← Index

io.github.HarimxChoi/google-surf-mcp

io.github.HarimxChoi/google-surf-mcp·v0.4.6·Browser Automation

Google search via Playwright with a warm Chrome profile. No API key, no proxies.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
CHROME_PATH

Absolute path to the Chrome binary. Auto-detected on Windows/macOS/Linux when omitted.

SURF_PROFILE_ROOT

Directory for the warm Chrome profile. Defaults to ~/.google-surf-mcp.

SURF_LOCALE

Browser locale, e.g. en-US.

SURF_TZ

IANA timezone, e.g. America/New_York. Defaults to system timezone.

SURF_HEADLESS

Set to 'false' to run Chrome visibly (demos/debugging). Defaults to true. CAPTCHA recovery always runs visible regardless.

SURF_IDLE_CLOSE_MS

Idle ms before closing the sequential ctx and pool. 0 disables idle auto-close. Defaults to 30000.

SURF_ALLOW_PRIVATE

Set to 'true' to allow extract on private/loopback addresses (localhost, 10.x, 192.168.x, 169.254.x, etc). Default blocks them as an SSRF guard.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
5
Alternatives in Browser Automation