FSB MCP Server

by fullselfbrowsing• 205•• Scanned•Claim this listing•Request removal
Browser Automationagentsautomationbrowser agentchrome extensionfull self browsing

DOM-first AI browser automation for Chrome and MCP clients.

FSB is an open-source mcp server by fullselfbrowsing, written mainly in JavaScript, with 205 GitHub stars and the MIT license. Its code was last updated Oct 28, 2026.

Scan summary: scanned Nov 5, 2026 at commit 3f9e7de. Seen able to run dynamic code, read environment and secrets. Scan policy

Scanned
Full scan at 3f9e7de · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit306 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egressn/a
Reproducible (×3)n/a

Findings (111)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    mcp/package-lock.json
  • medium
    body-parser@2.2.2: 4 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    mcp/package-lock.json
  • medium
    fast-uri@3.1.0: 24 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
    mcp/package-lock.json
  • medium
    hono@4.12.8: 32 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +27 more
    mcp/package-lock.json
  • medium
    ip-address@10.1.0: 12 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +7 more
    mcp/package-lock.json
  • medium
    path-to-regexp@8.3.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    mcp/package-lock.json
  • medium
    smol-toml@1.6.1: 2 known vulnerabilities
    GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
    mcp/package-lock.json
  • medium
    ws@8.19.0: 4 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    mcp/package-lock.json
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    mcp/package-lock.json
  • medium
    axios@1.16.0: 20 known vulnerabilities
    GHSA-3pq3-5fj3-cg6v, GHSA-42h9-826w-cgv3, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8 +15 more
    package-lock.json
  • medium
    follow-redirects@1.16.0: 6 known vulnerabilities
    GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8, GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p +1 more
    package-lock.json
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    starlette@0.38.6: 7 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1943, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
    server-py/requirements.txt
  • medium
    @angular/common@20.3.19: 7 known vulnerabilities
    GHSA-39pv-4j6c-2g6v, GHSA-48r7-hpm6-gfxm, GHSA-jfgx-762w-99vr, GHSA-jhpw-976m-542j, GHSA-p297-fm68-3q8c +2 more
    showcase/angular/package-lock.json
  • medium
    @angular/compiler@20.3.19: 4 known vulnerabilities
    GHSA-58w9-8g37-x9v5, GHSA-f3m7-gqxr-g87x, GHSA-hh8m-fm6v-7cvg, GHSA-jj27-h5hq-8x99
    showcase/angular/package-lock.json
  • medium
    @angular/core@20.3.19: 5 known vulnerabilities
    GHSA-692r-grfm-v8x7, GHSA-f3m7-gqxr-g87x, GHSA-hh8m-fm6v-7cvg, GHSA-jj27-h5hq-8x99, GHSA-rgjc-h3x7-9mwg
    showcase/angular/package-lock.json
  • medium
    @angular/platform-server@20.3.19: 10 known vulnerabilities
    GHSA-f67j-2jqw-jpq7, GHSA-f6mr-pjwc-34m4, GHSA-gxx4-3xcv-f8qx, GHSA-hqr9-c56f-3x7f, GHSA-j3r3-mxqp-r2p4 +5 more
    showcase/angular/package-lock.json
  • medium
    @angular/router@20.3.19: 2 known vulnerabilities
    GHSA-62vg-58rm-qff7, GHSA-ff3f-86qr-9cv3
    showcase/angular/package-lock.json
  • medium
    @modelcontextprotocol/sdk@1.26.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    showcase/angular/package-lock.json
  • medium
    body-parser@1.20.5: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    showcase/angular/package-lock.json
  • medium
    brace-expansion@1.1.14: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    showcase/angular/package-lock.json
  • medium
    brace-expansion@1.1.16: 5 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
    showcase/angular/package-lock.json
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    showcase/angular/package-lock.json
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    showcase/angular/package-lock.json
  • medium
    engine.io@6.6.9: 1 known vulnerability
    GHSA-2gc4-cqfq-p2gv
    showcase/angular/package-lock.json
  • medium
    hono@4.12.16: 24 known vulnerabilities
    GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9 +19 more
    showcase/angular/package-lock.json
  • medium
    immutable@5.1.5: 2 known vulnerabilities
    GHSA-v56q-mh7h-f735, GHSA-xvcm-6775-5m9r
    showcase/angular/package-lock.json
  • medium
    ip-address@10.2.0: 16 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +11 more
    showcase/angular/package-lock.json
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    showcase/angular/package-lock.json
  • medium
    nanoid@3.3.12: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    showcase/angular/package-lock.json
  • medium
    pacote@21.0.4: 1 known vulnerability
    GHSA-w4pp-8pjf-rmxw
    showcase/angular/package-lock.json
  • medium
    postcss@8.5.13: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    showcase/angular/package-lock.json
  • medium
    sigstore@4.1.0: 1 known vulnerability
    GHSA-52v5-jr5w-gjxr
    showcase/angular/package-lock.json
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    showcase/angular/package-lock.json
  • medium
