Navette is an MCP server published by slabbdev in the Browser category: the browser for agents — one tiny Rust binary driving the WebView your OS already ships. No Chromium, no download.
The repository has 2 stars and 0 forks, with the last commit 9 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/slabbdev/navette
This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Navette
Powered by Claude · Grounded in docs
I know everything about Navette. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v1.9.0v1.9.0 — native input on all three engines (macOS verified) · 8 Oct 2026macOS closes the native-input loop — all three engines now ship attempt-first OS-level key events.** macOS (new)**: `show_window` is the focus gate — the ghost's window becomes a titled key window, the Window Server must confirm…
v1.8.1v1.8.1 — session isolation on every engine, hardened loopback API · 8 Oct 2026Cross-session cookie isolation is now a build-breaking CI assertion on macOS, Windows AND Linux.** Windows**: every session gets its own **WebView2 profile** (`with_profile_name`) + InPrivate. InPrivate alone was not enough — all InPrivate…
v1.8.0v1.8.0 — visible session windows & real pointer events · 8 Oct 2026The human-login loop is closed: visible session windows + real pointer events.** `session_show` / `session_hide`** — a ghost session can come on-screen with its page state intact (`setReleasedWhenClosed:false` — a user-closed window is…
v1.7.0v1.7.0 — native keyboard input, honest modes · 7 Oct 2026POST /key now attempts REAL OS-level keyboard events before the synthetic dispatch — and the response says which mode ran.** Windows**: SendInput to the focused WebView2 render widget (child-window focus, VK mapping, proper keyup pairs).…
v1.6.0v1.6.0 — the operator release · 7 Oct 2026Deploy navette on machines that are not yours.** `--token SECRET`**: Bearer auth on every HTTP route (except `/health`) — `Authorization: Bearer` or `X-Navette-Token`. An MCP host attaches to a protected serve with the `NAVETTE_TOKEN` env…
No package has been published for this server, so install it from source: clone the repository and follow its README.
Is Navette safe to use with an AI agent?
Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.
Is Navette still maintained?
Yes — the latest release is v1.9.0 (8 Oct 2026), and the last commit was 9 days ago. The repository has 2 stars.