io.github.Gwakko/agent-in-browser

What it mainly works on, as our AI model read its tool descriptions: a web browser or desktop applications.

16 of 23 tools are described as changing something (creating, editing, deleting, sending or running).

• browser_closeon 15 other serversdescribed as changing data

  “Close the browser launched by agent-in-browser.”

  Publisher declares: read-only no · open-world yes

  Takes no inputs.

• browser_statuson 8 other serversreads or searches

  “Show the connected browser (launching it if needed), protocol, current tab and open tabs.”

  Publisher declares: read-only yes · open-world yes

  Takes no inputs.

• browsers_installedreads or searches

  “List browsers detected on this machine and whether they can be driven.”

  Publisher declares: read-only yes · open-world yes

  Takes no inputs.

• clickon 27 other serverscontrols a browser or desktopdescribed as changing data

  “Click an element (by ref, selector or visible text) or page coordinates with real mouse events.”

  Publisher declares: read-only no · open-world yes

  8 inputs

  • buttonstring“Mouse button (default left).”
  • doubleboolean“Double-click.”
  • matchstring“Visible text / accessible name to match (case-insensitive substring).”
  • refstring“Element ref from snapshot/find, e.g.”
  • selectorstring“CSS selector (first match).”
  • tabstring“Tab id from tabs_list.”
  • xnumber“Viewport x coordinate (instead of an element).”
  • ynumber“Viewport y coordinate.”
• console_messagesreads or searchesdescribed as changing data

  “Console messages and uncaught errors captured since this server attached to the tab.”

  Publisher declares: read-only yes · open-world yes

  5 inputs

  • clearboolean“Clear the buffer after reading.”
  • levelstring“Only this level (error includes uncaught exceptions).”
  • limitinteger“Last N entries (default 100).”
  • patternstring“Regex the text must match.”
  • tabstring“Tab id from tabs_list.”
• evaluateon 13 other serversruns code or commandsdescribed as changing data

  “Run JavaScript in the page and return the JSON result.”

  Publisher declares: read-only no · open-world yes

  2 inputs, 1 required

  • codestringrequired“JavaScript expression or function body.”
  • tabstring“Tab id from tabs_list.”
• fill_formon 10 other serverscreates or changes datadescribed as changing data

  “Set values of several fields at once (inputs, textareas, selects by value or label, checkboxes/radios with true/false).”

  Publisher declares: read-only no · open-world yes

  2 inputs, 1 required

  • fieldsarrayrequired“Fields to set.”
  • tabstring“Tab id from tabs_list.”
• findon 24 other serversreads or searches

  “Find visible elements whose text, label, placeholder, id or name contains the query.”

  Publisher declares: read-only yes · open-world yes

  3 inputs, 1 required

  • limitinteger“Max results (default 20).”
  • querystringrequired“Text to look for.”
  • tabstring“Tab id from tabs_list.”
• get_texton 15 other serversreads or searches

  “Return the visible text of the page (or of a CSS selector) — good for reading articles, results and messages.”

  Publisher declares: read-only yes · open-world yes

  3 inputs

  • max_charsinteger“Max characters (default 30000).”
  • selectorstring“CSS selector to read (default body).”
  • tabstring“Tab id from tabs_list.”
• hoveron 13 other serverscontrols a browser or desktopdescribed as changing data

  “Move the mouse over an element or coordinates (reveals menus/tooltips).”

  Publisher declares: read-only no · open-world yes

  6 inputs

  • matchstring“Visible text / accessible name to match (case-insensitive substring).”
  • refstring“Element ref from snapshot/find, e.g.”
  • selectorstring“CSS selector (first match).”
  • tabstring“Tab id from tabs_list.”
  • xnumber“Viewport x.”
  • ynumber“Viewport y.”
• navigateon 18 other serverscontrols a browser or desktopdescribed as changing data

  “Navigate the tab to a URL, or go back/forward/reload.”

  Publisher declares: read-only no · open-world yes

  4 inputs

  • actionstring“History action instead of url.”
  • tabstring“Tab id from tabs_list.”
  • timeout_msinteger“Load timeout (default 30000).”
  • urlstring“Destination URL; scheme defaults to https://”
• network_requestsreads or searchesdescribed as changing data

  “Network requests captured since attaching to the tab, with status.”

  Publisher declares: read-only yes · open-world yes

  5 inputs

  • clearboolean“Clear the buffer after reading.”
  • failed_onlyboolean“Only failed requests and HTTP status >= 400.”
  • limitinteger“Last N entries (default 100).”
  • patternstring“Regex the URL must match.”
  • tabstring“Tab id from tabs_list.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.