Weboperator

Name: Weboperator
Author: KazKozDev

by KazKozDevversion 1.5.1i★ –iRuns on your computer

Registry nameio.github.KazKozDev/weboperator

Install

Overview

Description from the maker (original English)

Hands your live Chrome tab to any MCP client — snapshot, navigate, click, type, extract.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Web & browsers
You need to fill in: WEBOPERATOR_API_TOKEN

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: WEBOPERATOR_BRIDGE_PORT, WEBOPERATOR_AGENT_SOCKET, WEBOPERATOR_API_TOKEN

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "weboperator": {
      "command": "npx",
      "args": [
        "-y",
        "weboperator-mcp"
      ],
      "env": {
        "WEBOPERATOR_BRIDGE_PORT": "your-value",
        "WEBOPERATOR_AGENT_SOCKET": "your-value",
        "WEBOPERATOR_API_TOKEN": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add weboperator --env WEBOPERATOR_BRIDGE_PORT=your-value --env WEBOPERATOR_AGENT_SOCKET=your-value --env WEBOPERATOR_API_TOKEN=your-value -- npx -y weboperator-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "weboperator": {
      "command": "npx",
      "args": [
        "-y",
        "weboperator-mcp"
      ],
      "env": {
        "WEBOPERATOR_BRIDGE_PORT": "your-value",
        "WEBOPERATOR_AGENT_SOCKET": "your-value",
        "WEBOPERATOR_API_TOKEN": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "weboperator": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "weboperator-mcp"
      ],
      "env": {
        "WEBOPERATOR_BRIDGE_PORT": "your-value",
        "WEBOPERATOR_AGENT_SOCKET": "your-value",
        "WEBOPERATOR_API_TOKEN": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

WEBOPERATOR_BRIDGE_PORT env
Port of the local WebOperator bridge HTTP API.
WEBOPERATOR_AGENT_SOCKET env
Unix socket path the bridge listens on.
WEBOPERATOR_API_TOKEN secret env
Shared token required by the bridge when unauthenticated access is disabled.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account KazKozDev, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Web & browsersi

More stars than 0% of the other 876 servers in this category
Published to the registry more recently than 34% of the other 876 servers in this category
Basic checks equal to or better than 100% of the other 876 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Weboperator safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: WEBOPERATOR_API_TOKEN

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.5.1) reached the registry 2 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Browser Use, Chrome DevTools MCP, MCP Server Browser

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Browser Use

by browser-use

Lets AI do web tasks for you, such as filling forms, searching and extracting data, in the maker’s cloud browsers or on your computer.

Computer or cloud★ 120,087MITUpdated 16 days ago

Install

Chrome DevTools MCP

by ChromeDevTools

Lets AI use Chrome’s developer tools to inspect pages, find what makes them slow and spot errors. Made by the Chrome DevTools team.

Runs on your computer★ 54,821Apache-2.0Updated 15 days ago

Install

MCP Server Browser

by bytedance

MCP server for browser use access

Runs on your computer★ 39,550Apache-2.0Updated 14 months ago

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

WebOperator — AI browser agent and MCP server for Chrome automation

Tell Chrome what you want done, in plain English, and let the agent do it.

Most browser agents bring their own browser. WebOperator works the one you are already in: the tab in front of you, with your sessions and logins intact — no separate profile, no re-login, no copying cookies around. The model behind it can be local, served by Ollama or MLX, so the pages you look at never have to leave the machine. And it works in both directions: the local bridge exposes that same live tab over MCP, so Hermes, OpenClaw, or any other agent client can borrow your browser as a tool.

git clone https://github.com/KazKozDev/WebOperator.git

npm --prefix WebOperator/core ci npm --prefix WebOperator/core run build

Your goal, typed once · The agent plans, acts, verifies · Every step visible

Quick start

Two ways in. If you would rather not touch Node, grab the weboperator-1.5.0-chrome.zip archive from the latest release and unzip it — that folder *is* the built extension.

If you ran the commands above instead, the build lands in core/dist and finishes in well under a second:

vite v8.0.11 building client environment for production...

