Live data from Hacker News

NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

github.com

31–40 of 43 posts

Re: NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

#31

I am wondering how it solves the security issues: I saw opt-in, file permissions and SSRF in README, but I do not see: domain allowlist; human approval before submiting/deleting; persistent audit record after operations; how to revoke a previously granted access; The prompt injection may also induce the agent to perform write operations. Reuse the real user-login session also delegate the user's full authority to the…

> I am wondering how it solves the security issues

I bet it doesn't. It's one gaping security hole.

Re: NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

#33
post #23

Earlier quoted context omitted.

You are replying to a comment about AI slop with an AI generated comment? Bold move. All of your comments seem to be AI generated.

"You're right to call me out on that. It's not just a bold move, it's a complete failure to read the room, and honestly, I need to do better."

[dead]

Re: NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

#34

I built NeoBrowser because every browser MCP I tried had the same failure mode: it launches a fresh, fingerprintable headless browser with no cookies, so the model hits login walls and bot checks constantly. NeoBrowser drives the real Google Chrome binary over CDP and can reuse your actual logged-in profile, so the model lands already authenticated and looks like a genuine user — because it is one. What's different:…

Are you using an agent also to post here on your behalf?

[dead]

Re: NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

#36

I am wondering how it solves the security issues: I saw opt-in, file permissions and SSRF in README, but I do not see: domain allowlist; human approval before submiting/deleting; persistent audit record after operations; how to revoke a previously granted access; The prompt injection may also induce the agent to perform write operations. Reuse the real user-login session also delegate the user's full authority to the…

[flagged]

Re: NeoBrowser: An MCP server that drives real Chrome with your logged-in sessions

#39
I've been using the Chrome CDP skill for Claude Code with great success for test automation purposes (locator detection, troubleshooting mobile layout, and so on). I found it here on HN: https://github.com/pasky/chrome-cdp-skill

I remember seeing another Chromium-based "MCP-focused" browser at that point in time, but I can't remember what it was called.

Post reply on HN