Kryfto

Name: Kryfto
Author: ExceptionRegret

pnpm · by ExceptionRegret

The open-source web-browsing backend for AI agents & workflow engines. Ships a 42-tool MCP server for Claude Code/Cursor/Codex, a full REST API for n8n/Zapier/Make, federated multi-engine search, anti-bot stealth, and enterprise infrastructure (Postgres, Redis, BullMQ, MinIO). Self-host for $5/mo flat

8 92.2M/wk 0 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 68d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Browser

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "kryfto": {
      "env": {
        "API_TOKEN": "<your-token>",
        "API_BASE_URL": "http://localhost:8080"
      },
      "args": [
        "/absolute/path/to/kryfto/packages/mcp-server/dist/index.js"
      ],
      "command": "node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/kryfto)](https://mcppedia.org/s/kryfto)

Read me

What Kryfto does

Kryfto is a comprehensive framework for automated data extraction, web crawling, and browser session execution.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'pnpm' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

55/100across 5 weighted dimensions

How we score →

0255075100

−45

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

12 fixed

CVE-2026-24131medium · fixedCVSS 4

pnpm has Path Traversal via arbitrary file permission modification

### Summary When pnpm processes a package's `directories.bin` field, it uses `path.join()` without validating the result stays within the package root. A malicious npm package can specify `"directories": {"bin": "../../../../tmp"}` to escape the package directory, causing pnpm to chmod 755 files at arbitrary locations. **Note:** Only affects Unix/Linux/macOS. Windows is not affected (`fixBin` gated by `EXECUTABLE_SHEBANG_SUPPORTED`). ### Details Vulnerable code in `pkg-manager/package-bins/src

Affected: >= 0Fixed in 10.28.2source →

CVE-2026-23888low · fixedCVSS 3.1

pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)

### Summary A path traversal vulnerability in pnpm's binary fetcher allows malicious packages to write files outside the intended extraction directory. The vulnerability has two attack vectors: (1) Malicious ZIP entries containing `../` or absolute paths that escape the extraction root via AdmZip's `extractAllTo`, and (2) The `BinaryResolution.prefix` field is concatenated into the extraction path without validation, allowing a crafted prefix like `../../evil` to redirect extracted files outsid

Affected: >= 0Fixed in 10.28.1source →

CVE-2026-23889low · fixedCVSS 3.1

pnpm has Windows-specific tarball Path Traversal

### Summary A path traversal vulnerability in pnpm's tarball extraction allows malicious packages to write files outside the package directory on Windows. The path normalization only checks for `./` but not `.\`. On Windows, backslashes are directory separators, enabling path traversal. **This vulnerability is Windows-only.** ### Details **1. Incomplete Path Normalization (`store/cafs/src/parseTarball.ts:107-110`)** ```typescript if (fileName.includes('./')) { fileName = path.posix.join('/'

Affected: >= 0Fixed in 10.28.1source →

CVE-2026-23890low · fixedCVSS 3.1

pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin

### Summary A path traversal vulnerability in pnpm's bin linking allows malicious npm packages to create executable shims or symlinks outside of `node_modules/.bin`. Bin names starting with `@` bypass validation, and after scope normalization, path traversal sequences like `../../` remain intact. ### Details The vulnerability exists in the bin name validation and normalization logic: **1. Validation Bypass (`pkg-manager/package-bins/src/index.ts`)** The filter allows any bin name starting wit

Affected: >= 0Fixed in 10.28.1source →

CVE-2026-24056low · fixedCVSS 3.1

pnpm has symlink traversal in file:/git dependencies

### Summary When pnpm installs a `file:` (directory) or `git:` dependency, it follows symlinks and reads their target contents without constraining them to the package root. A malicious package containing a symlink to an absolute path (e.g., `/etc/passwd`, `~/.ssh/id_rsa`) causes pnpm to copy that file's contents into `node_modules`, leaking local data. **Preconditions:** Only affects `file:` and `git:` dependencies. Registry packages (npm) have symlinks stripped during publish and are NOT affe

Affected: >= 0Fixed in 10.28.2source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Kryfto safe to use?: Kryfto has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Kryfto?: Kryfto supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Kryfto?: Kryfto is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Kryfto actively maintained?: Kryfto is recently maintained — last commit was 68 days ago. It has 8 GitHub stars.

Similar servers

Others in browser

View all →

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.4k 4

Firecrawl Mcp95

MCP server for Firecrawl — search, scrape, and interact with the web. Supports both cloud and self-hosted instances. Features include web search, scraping, page interaction, batch processing, and LLM-powered content analysis.

