// SCAN REPORT

CloakBrowser MCP Server

24 tools. 17 can modify or destroy data without limits.

17 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

17 can modify or destroy data

7 read-only

24 tools total

Community server · catalogue entry verified 30/06/2026

How to control CloakBrowser MCP Server ↓

TOOL MAP

What CloakBrowser MCP Server exposes to your agents

Read (7) Write / Execute (17) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous CloakBrowser MCP Server tools

Execute · High cloak_launch Launching a browser instance is a form of code/process execution with side effects that depend on context and subsequent tool chains. Execute · High cloak_navigate Navigation is an Execute action—it triggers external operations (HTTP requests, page loads) whose effects depend on the URL argument and cannot be treated as a pure read. Execute · High cloak_wait_for This tool is Execute-category because it triggers external operations (browser state monitoring and conditional page interactions) whose effects are argument-dependent. Execute · Low cloak_back This tool triggers a browser navigation action (going back in history), which is an external browser operation.

17 of CloakBrowser MCP Server's 24 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control CloakBrowser MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and CloakBrowser MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "cloak_close": {
    "limits": [
      {
        "counter": "cloak_close_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "cloak_extract_links": {
    "limits": [
      {
        "counter": "cloak_extract_links_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register CloakBrowser MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CLOAKBROWSER →

Instant setup, no code required.

FULL CATALOGUE

All 24 CloakBrowser MCP Server tools

EXECUTE 14 tools

Execute cloak_back Navigate back in browser history. Execute cloak_click Click on an element identified by its ref ID from the snapshot (e.g. Execute cloak_console Get browser console output or evaluate JavaScript expression. Execute cloak_drag Drag an element from one position to another. Execute cloak_evaluate Evaluate JavaScript expression in the page context. Execute cloak_forward Navigate forward in browser history. Execute cloak_hover Hover over an element identified by its ref ID. Execute cloak_launch Launch a stealth CloakBrowser instance. Call this before any other cloak tool. Execute cloak_navigate Navigate to a URL and return a compact snapshot of the page. Execute cloak_press Press a keyboard key (Enter, Tab, Escape, ArrowDown, etc.). Execute cloak_scroll Scroll the page in a direction. Execute cloak_select_option Select option(s) in a <select> element. Execute cloak_type Type text into an input field identified by its ref ID. Execute cloak_wait_for Wait for an element or text to appear on the page.

WRITE 3 tools

Write cloak_close Close the browser and clean up resources. Write cloak_fill_form Fill multiple form fields at once. Write cloak_save_storage_state Save browser storage state (cookies, localStorage) to a JSON file.

READ 7 tools

Read cloak_extract_links Extract all links from the current page as JSON. Read cloak_get_content Get text or HTML content of an element or the entire page. Read cloak_get_images Get a list of all images on the current page with URLs and alt text. Read cloak_info Get information about the current browser session (URL, title, viewport). Read cloak_load_storage_state Load browser storage state from a JSON file. Read cloak_screenshot Take a screenshot of the current page. Returns a PNG image. Read cloak_snapshot Get a text-based snapshot of the current page

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about CloakBrowser MCP Server

How do I prevent bulk modifications through CloakBrowser MCP Server? +

The CloakBrowser MCP Server server has 3 write tools including cloak_close, cloak_fill_form, cloak_save_storage_state. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach CloakBrowser MCP Server.

How many tools does the CloakBrowser MCP Server MCP server expose? +

24 tools across 3 categories: Execute, Read, Write. 7 are read-only. 17 can modify, create, or delete data.

How do I enforce a policy on CloakBrowser MCP Server? +

Register the CloakBrowser MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every CloakBrowser MCP Server tool call.

Deterministic rules across all 24 CloakBrowser MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CLOAKBROWSER →

Instant setup, no code required.

24 CloakBrowser MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.