MCP server community
Risk level
high
75/100

browserbase

browserbase is a community-maintained MCP server from Browserbase. Anomity scores its risk at 75 out of 100 (high). It matches 1 dangerous capability combination.

browser:control network:outbound credentials:access

Analysis summary

browserbase is a community-maintained MCP server from Browserbase. Anomity scores its risk at 75 out of 100 (high). It matches 1 dangerous capability combination.

Why this entry scored 75 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. Declared high-risk capabilities add +10 (capped at +30). It matches 1 dangerous capability combination, which contributes additional severity weight. The clamped result is 75, placing it in the high band.

See the full scoring formula →

Findings

  • Established community project Trust offset
    Contribution to score: -10
  • 1 high-risk capability: credentials:access High
    Contribution to score: +10
  • Browser credential risk (critical) Critical
    Evidence
    Browser control plus credentials access could be used to impersonate the user on web services.
    Contribution to score: +25

Capabilities

Every capability the entry declares, with the security implication of each.

  • browser:control Browser control
    Drives a browser session. Combined with credential access can impersonate the user on web services.
  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.
  • credentials:access Credentials access
    Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment.

Dangerous combinations matched

Capability pairings that compound into well-known attack patterns.

  • Browser credential risk critical
    Browser control plus credentials access could be used to impersonate the user on web services.
    browser:control credentials:access