    undici@6.25.0: 15 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-8xcm-r25x-g524 +10 more
    showcase/angular/package-lock.json
  • medium
    vite@7.3.2: 7 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more
    showcase/angular/package-lock.json
  • medium
    zod@4.1.13: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    showcase/angular/package-lock.json
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    showcase/server/package-lock.json
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    showcase/server/package-lock.json
  • medium
    MCP server didn't complete the protocol handshake
    server exited early with code 1
  • low
    Possible example credential in docs/tests: generic-api-key
    .planning/milestones/v1.0.0-phases/37-breadth-a-dev-productivity-least-sensitive/37-REVIEW.md:58
  • low
    Possible example credential in docs/tests: generic-api-key
    .planning/milestones/v1.0.0-phases/37-breadth-a-dev-productivity-least-sensitive/37-04-SUMMARY.md:55
  • low
    Possible example credential in docs/tests: stripe-access-token
    2 matches in this file
    .planning/milestones/v1.0.0-phases/42-discovery-seeding-tail-learn/42-01-PLAN.md:183
  • low
    Possible example credential in docs/tests: linkedin-client-secret
    .planning/milestones/v1.0.0-phases/39.5-full-opentabs-source-import/39.5-03-PLAN.md:80
  • low
    Possible example credential in docs/tests: linkedin-client-secret
    2 matches in this file
    .planning/milestones/v1.0.0-phases/39.5-full-opentabs-source-import/39.5-03-SUMMARY.md:41
  • low
    Possible example credential in docs/tests: generic-api-key
    .planning/phases/64-opencode-adapter/64-RESEARCH.md:636
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/audit-log-no-secret.test.js:102
  • low
    Possible example credential in docs/tests: discord-client-secret
    3 matches in this file
    tests/consent-mutation-gate.test.js:253
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/fixtures/delegation-events.js:3
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/delegation-controller.test.js:2337
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/mcp-native-host-install.test.js:35
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/mcp-native-host-daemon.test.js:111
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/mcp-native-host-protocol.test.js:114
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/mcp-native-host-packaging.test.js:643
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/mcp-session-recorder.test.js:1418
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/mcp-spawn-supervisor.test.js:607
  • low
    @hono/node-server@1.19.11: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    mcp/package-lock.json
  • low
    esbuild@0.27.4: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    mcp/package-lock.json
  • low
    qs@6.15.0: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    mcp/package-lock.json
  • low
    esbuild@0.24.2: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    package-lock.json
  • low
    python-dotenv@1.0.1: 1 known vulnerability
    PYSEC-2026-2270
    server-py/requirements.txt
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    server-py/requirements.txt
  • low
    @angular/ssr@20.3.25: 1 known vulnerability
    GHSA-7g7c-h8rr-7p6q
    showcase/angular/package-lock.json
  • low
    @babel/core@7.28.3: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    showcase/angular/package-lock.json
  • low
    @hono/node-server@1.19.14: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    showcase/angular/package-lock.json
  • low
    @sigstore/core@3.2.0: 1 known vulnerability
    GHSA-jfc7-64v2-mr8c
    showcase/angular/package-lock.json
  • low
    @sigstore/verify@3.1.0: 1 known vulnerability
    GHSA-xgjw-pm74-86q4
    showcase/angular/package-lock.json
  • low
    baseline-browser-mapping@2.10.25: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    showcase/angular/package-lock.json
  • low
    esbuild@0.27.7: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    showcase/angular/package-lock.json
  • low
    esbuild@0.28.0: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    showcase/angular/package-lock.json
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    showcase/angular/package-lock.json
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    showcase/angular/package-lock.json
  • low
    qs@6.14.2: 8 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g +3 more
    showcase/angular/package-lock.json
  • low
    qs@6.15.1: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    showcase/angular/package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

FSB alternatives

View more →

Similar mcp servers in Browser Automation, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
FSB (this page)
fullselfbrowsing
205MITOct 28, 2026Scanned, no flagged issues
Chrome Devtools MCP
ChromeDevTools
55kApache-2.0Nov 1, 2026Scanned, no flagged issues
Playwright MCP
microsoft
39kApache-2.0Oct 31, 2026Scanned, no flagged issues
MCP Chrome
hangwin
13kMITJan 6, 2026Scanned, no flagged issues
Browser Tools MCP
AgentDeskAI
7.3kMITOct 28, 2026Scanned, no flagged issues
MCP
BrowserMCP
7.3kApache-2.0Oct 30, 2026Scanned, no flagged issues