SERVING

configSCREENSHOT_MAX_HEIGHT

configSCREENSHOT_MAX_WIDTH

configSCREENSHOT_QUALITY

configSESSION_TIMEOUT

Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.

deployPORT

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

16/16 tools missing one or more hints — puppeteer_click (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); puppeteer_delete_cookies (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); puppeteer_evaluate (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +13 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.22.0 (high), @modelcontextprotocol/sdk@1.22.0 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/sultannaufal/puppeteer-mcp-server?variant=verified)](https://m8ven.ai/mcp/sultannaufal/puppeteer-mcp-server)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: db0bcec93ad8b4349a0ec9eb8b8f122c4b256e11

code hash: d05426c702f320a9e62097a6a28d005f07f8df4726d349af7a3469803c842afb

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client