AgentArmorHQ
Sign in

RPA

MCP server · npm · ★ 2.1k · graded 2026-10-21Source linked

Browser and desktop automation with an MCP server for AI assistants. Record macros or write JavaScript to automate websites, extract data, and control desktop apps with OCR and image recognition.

No outside reports on file

RPA gives AI broad power to control your computer and see everything on your screen, so it must only run authenticated, supervised automation with strict scope limits.

Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for RPA helpful?

What it can access

  • Local filesNo local folder access notedLOW
  • Command executionNo shell command runner notedLOW
  • Network reachFetches arbitrary web URLsREVIEW
  • CredentialsNo API token requiredLOW
  • Package sourcenpm (uivision-mcp-bridge)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

npx -y uivision-mcp-bridge

All setup options ↓

Check this skillWatch it in my stackCompareREADME badgeView project

Everything known

We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.

0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30

Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About RPA

RPA is a tool that lets AI assistants automate actions on websites and desktop applications. It can record macros, run JavaScript code, extract data from web pages, and use image recognition to find and click buttons or read text from screens.

Who it’s for

Developers and technical users who want to connect AI systems to legacy software, web scraping tasks, or repetitive desktop workflows. Not recommended for non-technical users without careful oversight.

Alternatives

  • Puppeteer (Node.js library for browser automation)
  • Selenium (cross-browser test automation framework)
  • UIPath (enterprise robotic process automation platform)
  • AutoHotkey (lightweight desktop automation for Windows)

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README for installation and MCP server configuration instructions. The project is available at the GitHub link provided.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

59/100
GitHub stars
2.1k
Weekly npm downloads
160
Listing last refreshed
2026-10-30

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

  • Full system access: Automation can control the keyboard, mouse, and desktop, potentially accessing files or programs the AI shouldn't touch.
  • Web page tricks: Malicious websites can hide fake buttons or deceptive elements that fool image recognition into clicking the wrong thing.
  • Credential exposure: If the AI runs automation that enters passwords or API keys, these secrets could leak through logs or be captured by the tool.
  • Unintended actions: The AI might misunderstand instructions and automate dangerous tasks like deleting files or sending messages.
  • Data extraction risks: The tool can read anything visible on screen, including sensitive information like emails, financial data, or private messages.

How to lower the risk

Least-privilege permissions

  • Run RPA in a sandboxed environment or container with access only to approved applications.
  • Disable keyboard and mouse control when they aren't needed for a specific task.

Network isolation

  • Restrict which websites and services the RPA process can reach.
  • Use a VPN or firewall rules to block unexpected outbound connections.

Monitoring

  • Log all actions the RPA takes, including mouse clicks, keyboard input, and data read.
  • Review logs regularly for suspicious activity or unauthorized tasks.

Red flags to watch for

  • AI asking to automate tasks outside your stated workflow.
  • Requests to capture screenshots or read files unrelated to the job.
  • Unusual network traffic or attempts to install software.

Questions

How do I install RPA?

Run npx -y uivision-mcp-bridge in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/A9T9/RPA.

Are there security reports about RPA?

No reports found for this package in our research (last checked 2026-10-30). RPA currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include full system access, web page tricks, credential exposure.

Is RPA actively maintained?

RPA has 2.1k GitHub stars and 160 weekly npm downloads. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/A9T9/RPA before pinning it in production.

What are alternatives to RPA?

Notable alternatives to RPA include Puppeteer, Selenium, UIPath, AutoHotkey. You can also compare RPA side by side with other MCP servers in the Related tools section on this page.

README badge and team notes

Maintain or use RPA? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

AgentArmorHQ Risk Grade C for RPA

GitHub README Markdown:

markdown
[![AgentArmorHQ Risk Grade for RPA](https://agentarmorhq.com/api/badge/a9t9-rpa)](https://agentarmorhq.com/skills/a9t9-rpa)

HTML embed:

html
<a href="https://agentarmorhq.com/skills/a9t9-rpa"><img src="https://agentarmorhq.com/api/badge/a9t9-rpa" alt="AgentArmorHQ Risk Grade for RPA" height="20" /></a>

Terminal check:

terminal
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "a9t9-rpa"

Share with your security lead

Need sign-off to use RPA? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: RPA
- **Listing URL:** https://agentarmorhq.com/skills/a9t9-rpa
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 2.1k GitHub stars, 160 weekly npm downloads

#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Fetches arbitrary web URLs
- **Credentials:** No API token required
- **Package source:** npm (uivision-mcp-bridge)

#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts uivision-mcp-bridge`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type
App connector
Publisher
A9T9
Source code
github.com/A9T9/RPA
Install command
npm install uivision-mcp-bridge
Est. context load
~900 tokens / turn (~5 tool schemas, 0.45% of 200k context)
Popularity
2.1k GitHub stars, 160 weekly npm downloads
Last updated
2026-10-30
Last graded
2026-10-21

Community

Discussions for RPA

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for RPA helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude