io.github.zraisan/deputy

What it mainly works on, as our AI model read its tool descriptions: a web browser or desktop applications.

14 of 27 tools are described as changing something (creating, editing, deleting, sending or running). For 3 the reading was uncertain, so no mark is shown.

• browser_capabilitiesreads or searches

  “The full contract of every open tab: each form as a typed tool with its JSON Schema (types, allowed values, min/max, required fields), what those fields currently hold, and every button and link with…”

  Publisher declares: read-only yes

  3 inputs

  • actionQuerystring“Only return buttons/links whose label contains this text.”
  • actionLimitnumber“How many actions to return (default 25).”
  • actionOffsetnumber“Skip this many actions, for paging through a long list.”
• browser_invokeruns code or commandsdescribed as changing data

  “Call one of the tools browser_capabilities listed, with arguments matching its inputSchema.”

  3 inputs, 1 required

  • toolstringrequired“Tool name exactly as browser_capabilities reported it.”
  • argsobject“Arguments matching the tool inputSchema.”
  • tabIdnumber
• browser_fillon 10 other serverscreates or changes datadescribed as changing data

  “Set a single field to a value, addressed by the ref browser_capabilities gave it.”

  3 inputs, 2 required

  • refstringrequired“Field ref from browser_capabilities actions, e.g.”
  • valuestringrequired“Value to set.”
  • tabIdnumber
• browser_clickon 30 other serverscontrols a browser or desktopdescribed as changing data

  “Click something browser_capabilities listed under "actions", by its ref.”

  2 inputs, 1 required

  • refstringrequired“Action ref, e.g.”
  • tabIdnumber
• browser_readon 5 other serversreads or searches

  “Return the page as plain text for you to read yourself.”

  Publisher declares: read-only yes

  2 inputs

  • tabIdnumber
  • maxCharsnumber“Cap the returned text (default 6000).”
• browser_navigateon 29 other serverscontrols a browser or desktopdescribed as changing data

  “Point a tab at a URL and wait for it to load, or move through its history with action "back" / "forward", or "reload" it.”

  3 inputs

  • urlstring“Absolute URL to open.”
  • actionstring“Instead of a URL: move through history, or reload.”
  • tabIdnumber
• browser_tabson 11 other serverscontrols a browser or desktopdescribed as changing data

  “Work with browser tabs.”

  3 inputs, 1 required

  • actionstringrequired
  • urlstring“For "open".”
  • tabIdnumber“For "select" and "close".”
• browser_waiton 12 other serversreads or searches

  “Wait until text appears, text disappears, or an element becomes visible — for pages that load content after the fact (search results, spinners, SPAs).”

  5 inputs

  • textstring“Wait until this text is on the page.”
  • textGonestring“Wait until this text is gone (e.g.”
  • selectorstring“Wait until an element matching this CSS selector is visible.”
  • timeoutMsnumber“Give up after this long (default 10000, max 60000).”
  • tabIdnumber
• browser_screenshoton 27 other serversreads or searches

  “Take a screenshot and return the image to you.”

  Publisher declares: read-only yes

  6 inputs

  • fullPageboolean“Capture the whole scrollable page, not just the viewport.”
  • refstring“Capture only this element (a ref from browser_capabilities).”
  • selectorstring“Capture only the first element matching this CSS selector.”
  • formatstring“jpeg (default, small) or png (sharper text, much larger).”
  • maxDimensionnumber“Longest edge in pixels (default 1280).”
  • tabIdnumber
• browser_findon 7 other serversreads or searches

  “Find elements by visible text, role (button, link, textbox, checkbox, combobox, option, heading, tab, menuitem, dialog, img, row, cell) or CSS selector.”

  Publisher declares: read-only yes

  7 inputs

  • textstring“Visible text or accessible name to match (substring, case-insensitive).”
  • rolestring
  • selectorstring
  • exactboolean“Match the whole text exactly.”
  • includeHiddenboolean
  • limitnumber“Default 20.”
  • tabIdnumber
• browser_acton 3 other serverscontrols a browser or desktopdescribed as changing data

  “Do one thing to an element: click, double_click, right_click, hover, focus, type (value; replaces unless append), press (keys like "Enter", "Tab", "Escape", "ArrowDown", "Control+a"; without a target…”

  10 inputs

  • refstring“Element ref from browser_find or browser_capabilities.”
  • selectorstring“CSS selector, if you have no ref.”
  • tabIdnumber
  • actionstring
  • valuestring“Text to type, or the option to select.”
  • keysstring“For press: e.g.”
  • appendboolean“For type: add to the existing text instead of replacing it.”
  • acceptDialogboolean“Accept the confirm/prompt dialog this action opens (dialogs are dismissed by default).”
  • dialogTextstring“With acceptDialog: what to type into a prompt.”
  • stepsarray“Several actions in order, in one call (e.g.”
• browser_scrollon 24 other serverscontrols a browser or desktopdescribed as changing data

  “Scroll the page (or an element) down/up, by pixels, or to top/bottom.”

  8 inputs

  • refstring“Element ref from browser_find or browser_capabilities.”
  • selectorstring“CSS selector, if you have no ref.”
  • tabIdnumber
  • directionstring
  • bynumber“Pixels (default: most of a screen).”
  • tostring
  • untilStableboolean
  • maxRoundsnumber“For untilStable (default 10).”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.