mcp-scraper@0.58.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource confirms powerful authenticated-browser/connected-data capabilities, but not malware behavior or hidden install-time persistence. Warn so users can assess this MCP server's account and agent permissions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User installs/configures the MCP server, explicitly connects an account, and invokes its browser or connected-data tools.
Impact
An authorized but powerful agent can act on or extract data from connected accounts; no covert install-time attack was confirmed.
Mechanism
Hosted authenticated-browser and connected-account MCP capabilities.
AI rationale
Source confirms powerful authenticated-browser/connected-data capabilities, but not malware behavior or hidden install-time persistence. Warn so users can assess this MCP server's account and agent permissions.
Evidence
dist/chunk-P32KEY3D.jsdist/bin/mcp-scraper-cli.jspackage.json
Network endpoints2
mcpscraper.devchatgpt.com/
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Exposes an MCP tool that saves hosted browser logins for ChatGPT, Claude, and other account-gated sites.
- The hosted login flow can later drive the authenticated session.
- A tool can submit a real prompt through a user's logged-in ChatGPT or Claude session.
- Explicit CLI --apply mutates only the named mcp-scraper Claude Code MCP registration.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The login flow states users sign in fresh and click Done; existing cookies are not imported.
- Agent configuration mutation is gated behind an explicit CLI command and --apply flag.
- No covert credential harvesting, arbitrary local-file collection, or unconsented install-time execution was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/chunk-AS345R6A.jsView file
18import { dirname, join } from "path";
L19: import { execFile } from "child_process";
L20: function workflowOutputBaseDir(outputDir) {
High
Child Process
Package source references child process execution.
dist/chunk-AS345R6A.jsView on unpkg · L18dist/server-J4YGBOTS.jsView file
178computeIssues,
L179: createPrivateArtifact,
L180: isPrivateIpAddress,
...
L437: ctaHeadingItalic: "real data.",
L438: ctaBody: "MCP Scraper gives your AI workflows the web intelligence they need \u2014 SERP data, People Also Ask harvests, page extraction, YouTube transcripts, and more. All via API...
L439: sections: [
...
L700: answer: `<strong>ChatGPT makes things up because its RLHF training consistently rewarded fluent, complete-sounding answers \u2014 and human raters often cannot tell in the moment w...
L701: source: "https://techcrunch.com/2026/05/05/openai-releases-gpt-5-5-instant-a-new-default-model-for-chatgpt/"
L702: }
...
L748: question: "what is the hallucination rate of Claude in 2026",
L749: answer: `<strong>Claude's hallucination rate in 2026 spans from 0% (Claude Opus
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
Findings
8 High5 Medium6 Low
HighChild Processdist/chunk-AS345R6A.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-J4YGBOTS.js
HighCredential Redirect Persistencedist/server-J4YGBOTS.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-XMXRXMXO.js
HighPrevious Version Dangerous Deltadist/server-J4YGBOTS.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/bin/api-server.cjs
MediumOversized Cli Entrypointdist/bin/api-server.cjs
Medium
Affected versions and remediation
This report applies to mcp-scraper@0.58.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.58.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.