← Back to search

@testingbot/mcp-server

GitHub Actions Scanned 5d ago

TestingBot's official MCP Server for AI-powered testing automation

npm
D
55.8 / 100

Versions

1.0.2latest
Jun 18, 2026
1.0.1
Dec 17, 2025
1.0.0
Oct 24, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 32

getBuilds
annotations: none low

Get a list of builds with optional pagination. Builds group related tests together.

getTestsForBuild
annotations: none low

Get all tests associated with a specific build ID.

deleteBuild
annotations: none low

Delete a build and all its associated tests by build ID.

createCdpSession
annotations: none low

Create a remote browser session on TestingBot and get its CDP (Chrome DevTools Protocol) URL for direct browser control. Use this to automate browsers via CDP clients like Puppeteer or Playwright.

name string build string platform string timeZone string browserName string screenResolution string
getBrowsers
annotations: none low

Get list of available browsers and platforms for testing. Optionally filter by type (web or mobile).

getDevices
annotations: none low

Get list of available mobile devices for testing (real devices and simulators).

uploadFile
annotations: none low

Upload a local file (APK, IPA, or ZIP) to TestingBot storage for mobile app testing. Returns an app_url for use in tests.

localFilePath string
uploadRemoteFile
annotations: none low

Upload a file from a remote URL to TestingBot storage. The file will be downloaded from the URL and stored.

remoteUrl string
getStorageFiles
annotations: none low

List all files in TestingBot storage with pagination.

deleteStorageFile
annotations: none low

Delete a file from TestingBot storage using its app_url.

appUrl string
startLiveSession
annotations: none low

Start an interactive live testing session on TestingBot. Opens a real browser or mobile device for manual testing. Supports both desktop browsers (Chrome, Firefox, Safari, Edge, IE) and mobile devices (iOS, Android).

desiredURL string
startDesktopLiveSession
annotations: none low

Convenience tool to start a desktop browser live testing session. Automatically sets platformType to

desiredURL string desiredOSVersion string
startMobileLiveSession
annotations: none low

Convenience tool to start a mobile device live testing session. Automatically sets platformType to

desiredURL string desiredDevice string desiredOSVersion string
getTeam
annotations: none low

Retrieve team settings and information including plan details, team size, and configuration.

getUsersInTeam
annotations: none low

Get a list of all users in your team with their roles and permissions.

getUserFromTeam
annotations: none low

Retrieve detailed information about a specific user in your team by their user ID.

takeScreenshot
annotations: none low

Take screenshots of a URL across multiple browsers and platforms. Returns a screenshot ID to retrieve results.

os string url string version string browserName string
retrieveScreenshots
annotations: none low

Retrieve screenshot results by screenshot ID. Returns URLs to the generated screenshots.

screenshotId string
getScreenshotList
annotations: none low

Get a list of all screenshot jobs with pagination.

getTunnelList
annotations: none low

Get a list of all active TestingBot tunnels. Tunnels allow you to test websites behind firewalls or on your local machine.

deleteTunnel
annotations: none low

Delete an active TestingBot tunnel by its ID. This will terminate the tunnel connection.

getFailureLogs
annotations: none low

Fetch and return session log file content (selenium, browser, chrome, vm, appium) for a test by session ID. Use this to debug failures — pass failuresOnly=true to extract only error/exception/stack-trace lines.

sessionId string
getTests
annotations: none low

Retrieve a list of recent tests with optional pagination. Returns test details including status, browser, platform, video and duration.

getTestDetails
annotations: none low

Get detailed information about a specific test by session ID. Includes logs, screenshots, video URLs, and execution metadata.

sessionId string
updateTest
annotations: none low

Update test metadata such as name, status (passed/failed), and other attributes. Useful for marking tests after execution.

name string build string extra string sessionId string
deleteTest
annotations: none low

Delete a test by session ID. This permanently removes the test and its associated data.

sessionId string
stopTest
annotations: none low

Stop a running test by session ID. This terminates the test execution immediately.

sessionId string
listTestFiles
annotations: none low

Scan a project directory and return test files for the detected framework. Read-only — never modifies files.

projectRoot string
setupTestingBot
annotations: none low

Detect the testing framework in a project and return the ready-to-paste TestingBot configuration snippet, install command, and env-var requirements. Read-only — never modifies files; the agent or user applies the snippet.

projectRoot string
getUserInfo
annotations: none low

Get current user account information including minutes used, plan details, and account status.

updateUserInfo
annotations: none low

Update user account information such as name, email, or other profile details.