✓ 101 modules transformed. ✓ built in 189ms

Either way, open chrome://extensions, enable Developer mode, click Load unpacked, and point it at the folder you just got. Press Cmd+Shift+K (Ctrl+Shift+K on Linux) to open the side panel, pick a provider under Settings, and type a goal.

Out of the box the agent talks to Ollama at http://127.0.0.1:11434, so have a tool-capable local model running before your first task — or paste an API key and use a remote provider instead.

Automate a multi-step task across your open Chrome tabs

WebOperator works the tab you are looking at in a plan → act → verify loop: it writes out a plan you can read, calls one browser tool at a time, and checks each result against a fresh snapshot of the page before moving on.

Summarize the current page

It can navigate, click, type, press keys, scroll, switch tabs, screenshot, and pull out structured text — so the same loop still works when the answer is scattered across half a dozen open tabs.

Compare info across tabs

The side panel streams the plan, every action, and the final answer, and keeps the full trace; history, checkpoints, and scheduled runs each get their own tab. The flip side: the agent only knows what it can actually see in the browser, so anything hidden, paywalled, or geo-blocked simply will not show up in the answer.

Agent engineering — a plan, act and verify loop, 29 browser tools, 6 loop guards
LLM security — the prompt-injection attack rate down from 44.4% to 0.0% across 9 adversarial fixtures
LLM evaluation — AssistantBench and 24 fixtures in a deterministic harness, see docs/evals.md
MCP — the browser exposed as an MCP server with 10 tools for any agent client

Schedule recurring browser automation in Chrome

Some tasks you want done whether or not you are at the keyboard. Give a schedule a start URL, a goal, and a cadence — once, hourly, daily, or weekly — and Chrome alarms wake the agent on time, even with the side panel closed.

Task name:  Morning release check

Start URL: https://github.com/KazKozDev/WebOperator/releases Repeat: daily Goal: Tell me if a new version was published since yesterday

Every run lands in History with its trace, so you can go back afterwards and see exactly what it did. If a run hits something only you can clear — a login wall, a verification challenge — it stops and marks itself needs_user rather than failing quietly.

Connect Hermes, OpenClaw, or another MCP agent

Your live browser can be somebody else's tool. The local bridge speaks MCP over stdio and exposes ten of them: browser_snapshot, browser_navigate, browser_click, browser_type, browser_press, browser_scroll, browser_screenshot, browser_extract, browser_solve_captcha, and weboperator_execute_goal.

cd weboperator-bridge

./install.sh node mcp-server.js

install.sh registers the Native Messaging host that wires those calls to your active Chrome or Brave tab. Drop-in configs for Hermes and OpenClaw are already in weboperator-bridge/.

How it works

A goal arrives from the side panel or from an external MCP agent. From there the service worker runs the show — model calls, task state, retries, verification, schedules, storage. The content script does the hands-on part: it turns the page into an accessibility snapshot with stable element refs, then performs DOM actions against those refs. Whatever the page says is treated as data, never as instructions to follow. Twelve built-in skills sit on top as domain playbooks and kick in when the agent recognizes a matching site or task.

goal → page snapshot → model tool call → verified action → trace

Permissions

To read and act on the page you point it at, the extension asks for plus activeTab/tabs/scripting, and for debugger to reach the DevTools Protocol actions the plain DOM API cannot do. The rest are housekeeping: sidePanel for the UI, storage for settings and history, alarms for scheduled runs, downloads for the file-downloader skill, and nativeMessaging for the MCP bridge. bookmarks and tabGroups are optional and only requested when something actually needs them.

The debugger permission is why Chrome shows a yellow "WebOperator started debugging this browser" bar while an action runs. That bar belongs to Chrome, not to the extension, and it goes away as soon as the agent detaches.

