@browserstack/mcp-server
BrowserStack's Official MCP Server
No outside reports on file
This connector is safe if you trust BrowserStack and keep your API credentials private, but it can drain your testing budget if misused and may expose sensitive data from test screenshots.
Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachFetches arbitrary web URLsREVIEW
- CredentialsRequires API key or tokenREVIEW
- Package sourcenpm (@browserstack/mcp-server)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y @browserstack/mcp-serverAbout @browserstack/mcp-server
This MCP server connects Claude to BrowserStack, a cloud service for testing websites and apps on real devices and browsers. It lets Claude automate browser testing tasks, take screenshots, and run tests across different device configurations without needing local setup.
Who it’s for
Developers and QA teams who use BrowserStack for cross-browser testing and want Claude to help automate or manage those tests. It's useful for teams that already pay for BrowserStack and want AI assistance with their testing workflows.
Alternatives
- Selenium Grid (open-source browser automation; requires local setup)
- Playwright (lightweight cross-browser testing library; runs locally)
- AWS Device Farm (alternative cloud device testing service)
- LambdaTest (similar cross-browser cloud testing platform)
Setup
Check these steps against the project’s own instructions before running anything.
Install via npm:
npm install @browserstack/mcp-server
Then add to Claude Desktop's claude_desktop_config.json mcpServers section with your BrowserStack credentials (username and API key). Follow the project's README for detailed configuration steps and environment variable setup.
Why this grade
Signal-based grade (4/7 points): listed in several sources, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 155
- Weekly npm downloads
- 29.7k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-29).
Risks to watch for
- API credentials exposure: The server needs your BrowserStack username and API key; if leaked, attackers can run expensive tests on your account and see your testing data
- Unauthorized test execution: An attacker with access to this server could launch testing jobs across your device matrix, consuming your quota and budget
- Screenshot/data collection: The server may access or store screenshots and test results; malicious prompts could trick Claude into exfiltrating sensitive test data or login credentials captured in screenshots
- Privilege via device access: If your BrowserStack account has access to internal staging servers or test environments, the connector inherits that access
- Supply chain risk: As a relatively new package (0 GitHub stars), there's limited community review; always verify the official repository matches the published package
How to lower the risk
Least-privilege permissions
- Create a dedicated BrowserStack API key with minimal required scope, not a shared account key
- Rotate credentials regularly and monitor for unusual activity
Network isolation
- Run the MCP server in an isolated environment with limited outbound access
- Restrict which Claude conversations can access this connector
Monitoring
- Log all test runs initiated through Claude and review for unexpected tests
- Check your BrowserStack account for unauthorized API calls or job launches
Red flags to watch for
- Prompts asking to screenshot or extract data from staging/production environments
- Requests to run tests on unfamiliar device combinations or excessive parallel jobs
- Unusual spikes in API usage or test quota consumption
Questions
How do I install @browserstack/mcp-server?
Run npx -y @browserstack/mcp-server in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/browserstack/mcp-server.
Are there security reports about @browserstack/mcp-server?
No reports found for this package in our research (last checked 2026-10-29). @browserstack/mcp-server currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include api credentials exposure, unauthorized test execution, screenshot/data collection.
Is @browserstack/mcp-server actively maintained?
@browserstack/mcp-server has 155 GitHub stars and 29.7k weekly npm downloads. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/browserstack/mcp-server before pinning it in production.
What are alternatives to @browserstack/mcp-server?
Notable alternatives to @browserstack/mcp-server include Selenium Grid, Playwright, AWS Device Farm, LambdaTest. You can also compare @browserstack/mcp-server side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use @browserstack/mcp-server? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/browserstack-mcp-server)HTML embed:
<a href="https://agentarmorhq.com/skills/browserstack-mcp-server"><img src="https://agentarmorhq.com/api/badge/browserstack-mcp-server" alt="AgentArmorHQ Risk Grade for @browserstack/mcp-server" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "browserstack-mcp-server"- Compare @browserstack/mcp-server →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use @browserstack/mcp-server? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: @browserstack/mcp-server
- **Listing URL:** https://agentarmorhq.com/skills/browserstack-mcp-server
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 155 GitHub stars, 29.7k weekly npm downloads
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Fetches arbitrary web URLs
- **Credentials:** Requires API key or token
- **Package source:** npm (@browserstack/mcp-server)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @browserstack/mcp-server`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- browserstack
- Source code
- github.com/browserstack/mcp-server
- Install command
- npm install @browserstack/mcp-server
- Est. context load
- ~650 tokens / turn (~4 tool schemas, 0.33% of 200k context)
- Popularity
- 155 GitHub stars, 29.7k weekly npm downloads
- Last updated
- 2026-10-29
- Last graded
- 2026-10-24
Community
Discussions for @browserstack/mcp-server
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude