Enreign/pagerunner

github
github Rust analyzed 1d22837

The browser layer that learns. Connects any MCP client to your real Chrome profiles — already logged in, with site intelligence that compounds over time. Sessions survive restarts. PII anonymization, encrypted state, macOS menu bar, multi-session daemon.

maintainer
Enreign
licence
NOASSERTION
first seen
2026-06-03
last seen
2026-07-20
releases · 30d
0
github stars
3 reported
short id

Enreign/pagerunner is an MCP server distributed on github, maintained by Enreign, tracked here since June 2026. It has shipped 10 releases and exposes 39 tools. Tools include attach_session, call_site_api, click, close_session, close_tab, delete_session_checkpoint, and 33 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and purpose mismatch — each a pattern worth a human look rather than a finding of fault.

Its 39 tools appear to reach filesystem, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

20 of 39
  • attach_session Attach to an existing Chrome instance via --remote-debugging-port
  • call_site_api Execute a stored adapter in the browser tab
  • click Click an element by CSS selector
  • close_session Kill a Chrome session
  • close_tab Close a specific tab
  • delete_session_checkpoint Remove a checkpoint by ID
  • delete_snapshot Delete a saved snapshot
  • evaluate Run JavaScript in a tab, returns the result
  • fill Set input value with React/Vue/Angular synthetic events
  • generate_adapter Auto-generate a JS adapter from network traffic using Claude (requires ANTHROPIC_API_KEY)
  • get_console_log Capture JavaScript console output from a tab
  • get_content Get visible text content of a tab
  • get_network_log Inspect HTTP requests captured in a session
  • get_site_knowledge Inspect what Pagerunner has learned about a site (adapters, auth tokens, selector health)
  • kv_clear Delete all keys in a namespace
  • kv_delete Delete a key
  • kv_get Retrieve a value by key
  • kv_list List keys in a namespace (with optional prefix filter)
  • kv_set Store a value in a persistent namespace
  • list_profiles List configured Chrome profiles
All 39 tools →

release cadence · 90d

0 releases

No releases yet.

recent releases

last 10
version date src
v0.8.0 2026-04-07 github
v0.7.1 2026-04-05 github
v0.7.0 2026-04-05 github
v0.6.1 2026-03-31 github
v0.6.0 2026-03-29 github
v0.5.0 2026-03-28 github
v0.3.0 2026-03-26 github
v0.2.0 2026-03-26 github
v0.1.1 2026-03-22 github
v0.1.0 2026-03-21 github

view all →