Browser automation is one of the most useful abilities for AI agents.

It is also one of the easiest places to make a mess.

A browser tool can click, fill forms, run JavaScript, capture pages and move through real user flows. That power needs boundaries.

That is why I built a Puppeteer MCP server with safety controls in mind.

Repo: