by brightdata
A powerful Model Context Protocol (MCP) server that provides an all-in-one solution for public web access.
# Add to your Claude Code skills
git clone https://github.com/brightdata/brightdata-mcpGuides for using ai agents skills like brightdata-mcp.
Last scanned: 4/24/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig",
"severity": "high"
},
{
"type": "npm-audit",
"message": "express-rate-limit: express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network",
"severity": "high"
},
{
"type": "npm-audit",
"message": "file-type: file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "hono: Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true })",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-04-24T06:08:29.713Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}brightdata-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by brightdata. A powerful Model Context Protocol (MCP) server that provides an all-in-one solution for public web access. It has 2,494 GitHub stars.
brightdata-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/brightdata/brightdata-mcp" and add it to your Claude Code skills directory (see the Installation section above).
brightdata-mcp is primarily written in JavaScript. It is open-source under brightdata on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh brightdata-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
The Web MCP is your gateway to giving AI assistants true web capabilities. No more outdated responses, no more "I can't access real-time information" - just seamless, reliable web access that actually works.
Built by Bright Data, the world's #1 web data platform, this MCP server ensures your AI never gets blocked, rate-limited, or served CAPTCHAs.
Use the configuration wizard:
Perfect for users who want zero setup. Just add this URL to your MCP client:
https://mcp.brightdata.com/mcp?token=YOUR_API_TOKEN_HERE
Setup in Claude Desktop:
Bright Data Webhttps://mcp.brightdata.com/mcp?token=YOUR_API_TOKEN{
"mcpServers": {
"Bright Data": {
"command": "npx",
"args": ["@brightdata/mcp"],
"env": {
"API_TOKEN": "<your-api-token-here>"
}
}
}
}
💡 How the free tier works: Your account gets 5,000 credits/month (~$7.50 value), auto-renewed on the 1st with no credit card required. MCP requests draw from this shared pool — base tools (
search_engine,scrape_as_markdown,discover) cost 1 credit per request, whileweb_data_*tools cost 1 credit per record returned. Unused credits don't roll over, and when they run out requests stop (no surprise charges unless you've deposited funds). Pro mode is not included in the free tier and incurs additional charges based on usage.
GROUPS lets you enable curated tool bundles. Use comma-separated group
IDs such as ecommerce,browser.TOOLS adds explicit tool names on top of the selected groups.PRO_MODE=true (all tools) → GROUPS / TOOLS
(whitelist) → default rapid mode (base toolkit).search_engine, search_engine_batch,
scrape_as_markdown, scrape_batch, discover.custom is reserved; use TOOLS for bespoke picks.