io.github.OyadotAI/oya-browser is an MCP server that oya, the HIPAA-compliant agentic browser, over MCP: browse, run playbooks, hand a tab to a person. Its tool list has not been published yet over http, requires no API key, and scores 62/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"oya": {
"url": "https://browser.getoya.ai/mcp/pool",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Oya, the HIPAA-compliant agentic browser, over MCP: browse, run playbooks, hand a tab to a person.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked skills against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in writing
Scrape, crawl, and map websites to Markdown or JSON via local CLI.
Create and edit PDFs: text, Markdown, tables, metadata and pages, with Japanese font embedding.
Any file → clean Markdown for AI agents: PDF, Office, EPUB, HTML, images, audio/video. Local MCP.
一键同步文章到多个内容平台,支持今日头条、WordPress、知乎、简书、掘金、CSDN、typecho各大平台,一次发布,多平台同步发布。解放个人生产力
MCP Security Weekly
Get CVE alerts and security updates for io.github.OyadotAI/oya-browser and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Oya Browser is a HIPAA-compliant browser for healthcare and regulated work: an AI browser on your desktop, and an agentic browser your agents run in the cloud or self-hosted, with every action on a tamper-evident audit trail. An agent completes a task once in natural language; Oya records the steps as a playbook that replays deterministically, without calling a model, and repairs individual steps when a page changes. People can watch any session and take control at any time.
This repository contains the community edition: the browser, the control plane, the web console, the TypeScript SDK and the CLI. HIPAA compliance and a signed BAA come with Oya Cloud and the enterprise edition.
ask() is saved with toPlaybook() and replayed with
play() using new inputs and no model calls. Each playbook is also exported as a Playwright
module. In a ten-site benchmark, nine sites replayed every recorded
step with healing disabled.
An agent session in the Oya desktop app, accelerated. The portal and patient data are fictional.
| Component | Version |
|---|---|
| Node.js | 20 or later |
| Docker | Docker Desktop or Docker Engine with buildx for all deployment examples; Compose 2.24 or later for Docker deployments |
| Deployment tools | kubectl + python3 for Kubernetes; AW |