Configuration and requirements

Configuration

Option	Default	What it does
Provider	`ollama`	Selects Ollama, Anthropic, DeepSeek, Gemini, MLX, OpenAI, an OpenAI-compatible endpoint of your own, OpenRouter, SiliconFlow, or xAI
Base URL (OpenAI-compatible)	`http://127.0.0.1:8080/v1`	Points the OpenAI-compatible provider at llama.cpp, LM Studio, vLLM, LiteLLM, or any gateway
Ollama URL	`http://127.0.0.1:11434`	Sets the local Ollama endpoint
Screenshot policy	`auto`	Controls automatic, always-on, or disabled vision
Action timeout	`10000` ms	Limits a single browser action attempt
Domain allowlist / blocklist	empty	Restricts or rejects tasks by domain when populated

Bridge authentication

The bridge listens on 127.0.0.1:8765 and will accept unauthenticated calls until you set WEBOPERATOR_API_TOKEN. Set it. Every bridge variable — bind host, port, socket and log paths — is documented in docs/api.md.

Requirements

Chrome 120 or newer, or a Chromium browser of the same generation
Node.js and npm, if you build the extension yourself
A model that can call tools, served locally by Ollama or MLX or reached through one of the remote providers in the table above. Tool calling is the one hard requirement, because tool calls are the only way the agent acts. Reasoning and vision are nice to have — without them the agent still runs, and the step trace tells you which one it went without
The extension is not on the Chrome Web Store, so you load it unpacked
macOS or Linux, for the MCP bridge installer
shellcheck, only if you run the full local check gate

Limitations

Dynamic, canvas-heavy, or infinite-scroll pages can invalidate element refs between the moment the agent looks and the moment it acts.
Sites with bot detection or unusual focus handling can fail outright.
Long tasks drift. Checkpoints and context compression hold it back, but do not cure it.
Point it at a remote provider and that provider sees your page observations — text and screenshots included.
Chrome and Brave are the browsers we test. Other Chromium builds and Windows are untested, and the bridge installer flatly refuses to run outside macOS and Linux.

Troubleshooting

`Ollama 403` — Ollama is refusing the extension's origin. Restart it with OLLAMA_ORIGINS="chrome-extension://phbohkmfojcjbmgfnaikenmgemgckdpg,http://localhost:*" ollama serve. The origin has to be spelled out: Ollama accepts chrome-extension://* into the list and then still answers 403. The id above is fixed by the manifest key, and the side panel's own error message repeats it.
"Model stopped issuing tool calls" — the model cannot call tools, or is too small to do it reliably. Swap it; tool calling is the one hard requirement.
Chrome rejects the folder on Load unpacked — point it at core/dist or at the unzipped release folder, not at the repository root.
The bridge answers `401` — you set WEBOPERATOR_API_TOKEN on the bridge but the client is not sending it. Add Authorization: Bearer $WEBOPERATOR_API_TOKEN to the request.
A task fails on a page that looks fine — check the step trace in the side panel first; a stale element ref or a bot-detection wall shows up there as the failing action.

Contributing

Bug reports, feature requests and pull requests are all welcome. CONTRIBUTING.md walks through the setup, the eight-step check gate every change has to clear, and the commit conventions. Released versions are listed in CHANGELOG.md.

Found a security problem? Please don't open a public issue — report it privately, the way SECURITY.md describes.

Manual installation, Docker, development setup

From a release

Each archive on the releases page ships with a .sha256 beside it, and is built and published by the release workflow from the tagged commit once the full check gate passes.

From source

npm --prefix core ci && npm --prefix core run build, then load the result as an unpacked extension.

Docker

There is no Dockerfile or Compose configuration.

Development

npm --prefix core run dev gives you watch builds. ./scripts/check.sh runs the whole gate: fixture evals, bridge smoke test, typecheck, lint, unit tests, dead-code scan, shellcheck, and build.

Issues · LICENSE · API · ARCHITECTURE · Agent protocol · LinkedIn

Weboperator

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Web & browsersi

Common questions

Alternatives

Browser Use

Chrome DevTools MCP

MCP Server Browser

README from the maker

WebOperator — AI browser agent and MCP server for Chrome automation

Quick start

Automate a multi-step task across your open Chrome tabs

Schedule recurring browser automation in Chrome

Connect Hermes, OpenClaw, or another MCP agent

How it works

Configuration

Bridge authentication

Requirements

Contributing

From a release

From source

Docker

Development