
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
sendblue-browser-mcp
Advanced tools
MCP server wrapping the sendblue-browser-use daemon. Exposes navigate, screenshot, script, session lifecycle, and CDP attach as MCP tools so any MCP client (Claude Desktop, Codex, Cursor, Antigravity, Cline, Windsurf) can drive a stealth-patched Chromium.
MCP server that wraps the sendblue-browser-use daemon. Exposes the full HTTP API as MCP tools so any MCP-speaking client (Claude Desktop, OpenAI Codex, Cursor, Google Antigravity, Cline, Windsurf, Claude Code) can drive a stealth-patched Chromium with one line of config.
# Most clients: nothing to install — they run via npx automatically.
# Verify it works once:
npx -y sendblue-browser-mcp@0.2.3 --version
Tool calls require the sendblue-browser-use daemon to be running on 127.0.0.1:8787 (or wherever BROWSER_USE_URL points). The MCP server is a thin proxy.
All MCP clients have converged on this shape:
{
"mcpServers": {
"sendblue-browser": {
"command": "npx",
"args": ["-y", "sendblue-browser-mcp@0.2.3"],
"env": {
"BROWSER_USE_URL": "http://127.0.0.1:8787",
"BROWSER_USE_API_KEY": "<the same token you started the daemon with>"
}
}
}
}
Drop that block into:
| Client | Config path |
|---|---|
| Claude Desktop | ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) |
| Claude Code | ~/.claude.json or repo-level .claude.json |
| Cursor | ~/.cursor/mcp.json (global) or .cursor/mcp.json (project) |
| Google Antigravity | ~/.gemini/config/mcp_config.json |
| OpenAI Codex | codex mcp add sendblue-browser --env BROWSER_USE_URL=http://127.0.0.1:8787 --env BROWSER_USE_API_KEY=<daemon-token> -- npx -y sendblue-browser-mcp@0.2.3 (writes ~/.codex/config.toml) |
| Cline | Settings → MCP Servers → Add |
| Windsurf | Settings → Cascade → MCP → Add |
If your client prefers remote MCP servers, run the wrapper as an HTTP service:
export SENDBLUE_BROWSER_MCP_TOKEN="$(openssl rand -hex 32)"
BROWSER_USE_API_KEY="<daemon token>" \
SENDBLUE_BROWSER_MCP_TOKEN="$SENDBLUE_BROWSER_MCP_TOKEN" \
sendblue-browser-mcp --port 8788
Then point your client at it:
{
"mcpServers": {
"sendblue-browser": {
"url": "http://127.0.0.1:8788/mcp",
"headers": {
"Authorization": "Bearer <SENDBLUE_BROWSER_MCP_TOKEN>"
}
}
}
}
HTTP mode binds 127.0.0.1 and refuses requests unless SENDBLUE_BROWSER_MCP_TOKEN is set and supplied as a bearer token. Prefer stdio mode unless your MCP client specifically needs HTTP.
| Tool | What it does |
|---|---|
health | Check if the daemon is reachable, including navScreenshotPolicy. |
list_sessions | List active browser sessions. |
create_session | Spawn a session. persistent=true follows the daemon default; set persistent=false for CDP attach. Responses include autoNavScreenshots. |
get_session | Inspect current page URL/title, console buffer count, and autoNavScreenshots. |
navigate | Navigate to a URL (http(s) only). Background evidence is only written when autoNavScreenshots=true. |
screenshot | Capture PNG, full-page or per-selector. Use explicitly after headed navigation when evidence is needed. |
script | Eval a JS expression in page context (wrap statements in an IIFE). |
get_cookies / set_cookies | Playwright-shape cookie I/O. |
get_console | Read recent console messages from the page. |
get_cdp_url | Get the CDP websocket URL and targetId for direct Playwright/Puppeteer attach. |
purge_session | Clear cookies/permissions and active-page storage/caches, keep session id. |
close_session | Close + delete on-disk profile. |
| Var | Required | Default | Notes |
|---|---|---|---|
BROWSER_USE_API_KEY | Yes | — | Same token used to start the daemon. |
BROWSER_USE_URL | No | http://127.0.0.1:8787 | Daemon base URL. |
SENDBLUE_BROWSER_MCP_TOKEN | HTTP mode only | — | Bearer token required by --port Streamable HTTP mode. |
MIT. See LICENSE in the parent repo.
FAQs
MCP server wrapping the sendblue-browser-use daemon. Exposes navigate, screenshot, script, session lifecycle, and CDP attach as MCP tools so any MCP client (Claude Desktop, Codex, Cursor, Antigravity, Cline, Windsurf) can drive a stealth-patched Chromium.
The npm package sendblue-browser-mcp receives a total of 22 weekly downloads. As such, sendblue-browser-mcp popularity was classified as not popular.
We found that sendblue-browser-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.