Browser Automation MCP Server

Skyvern

Name: Skyvern
Author: Skyvern-AI

AI-powered browser automation — navigate, click, fill forms, and extract data from any website.

Scan flagged something by Skyvern-AI20,824AGPL-3.0PythonIntermediatestdiostreamable-http

View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Remote Endpoint Available

This server offers a hosted endpoint — no local installation required.

https://api.skyvern.com/mcp/

Safety Report

80% Scan flagged something

4 passed 1 warnings

Security

Authentication

details

API key required; browser tunnel access enforces authentication — unauthenticated access explicitly warned against

Pass

CORS Policy

details

Web service; CORS configuration not documented in MCP context

Info

Rate Limiting

details

Cloud plan has usage limits; self-hosted has no documented rate limiting

Info

Known CVEs

details

No known CVEs at time of research; actively maintained project

Info

Code Quality

Dependency Audit

details

Large Python/Node dependency tree; no published audit report

Warning

Code Source

details

Open source on GitHub (Skyvern-AI/skyvern); core under AGPL-3.0

Pass

License

details

AGPL-3.0 for open-source core; proprietary anti-bot layer in cloud offering

Pass

Community

Maintenance Status

details

Actively maintained with frequent commits; backed by Skyvern-AI company

Pass

Learn about our security methodology →

Compatibility

Claude CodeDocumented integration with Claude in official README

Tested

CursorCursor integration explicitly shown in official documentation

Tested

VS CodeNo specific VS Code integration documented

Not Tested

WindsurfWindsurf integration explicitly mentioned in official documentation

Tested

Claude DesktopMCP protocol supported; Claude Desktop config should work via stdio

Partial

Tools Provided (5)

run_task

Runs a browser automation task using Skyvern's AI-powered agent. Specify a URL and natural language instructions; Skyvern fills forms, clicks elements, downloads files, and navigates the web autonomously.

create_task

Creates a new Skyvern task with a given URL and goal. Returns a task ID that can be used to monitor execution progress.

get_task

Retrieves the status and results of a previously created Skyvern browser automation task by its task ID.

run_workflow

Executes a pre-built Skyvern workflow by workflow ID, passing optional parameters. Useful for repeatable multi-step browser automation sequences.

get_workflow_run

Gets the execution status and output of a running or completed Skyvern workflow run.

Frequently Asked Questions

What is Skyvern?

AI-powered browser automation — navigate, click, fill forms, and extract data from any website.

What tools does Skyvern provide?

Skyvern provides 5 tools including run_task, create_task, get_task, run_workflow. Each tool can be called by AI agents to perform specific operations.

Is Skyvern safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Skyvern and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Skyvern?

Similar MCP servers include Scrapling MCP Server, Chrome DevTools MCP, Playwright MCP. Each serves a similar purpose but may differ in features, language, and compatibility.