Skip to content

com.browser-use/browser-use

by browser-use.com · remote · local (pypi) · no sign-in to list tools · v0.13.11 · published by com.browser-use

Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.

Final · 1Changes · 2
CompareRegistry entry

7 tools: 1 do something that can't be undone, 2 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http browser-use https://api.browser-use.com/v3/mcp --header 'X-Browser-Use-API-Key: <your-x-browser-use-api-key>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Can't be undone 1Claude Code: ask
  • send_taskSend a follow-up task to an existing keep-alive session.No findings

    Why it is in this group

    • The name "send_task" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a follow-up task to an existing keep-alive session. The session must be in idle status. Use this for multi-turn interactions where you want to reuse the same browser context.
Changes things 2Claude Code: ask
  • run_sessionCreate a new browser agent session and run a task.No findings

    Why it is in this group

    • The name "run_session" says "run": a word for a change.
    Description, as the server wrote it
    Create a new browser agent session and run a task. This uses the v3 sandbox-based agent that supports long-running sessions, workspaces, and keep-alive. After creating a session, call get_session to poll for status and output. For tasks requiring authentication, use list_browser_profiles first to get a profile_id.
  • stop_sessionStop a running session.No findings

    Why it is in this group

    • The name "stop_session" says "stop": a word for a change.
    Description, as the server wrote it
    Stop a running session. Use strategy "task" to stop only the current task (session stays idle for follow-ups), or "session" (default) to destroy the sandbox entirely.
Only reads 4Claude Code: allow
  • get_sessionGet current status and output of a session.No findings

    Why it is in this group

    • The name "get_session" says "get": a word for reading.
    Description, as the server wrote it
    Get current status and output of a session. Call this repeatedly to poll for task completion. Returns status (created, idle, running, stopped, timed_out, error), step count, output, cost breakdown, and live URL.
  • get_session_messagesGet the agent messages/steps for a session.No findings

    Why it is in this group

    • The name "get_session_messages" says "get": a word for reading.
    Description, as the server wrote it
    Get the agent messages/steps for a session. Shows what the agent is doing including browser actions, reasoning, and results. Use after= parameter for pagination to get new messages since your last check.
  • list_browser_profilesList all available cloud browser profiles for the authenticated project.No findings

    Why it is in this group

    • The name "list_browser_profiles" says "list": a word for reading.
    Description, as the server wrote it
    List all available cloud browser profiles for the authenticated project. Profiles store persistent authentication (cookies, sessions) for websites requiring login. Use this BEFORE attempting any authenticated tasks. Show profiles to the user and let them choose, then pass the selected profile_id to run_session.
  • list_sessionsList recent sessions for the authenticated project, with status and cost info.No findings

    Why it is in this group

    • The name "list_sessions" says "list": a word for reading.
    Description, as the server wrote it
    List recent sessions for the authenticated project, with status and cost info.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.13.11. Values in angle brackets are yours to fill in.

claude mcp add --transport http browser-use https://api.browser-use.com/v3/mcp --header 'X-Browser-Use-API-Key: <your-x-browser-use-api-key>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__browser-use__get_session",
      "mcp__browser-use__get_session_messages",
      "mcp__browser-use__list_sessions",
      "mcp__browser-use__list_browser_profiles"
    ],
    "ask": [
      "mcp__browser-use__run_session",
      "mcp__browser-use__send_task",
      "mcp__browser-use__stop_session"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as browser-use. Review it before you use it.