@agent360/browser-mcp - npm Package Compare versions

Comparing version 1.23.0 to 1.24.0

extension/manifest.json

 {
   "manifest_version": 3,
   "name": "Agent360 Browser MCP",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "description": "Control your real Chrome from Claude Code — navigate, click, fill, screenshot, solve CAPTCHAs. 34 tools, multi-session.",
@@ -6,0 +6,0 @@ "permissions": [

index.js

@@ -212,3 +212,3 @@ #!/usr/bin/env node
 1. Call browser_solve_captcha() — detects CAPTCHA type on page
-2. If reCAPTCHA v2 checkbox found → call browser_solve_captcha(action="click_checkbox") — auto-clicks, passes ~80% with logged-in Google
+2. If reCAPTCHA v2 checkbox found → call browser_solve_captcha(action="click_checkbox") — auto-clicks; often passes when signed into Google
 3. If image challenge appears → call browser_screenshot, analyze the grid visually, then call browser_solve_captcha(action="click_grid", cells=[2,5,7]) with the correct cell indices
@@ -401,3 +401,3 @@ 4. If all else fails → call browser_solve_captcha(action="ask_human") to show overlay to user
 async function handleExtractToken(args) {
-  const { provider, store_in_vault } = args;
+  const { provider } = args;
   const info = PROVIDER_PAGES[provider];
@@ -415,14 +415,7 @@
   const nav = await sendToExtension('navigate', { url: info.url });
-  const content = [
-    { type: 'text', text: `Navigated to ${info.url} (${nav.title})\n\nInstructions: ${info.instructions}\n\nUse browser_get_page_content or browser_screenshot to find the token, then use browser_execute_script to extract it.` },
-  ];
-
-  if (store_in_vault) {
-    content.push({
-      type: 'text',
-      text: `\nWhen you have the token, POST it to the vault:\ncurl -X POST http://localhost:8000/v1/vault/connect -H "Authorization: Bearer {jwt}" -d '{"provider":"${provider}","token":"{extracted_token}"}'`,
-    });
-  }
-
-  return { content };
+  return {
+    content: [
+      { type: 'text', text: `Navigated to ${info.url} (${nav.title})\n\nInstructions: ${info.instructions}\n\nUse browser_get_page_content or browser_screenshot to find the token, then use browser_execute_script to extract it.` },
+    ],
+  };
 }
@@ -429,0 +422,0 @@

package.json

 {
   "name": "@agent360/browser-mcp",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "description": "Browser MCP — control your real Chrome from Claude Code. 34 tools, CAPTCHA solving, date pickers, autocomplete combobox, overlay dismissal, file upload, multi-session, human-in-the-loop.",
@@ -45,3 +45,7 @@ "mcpName": "io.github.Agent360dk/browser-mcp",
   },
-  "author": "Agent360 <[e-mail]>",
+  "author": {
+    "name": "Agent360",
+    "email": "[e-mail]",
+    "url": "https://agent360.dk"
+  },
   "license": "MIT",
@@ -48,0 +52,0 @@ "homepage": "https://browsermcp.dev",

README.md

@@ -1,2 +0,2 @@
-# Browser MCP by Agent360
+# Browser MCP by [Agent360](https://agent360.dk)
 
@@ -10,8 +10,14 @@ [![npm version](https://img.shields.io/npm/v/@agent360/browser-mcp)](https://www.npmjs.com/package/@agent360/browser-mcp)
 
-**Control your real Chrome from Claude Code — with your logins, cookies, and 2FA.**
+**Your AI agent drives your real, logged-in Chrome — and works where headless tools die.**
 
-![Browser MCP Demo](assets/demo.gif)
+[![Browser MCP Demo](assets/demo.gif)](https://browsermcp.dev)
 
-The only browser MCP with **multi-session support** (10 concurrent AI sessions), **human-in-the-loop** (2FA, CAPTCHA, credentials), and **built-in provider integrations** (Stripe, HubSpot, Slack, and 6 more). 34 tools total.
+▶ **[Watch the 37-second demo with sound →](https://browsermcp.dev)**
 
+Browser MCP gives Claude Code (and any MCP client — Cursor, VS Code agent mode) control of your actual Chrome: your cookies, your sessions, your 2FA. So it works on CAPTCHA, 2FA and anti-bot sites where Playwright and Puppeteer get blocked — because it's *you* browsing.
+
+The killer move: it hits a login wall, reads the verification code from your own Gmail tab, and continues the sign-in. No API can do that. Operate platforms with no API, QA your own web app end-to-end, or work dashboards, LinkedIn and Reddit at human pace — with you approving the sensitive steps.
+
+34 tools. Auto-clicks the reCAPTCHA v2 checkbox, with a human fallback for the rest. Multi-session color-coded tab groups. **MIT, free, and 100% local — nothing leaves your machine.**
+
 ## Install — 2 steps (~60 seconds)
@@ -129,3 +135,3 @@
 |------|-------------|
-| `browser_solve_captcha` | Detect and solve CAPTCHAs. Auto-detects reCAPTCHA v2/v3, hCaptcha, Turnstile, FunCaptcha. Actions: `detect`, `click_checkbox` (auto-click, ~80% pass with Google login), `click_grid` (AI vision guided), `ask_human` (fallback) |
+| `browser_solve_captcha` | Detect and solve CAPTCHAs. Auto-detects reCAPTCHA v2/v3, hCaptcha, Turnstile, FunCaptcha. Actions: `detect`, `click_checkbox` (auto-click, often passes when signed into Google), `click_grid` (AI vision guided), `ask_human` (fallback) |
 
@@ -132,0 +138,0 @@ ### Human-in-the-Loop

tools.js

@@ -381,3 +381,3 @@ /**
     name: 'browser_extract_token',
-    description: 'Navigate to a provider\'s API settings page and extract the API token. Optionally store it in Agent360 vault.',
+    description: 'Navigate to a provider\'s API settings page so you can read its API token from the page.',
     inputSchema: {
@@ -387,3 +387,2 @@ type: 'object',
         provider: { type: 'string', description: 'Provider slug (stripe, hubspot, slack, etc.)' },
-        store_in_vault: { type: 'boolean', description: 'If true, POST token to Agent360 vault API' },
       },
@@ -395,3 +394,3 @@ required: ['provider'],
     name: 'browser_solve_captcha',
-    description: 'Detect and solve CAPTCHAs on the current page. Auto-detects reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile, and FunCaptcha. Tries auto-click first (works ~80% with logged-in Google), then returns a screenshot for AI vision analysis, then falls back to asking the user. Returns detection info and solving status.',
+    description: 'Detect and solve CAPTCHAs on the current page. Auto-detects reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile, and FunCaptcha. Tries auto-click first (often clears reCAPTCHA v2 when signed into Google), then returns a screenshot for AI vision analysis, then falls back to asking the user. Returns detection info and solving status.',
     inputSchema: {
@@ -398,0 +397,0 @@ type: 'object',

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 3 instances

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

217841

4.3%

Lines of code

3959

2.86%

Number of lines in readme file

257

2.39%

Worsened metrics

Number of high supply chain risk alerts

1

Infinity%

Number of low supply chain risk alerts

14

16.67%

No dependency changes