Universal Agent Harness
human-plus-machine/monkeybot is an MCP server distributed on github, maintained by human-plus-machine, tracked here since July 2026. It has shipped 24 releases and exposes 32 tools. Tools include browser_act, browser_click, browser_click_by_index, browser_click_text, browser_close_tab, browser_extract, and 26 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
Since the previous scan on 2026-09-17: 10 tools added.
full security breakdown →-
browser_act -
browser_click -
browser_click_by_index -
browser_click_text -
browser_close_tab -
browser_extract -
browser_fill -
browser_get_elements -
browser_get_text -
browser_goto -
browser_input_by_index -
browser_js -
browser_list_playbooks -
browser_login -
browser_open_tab -
browser_page_info -
browser_passkey -
browser_press_key -
browser_read_playbook -
browser_read_tabs
06-20 00:00 08-03 00:00 now
| version | date | src |
|---|---|---|
| browser-v0.7.2 | 2026-09-13 | github |
| browser-v0.7.1 | 2026-09-12 | github |
| core-v3.4.0 | 2026-09-12 | github |
| browser-v0.7.0 | 2026-09-11 | github |
| core-v3.3.0 | 2026-09-11 | github |
| browser-v0.6.0 | 2026-09-07 | github |
| core-v3.2.0 | 2026-09-07 | github |
| cli-v0.6.0 | 2026-09-05 | github |
| browser-v0.5.0 | 2026-09-05 | github |
| core-v3.1.0 | 2026-09-05 | github |