email string lastName string firstName string
tb_login
annotations: none low

Authenticate with TestingBot — no API key or secret to copy or paste. By default it opens your browser, you

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 86

low
Tool 'uploadRemoteFile' has no annotations annotation_checker · 100%
low
Tool 'getStorageFiles' has no annotations annotation_checker · 100%
low
Tool 'deleteStorageFile' has no annotations annotation_checker · 100%
low
Tool 'startLiveSession' has no annotations annotation_checker · 100%
low
Tool 'createCdpSession' has no annotations annotation_checker · 100%
low
Tool 'getBrowsers' has no annotations annotation_checker · 100%
low
Tool 'getDevices' has no annotations annotation_checker · 100%
low
Tool 'uploadFile' has no annotations annotation_checker · 100%
low
Tool 'startDesktopLiveSession' has no annotations annotation_checker · 100%
low
Tool 'startMobileLiveSession' has no annotations annotation_checker · 100%
low
Tool 'getTeam' has no annotations annotation_checker · 100%
low
Tool 'getUsersInTeam' has no annotations annotation_checker · 100%
low
Tool 'getUserFromTeam' has no annotations annotation_checker · 100%
low
Tool 'takeScreenshot' has no annotations annotation_checker · 100%
low
Tool 'retrieveScreenshots' has no annotations annotation_checker · 100%
low
Tool 'getScreenshotList' has no annotations annotation_checker · 100%
low
Tool 'getTunnelList' has no annotations annotation_checker · 100%
low
Tool 'deleteTunnel' has no annotations annotation_checker · 100%
low
Tool 'getFailureLogs' has no annotations annotation_checker · 100%
low
Tool 'getTests' has no annotations annotation_checker · 100%
low
Tool 'getTestDetails' has no annotations annotation_checker · 100%
low
Tool 'updateTest' has no annotations annotation_checker · 100%
low
Tool 'deleteTest' has no annotations annotation_checker · 100%
low
Tool 'stopTest' has no annotations annotation_checker · 100%
low
Tool 'listTestFiles' has no annotations annotation_checker · 100%
low
Tool 'setupTestingBot' has no annotations annotation_checker · 100%
low
Tool 'getUserInfo' has no annotations annotation_checker · 100%
low
Tool 'updateUserInfo' has no annotations annotation_checker · 100%
low
Tool 'getBuilds' has no annotations annotation_checker · 100%
low
Tool 'getTestsForBuild' has no annotations annotation_checker · 100%
low
Tool 'deleteBuild' has no annotations annotation_checker · 100%
low
Tool 'tb_login' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in testingbot-mcp-server-edb242e/tests/lib/credentials.test.ts auth_checker · 95%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.5 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.1.3 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: createCdpSession manifest_parser · 70%
info
Tool: getBrowsers manifest_parser · 70%
info
Tool: getDevices manifest_parser · 70%
info
Tool: uploadFile manifest_parser · 70%
info
Tool: uploadRemoteFile manifest_parser · 70%
info
Tool: getStorageFiles manifest_parser · 70%
info
Tool: deleteStorageFile manifest_parser · 70%
info
Tool: startLiveSession manifest_parser · 70%
info
Tool: startDesktopLiveSession manifest_parser · 70%
info
Tool: startMobileLiveSession manifest_parser · 70%
info
Tool: getTeam manifest_parser · 70%
info
Tool: getUsersInTeam manifest_parser · 70%
info
Tool: getUserFromTeam manifest_parser · 70%
info
Tool: takeScreenshot manifest_parser · 70%
info
Tool: retrieveScreenshots manifest_parser · 70%
info
Tool: getScreenshotList manifest_parser · 70%
info
Tool: getTunnelList manifest_parser · 70%
info
Tool: deleteTunnel manifest_parser · 70%
medium
Permission: network access detected permission_analyzer · 80%
info
Tool: getFailureLogs manifest_parser · 70%
info
Tool: getTests manifest_parser · 70%
info
Tool: getTestDetails manifest_parser · 70%
info
Tool: updateTest manifest_parser · 70%
info
Tool: deleteTest manifest_parser · 70%
info
Tool: stopTest manifest_parser · 70%
info
Tool: listTestFiles manifest_parser · 70%
info
Tool: setupTestingBot manifest_parser · 70%
info
Tool: getUserInfo manifest_parser · 70%
info
Tool: updateUserInfo manifest_parser · 70%
info
Tool: getBuilds manifest_parser · 70%
info
Tool: getTestsForBuild manifest_parser · 70%
info
Tool: deleteBuild manifest_parser · 70%
info
Tool: tb_login manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (23) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 931 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%