6.4k 5

Apify Mcp Server94

The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.

1.3k 1

Open WebSearch94

Multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval — skill-guided workflows, no API keys.

1.3k 4

MCP Security Weekly

Get CVE alerts and security updates for Kryfto and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

{ "mcpServers": { "kryfto": { "env": { "API_TOKEN": "<your-token>", "API_BASE_URL": "http://localhost:8080" }, "args": [ "/absolute/path/to/kryfto/packages/mcp-server/dist/index.js" ], "command": "node" } } }

✨ Core Features

Kryfto is a comprehensive framework for automated data extraction, web crawling, and browser session execution.

🤖 AI Agent Ready: Ships with a built-in Model Context Protocol (MCP) server exposing 42+ tools. Instantly give Claude, Cursor, or Codex the ability to search, browse, extract, fact-check, run continuous research agents, and benchmark search quality on the live web.

🕵️‍♂️ Advanced Stealth & Anti-Bot Engine: Unified anti-bot layer with 12 rotated modern User-Agents (Chrome 130–133, Edge 131/133), per-browser Sec-Ch-Ua client hints, Sec-Fetch-* headers, Chromium-only Accept strings, engine-appropriate Referer headers, per-engine request spacing delays, canvas fingerprint randomization, WebGL vendor/renderer spoofing, navigator.platform matching, hardwareConcurrency randomization, WebRTC IP leak prevention, and an RFC 6265-compliant in-memory cookie jar with 30min TTL. New in v3.5.1: Consistent cross-signal fingerprints (UA matched to platform, screen, WebGL, fonts, and audio), 20-point browser evasion suite, humanized browser interactions (Bezier curve mouse movements with micro-overshoots, realistic typing with typos, smooth scrolling), per-domain browser session pool with 30min TTL, and browser-based CAPTCHA solving for Cloudflare Turnstile, reCAPTCHA v2, hCaptcha, and Datadome — all without external paid APIs. reCAPTCHA image grids are classified locally via CLIP vision (clip-vit-large-patch14), and audio challenges are transcribed locally via Whisper, both using @xenova/transformers.

🛡️ Zero Trace Privacy: Execute purely in-memory HTTP extractions wrapping our bot-evasion without persisting any telemetry or artifacts to the Postgres database.

⚙️ Workflow Engine Native: Fully documented OpenAPI spec makes it trivial to drop into n8n, Zapier, Make, or custom Python/TypeScript pipelines.

🖥️ Admin Dashboard: Built-in React admin UI (port 3001) for managing tokens, projects, jobs, crawls, audit logs, and per-role rate limits. Includes an interactive API Playground for testing any endpoint live and an Examples page with ready-to-use cURL commands. Dark-themed SPA served as a separate nginx container.

☁️ Enterprise Infrastructure: Backed by Postgres for persistence, Redis + BullMQ for reliable concurrent job queuing, and MinIO/S3 for long-term artifact storage.

📊 SLO Dashboard & Eval Suite: Built-in reliability monitoring with per-tool success rates, latency percentiles (p50/p95/p99), deterministic request replay, and a 10-query benchmark suite for nightly regression testing.

🔄 Continuous Research Agent: Deploy autonomous background research loops that search, monitor, diff pages, and fire webhook alerts — all from a single MCP tool call.

# Option 1: Auto-generate a secure .env with random tokens & passwords node scripts/generate-env.mjs -o .env # Opti ... [View full README on GitHub](https://github.com/ExceptionRegret/Kryfto#readme)

Frequently Asked Questions

Is Kryfto safe to use?

Kryfto has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Kryfto?

Kryfto supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Kryfto?

Kryfto is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Kryfto actively maintained?

Kryfto is recently maintained — last commit was 68 days ago. It has 8 GitHub stars.

✨ Core Features

Kryfto is a comprehensive framework for automated data extraction, web crawling, and browser session execution.

🛡️ Zero Trace Privacy: Execute purely in-memory HTTP extractions wrapping our bot-evasion without persisting any telemetry or artifacts to the Postgres database.

⚙️ Workflow Engine Native: Fully documented OpenAPI spec makes it trivial to drop into n8n, Zapier, Make, or custom Python/TypeScript pipelines.

☁️ Enterprise Infrastructure: Backed by Postgres for persistence, Redis + BullMQ for reliable concurrent job queuing, and MinIO/S3 for long-term artifact storage.

🔄 Continuous Research Agent: Deploy autonomous background research loops that search, monitor, diff pages, and fire webhook alerts — all from a single MCP tool call.

Kryfto

Install in your client