// SCAN REPORT

Camofox

47 tools. 32 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

32 can modify or destroy data

15 read-only

47 tools total

Community server · catalogue entry verified 11/06/2026

How to control Camofox ↓

TOOL MAP

Read (15) Write / Execute (30) Destructive / Financial (2)

MOST DANGEROUS TOOLS

Critical Risk

Destructive · High delete_download This tool irreversibly deletes files from disk and modifies system registry entries, which cannot be undone. Destructive · High delete_profile This tool permanently deletes stored browser profile data without reversibility. Execute · High camofox_evaluate_js This tool runs arbitrary JavaScript in a live browser context, which is a classic Execute operation. Execute · High camofox_hover Browser automation tools that interact with page elements (hover, click, scroll, evaluate_js) fall under Execute because they trigger code execution and state changes in a web application.

32 of Camofox's 47 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

HOW TO CONTROL CAMOFOX

PolicyLayer is an MCP gateway — it sits between your AI agents and Camofox, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_download": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "camofox_close_session": {
    "limits": [
      {
        "counter": "camofox_close_session_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "camofox_get_page_html": {
    "limits": [
      {
        "counter": "camofox_get_page_html_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Camofox — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CAMOFOX →

Free to start. No card required.

ALL 47 CAMOFOX TOOLS

DESTRUCTIVE 2 tools

Destructive delete_download Delete a downloaded file from disk and registry Destructive delete_profile Delete a saved browser profile from disk. Removes the profile

EXECUTE 26 tools

Execute camofox_evaluate_js Execute JavaScript in the browser page context. Runs in isolated scope (invisible to page scripts — safe for a Execute camofox_hover Hover over an element to trigger tooltips, dropdown menus, or hover states. Use ref from snapshot or CSS selec Execute camofox_wait_for Wait for page to be fully ready (DOM loaded, network idle, framework hydration complete). Use after navigation Execute camofox_wait_for_selector Wait for a CSS selector to appear in the live DOM. Use for SPA hydration and async content when snapshot refs Execute camofox_wait_for_text Wait for specific text to appear on the page. Useful for waiting for search results, form submissions, or dyna Execute navigate Navigate a tab to a URL. Waits for page load. Use create_tab first, then navigate. Returns final URL (may diff Execute navigate_and_snapshot Navigate to a URL and return the page snapshot. Combines navigate + wait + snapshot into one call. Execute batch_download Extract resources from a DOM container and download them all. Combines extract_resources + download in one cal Execute go_back Navigate backward in browser history (Back button). Returns new page URL. Execute go_forward Navigate forward in browser history (Forward button). Returns new page URL. Execute load_profile Load a saved profile Execute refresh Reload the current page. Useful when page state is stale or after changes. Execute toggle_display Toggle browser display mode between headless and headed. When encountering CAPTCHAs or issues requiring visual Execute web_search Search the web via 14 engines: google, youtube, amazon, bing, duckduckgo, reddit, github, stackoverflow, wikip Execute batch_click Click multiple elements sequentially. Continues on error (clicks are independent). Returns per-click results. Execute camofox_press_key Press a keyboard key. Use after type_text to submit forms (Enter), navigate between elements (Tab), move throu Execute camofox_scroll_element Scroll a specific container element (modal dialog, scrollable div, sidebar). Use when page-level scroll doesn Execute camofox_scroll_element_and_snapshot Scroll a container element AND take a snapshot. Combines scroll_element + snapshot in one call. Perfect for in Execute click Click an element. Provide either ref (from snapshot) or CSS selector. Use snapshot first to discover element r Execute create_tab Create a new browser tab with anti-detection fingerprinting. Each tab gets a unique fingerprint. Optionally pr Execute fill_form Fill multiple form fields in one call. Provide an array of field entries, each with a ref or CSS selector and Execute resolve_blobs Resolve blob: URLs to downloadable base64 data. Blob URLs are temporary browser objects (common in Telegram, W Execute scroll Scroll page up or down by pixel amount. Use to reveal content below the fold or navigate long pages. Execute scroll_and_snapshot Scroll the page and take a snapshot. Useful for revealing content below the fold. Execute type_and_submit Type text into a field and press a key (default: Enter). Useful for search boxes and single-field forms. Execute type_text Type text into an input field. Provide either a ref (from snapshot) or a CSS selector. Use ref when available;

WRITE 4 tools

Write camofox_close_session Close all browser tabs for a user session. Use for complete cleanup when done with a browsing session. Write close_tab Close a browser tab and release resources. Always close tabs when done to free memory. Write import_cookies Import cookies for authenticated sessions. Provide cookies in a JSON string array. Restores login sessions wit Write save_profile Save browser cookies from an active tab to a named profile on disk. Enables session persistence across restart

READ 15 tools

Read camofox_get_page_html Get rendered HTML from the live DOM. Use when snapshot refs are incomplete on SPA/custom-component sites or wh Read camofox_query_selector Query a CSS selector in the live DOM and return its element details or a specific attribute. Use this for targ Read extract_resources Extract resources (images, links, media, documents) from a specific DOM container. Use a CSS selector or eleme Read extract_structured Extract deterministic structured JSON from a page using the camofox-browser structured extraction schema. Read get_download Get a downloaded file. Images are always returned as viewable images. Recommended for AI agents: set includeCo Read get_links Get all hyperlinks on page with URLs and text. Useful for navigation discovery and site mapping. Read get_stats Get session statistics: request counts, active tabs, uptime, performance metrics. Read list_downloads List downloaded files with optional filtering by tab, status, extension, MIME type, and size range. Each downl Read list_presets List all available geo presets supported by the CamoFox server. Presets include locale, timezone, and optional Read list_profiles List all saved browser profiles with metadata. Shows profile names, cookie counts, save dates, and description Read list_tabs List all open browser tabs with URLs and titles. Use to discover available tabs or verify tab state. Read screenshot Take visual screenshot in base64 PNG. Use ONLY for visual verification (CSS, layout, proof). Prefer snapshot f Read server_status Check CamoFox server health and browser connection. Call first to verify server is running. Returns version, b Read snapshot Get accessibility tree snapshot — the PRIMARY way to read page content. Returns element refs, roles, names and Read youtube_transcript Extract transcript from a YouTube video. Returns timestamped text. No tab required.

RELATED SERVERS

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Can an AI agent delete data through the Camofox MCP server? +

Yes. The Camofox server exposes 2 destructive tools including delete_download, delete_profile. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Camofox? +

The Camofox server has 4 write tools including camofox_close_session, close_tab, import_cookies. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Camofox.

How many tools does the Camofox MCP server expose? +

47 tools across 4 categories: Destructive, Execute, Read, Write. 15 are read-only. 32 can modify, create, or delete data.

How do I enforce a policy on Camofox? +

Register the Camofox MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Camofox tool call.

Deterministic rules across all 47 Camofox tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CAMOFOX →

Free to start. No card required.

47 Camofox tools catalogued and risk-classified — across an index of 42,500+ MCP servers.

Camofox

// TOOL MAP

// MOST DANGEROUS TOOLS

// HOW TO CONTROL CAMOFOX

// ALL 47 CAMOFOX TOOLS

// RELATED SERVERS

// FAQ