browser_navigate

What browser_navigate does on Kali Security MCP

AI agents invoke browser_navigate to trigger actions in Kali Security MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why browser_navigate is rated High

Browser navigation is an Execute-class action because it triggers external operations (HTTP requests, JavaScript execution, page rendering) and can interact with arbitrary websites or internal services. The severity is high because an AI agent could be manipulated to navigate to malicious sites, exfiltrate data via navigation patterns, or trigger unintended side effects.

From the tool's definition Tool description states it 'navigates to a new page in an existing session' (browser_navigate). This performs browser automation actions that trigger external operations (page loads, script execution, potential data fetching) whose effects depend on the…

The rule that runs browser_navigate safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For browser_navigate, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "browser_navigate": {
      "limits": [
        {
          "counter": "browser_navigate_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about browser_navigate