1. Conduid
  2. Healthcare
  3. Vzt Browser
MCP server · Healthcare

Vzt Browser

Aside-class browser agent — MCP · CLI · REPL. A real logged-in browser for AI agents: Keychain credential vault (secrets never in model context), enforced approval + read-only evidence mode, review evidence bundles, research/claim-drift, record→replay, and browsing-history recall.

34Low

Scored a month ago · breakdown

About Vzt Browser

Vzt Browser is an MCP server in the Healthcare category: aside-class browser agent — MCP · CLI · REPL. A real logged-in browser for AI agents: Keychain credential vault (secrets never in model context), enforced approval + read-only evidence mode, review evidence bundles, research/claim-drift, record→replay, and browsing-history recall.

Install

From source
git clone https://github.com/vonzelle-vzt/vzt-browser

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (48)

audit_log_pathPath of the JSONL audit log (vault access + approval decisions).

Parameters not published.

clickClick an element by snapshot ref or CSS selector. Sensitive targets (pay/send/delete/checkout URLs or button names) pause for human approval.

Parameters not published.

collect_evidenceOpen one or more private pages (CI run, PR, Sentry, feature-flag dashboard, staging) and produce a REVIEWABLE evidence bundle — full-page screenshots, captured log links, console errors, downloaded files, and a markdown note (PR-comment/incident scaffold). Never posts or changes anything. Use a read-only session for a hard guarantee. Templates: ci-triage, pr-packet, qa, flag-audit, incident, generic.

Parameters not published.

delete_site_memoryDelete a domain

Parameters not published.

eval_jsEvaluate a JavaScript expression in the page and return the JSON-serializable result. For reading computed styles, DOM state, animation timing, etc. (Read-only mode still allows this — use it to inspect, not to mutate.)

Parameters not published.

fillFill a text input. Refuses password fields — use fill_credential for those.

Parameters not published.

fill_credentialType a vaulted secret (macOS Keychain) into a field. The secret value NEVER enters the model context — only the credential name. First use on a new domain requires human approval. All access is audit-logged.

Parameters not published.

get_site_memoryRead the full site memory for a domain.

Parameters not published.

get_textReadable text of the page (or of a CSS selector).

Parameters not published.

hoverHover an element (menus, tooltips, hover animations). Safe in read-only mode.

Parameters not published.

Show all 48 tools
list_downloadsFiles downloaded this session (url, filename, saved path).

Parameters not published.

list_site_memoryList all site memory files.

Parameters not published.

list_tabsList open tabs (index, url, title).

Parameters not published.

login_modeOpen a HEADED browser at a URL so the human can log in manually. Logins persist in the profile for all future (including headless) sessions. Tell the user to log in, then call session_stop.

Parameters not published.

monitor_pageWatch a page on an interval until a signal fires or a deadline passes, then return so you can collect_evidence — e.g. a Datadog error rate crossing a threshold, or a rollout value changing. Read-only. For recurring Routines, have your MCP client schedule this (or replay_task).

Parameters not published.

navigateNavigate to a URL. Returns title, URL, and this domain

Parameters not published.

new_tabOpen a new tab (optionally at a URL) and make it active.

Parameters not published.

press_keyPress a keyboard key (e.g.

Parameters not published.

read_consoleConsole messages captured this session (log links, errors, warnings). Filter to errors/warnings or by substring.

Parameters not published.

read_networkNetwork responses captured this session — the log links a reviewer needs. Filter to failures (status ≥400) or by URL substring.

Parameters not published.

record_saveSave this session

Parameters not published.

rememberSave a cross-task fact — a person, company, decision, or task-context detail — to workspace memory (auto-injected at session_start). This is

Parameters not published.

replay_taskDeterministically replay a saved task — no LLM needed on the happy path (sub-second per step). Approval gates still fire. On page drift it stops and returns the failure point + a snapshot so you can finish manually and re-save.

Parameters not published.

research_capture_sourceOpen a source read-only, full-page screenshot it into the table

Parameters not published.

research_define_tableSchema FIRST: declare the fields you want before browsing (default: claim, sourceUrl, publisher, dateAccessed, screenshot, status, oldClaim). Re-defining the same name preserves rows/baseline so weekly runs compare against the same method (Routine-ready).

Parameters not published.

research_delete_tableDelete an evidence table.

Parameters not published.

research_diffCompare the table

Parameters not published.

research_exportExport an evidence table to CSV or Markdown.

Parameters not published.

research_get_tableGet a full evidence table (schema + rows + baseline).

Parameters not published.

research_list_tablesList evidence tables (name, row count, run count).

Parameters not published.

research_upsert_rowAdd/replace a row in an evidence table (matched on the key field). You supply the extracted field values + status; dateAccessed auto-stamps.

Parameters not published.

save_site_memoryPersist what you learned about a site (working selectors, quirks, login flow notes, people/decisions) to local markdown memory. Auto-injected on the next visit. Call this at the end of any session where you learned something.

Parameters not published.

screenshotJPEG screenshot of the current page (base64).

Parameters not published.

search_historySearch this profile

Parameters not published.

select_optionSelect an option in a <select> by value or label.

Parameters not published.

session_gifAssemble the session

Parameters not published.

session_startStart a browser session on a persistent logged-in Chrome profile. Returns site memory for the start URL if any. Headless by default.

Parameters not published.

session_stopClose the browser session, release the profile lock, and return the session recording directory.

Parameters not published.

set_viewportResize the viewport for QA at different widths. Use a preset (desktop 1440×900, tablet 834×1112, mobile 390×844) or explicit width/height.

Parameters not published.

show_memoryShow where all memory lives (workspace + per-site files) so you can inspect or edit it.

Parameters not published.

snapshotAccessibility snapshot of the current page: `snapshot` is the readable aria tree; `refs` lists interactive elements with stable `[ref=vN]` handles you can pass as `ref` to click/fill/select (the same refs the REPL uses). Refs reset on navigation — snapshot again after navigating.

Parameters not published.

switch_tabSwitch the active tab by index (see list_tabs).

Parameters not published.

task_deleteDelete a saved task.

Parameters not published.

task_listList saved replayable tasks.

Parameters not published.

vault_addStore a credential in the macOS Keychain WITHOUT the secret passing through the model: opens a secure capture form in a headed browser window for the human to type into. (Terminal alternative: `npx vzt-browser-vault add <name>`.)

Parameters not published.

vault_deleteDelete a credential from the Keychain vault.

Parameters not published.

vault_listList credential NAMES in the vault (never values).

Parameters not published.

wait_forWait for a selector or text to become visible (or network idle when neither given).

Parameters not published.

Ask AI

✦

Ask AI about Vzt Browser

Powered by Claude · Grounded in docs

I know everything about Vzt Browser. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Vzt Browser

How do I install Vzt Browser?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Vzt Browser safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Vzt Browser still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.