shaft-mcp runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 18 Sep 2026.
SHAFT browser automation, capture, and offline deterministic failure diagnosis
What the code does
We read the source, 19 h ago · rules 3dff92dd89df
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
process = subprocess.Popen( # nosec B603 - pinned verified executable and list args.
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
for path in project_root.rglob("pom.xml")
terminalSessionForRemoteMachine.performTerminalCommand("rm -r " + pathToTempDirectoryOnRemoteMachine[0]);
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAKgAAABPCAIAAADwaBnZAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAABmJLR0QA/wD/AP+gvaeTAAAAB3RJTUUH5AgKCTESJPkV5AAAGdZJREFUeNrtfXlwHNd55/d19/R0z31gMMCAIADiIAiQgggeIAFJF…
return new ProcessBuilder(command)
…isEmptyObject)(r))return}(n||(delete a[f].data,u(a[f])))&&(o?ut.cleanData([e],!0):ut.support.deleteExpando||a!=a.window?delete a[f]:a[f]=null)}}}function o(e,n,r){if(r===t&&1===e.nodeType){var i="data-"+n.replace(xt,"-$1").toLowerCase();if(r=e.getAttribute(i),"string"==typeof r){…
…g.getAttribute("data-requirecontext")];(i?i.defQueue:P).push([b,c,d])};define.amd={jQuery:!0};g.exec=function(b){return eval(b)};g(n)}})(this);
completed = subprocess.run(
const result = spawnSync(command, [...prefix, guard], {
const candidate = path.join(root, relative);
<script async defer src="https://buttons.github.io/buttons.js"></script>
- /var/run/docker.sock:/var/run/docker.sock
for path in project_root.rglob("pom.xml")
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
report = promotion.evaluate([], dict(os.environ))
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Alternatives to shaft-mcp
same job, measured the same wayMCP server for Safari DevTools — browser debugging and automation for AI coding agents
MCP server for browser automation with AI agent
MCP server for AI web browser automation using Browserbase and Stagehand
MCP server for browser automation via Vercel's agent-browser CLI
Browser tasks, sessions, and recipes for MCP and HTTP automation.
Browser tasks, sessions, and recipes for MCP and HTTP automation.
An MCP server that provides browser automation
MCP server for JavaScript analysis, security auditing, browser automation and hooks
shaft-mcp — questions
Answers built from our own checks of this server.