Dangerous MCP tool exposed: browser automation
HighAV-MCP-007MCPCore pack
What it finds
An MCP server/package name matching the known "browser automation" signature.
Why it matters
MCP tools inherit whatever access their underlying server has. This server can: Control a real browser session; Submit forms, click, navigate on the agent’s behalf.
How to fix it
Scope MCP server permissions to the minimum required; require approval for MCP tool calls that map to consequential actions.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- MCP_DANGEROUS_TOOL_EXPOSURE_BROWSER_AUTOMATION
- How it detects
- Looks for a specific risky pattern in the code or config.
- Confidence
- Likely: strong signal, but review it in context.
- Scans
- Any source referencing MCP server/tool packages or an mcpServers config block
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.
Related checks
- Dangerous MCP tool exposed: shell/execAV-MCP-003 · Critical
- Dangerous MCP tool exposed: paymentsAV-MCP-008 · Critical
- Hidden instructions inside an MCP tool descriptionAV-MCP-105 · Critical
- Dangerous MCP tool exposed: filesystemAV-MCP-002 · High
- Dangerous MCP tool exposed: databaseAV-MCP-004 · High
- Dangerous MCP tool exposed: githubAV-MCP-005 · High