Skyvern MCP Server: Setup for Claude, Cursor and Other Apps

• Opens a cloud browser session you can reuse

  Starts a new browser session on Skyvern Cloud. The other browser tools work inside it, so you open one first.

  Try: “Open a browser session so we can work on a site.”

  Write · skyvern_browser_session_create

• Closes a browser session

  Ends a browser session and shuts the browser down. Close sessions when you are done so they do not keep running.

  Try: “Close the browser session when we are finished.”

  Delete · skyvern_browser_session_close

• Lists your open browser sessions

  Shows the browser sessions on your account so you can find one to reuse or close.

  Try: “Which browser sessions do I have open?”

  Read · skyvern_browser_session_list

• Opens a URL in the browser

  Opens a web address and returns the final URL after redirects and the page title.

  Try: “Go to news.ycombinator.com.”

  Network · skyvern_navigate

• Does what you describe on the page, in plain English

  Carries out actions you describe in plain words, and you can chain several, such as closing a cookie banner then clicking Sign In. The tool description says never to put passwords in the prompt.

  Try: “Close the cookie banner, then click Sign In.”

  Write · skyvern_act

• Pulls data from the page into structured JSON

  Uses an AI model to read the current page and return the data you ask for. You can give it a JSON schema to fix the shape of the answer. Navigate to the page first.

  Try: “Get the title and points of the top 10 posts on this page as JSON.”

  Network · skyvern_extract

• Answers a yes/no question about the page

  Checks a condition on the current page and returns true or false with a reason. It is the cheapest AI tool for yes/no checks.

  Try: “Is the user logged in on this page?”

  Network · skyvern_validate

• Takes a screenshot of the page

  Captures an image of the current page so you can see what the browser sees.

  Try: “Take a screenshot of the checkout page.”

  Network · skyvern_screenshot

• Signs in to a site with a saved credential

  Logs into a website using a credential stored in Skyvern, including two-factor codes. The password is not shown to the assistant. You create the credential beforehand with the Skyvern command line.

  Try: “Log in to this site with my saved work credential.”

  Write · skyvern_login

• Clicks an element

  Clicks something on the page, found by selector or by a description of it. Clicking can submit forms or trigger actions on the site.

  Try: “Click the Download CSV button.”

  Write · skyvern_click

• Types text into a field

  Types text into a form field on the page, found by selector or description.

  Try: “Type "wireless keyboard" into the search box.”

  Write · skyvern_type

• Picks an option in a dropdown

  Selects a value in a dropdown menu on the page.

  Try: “Pick "Last 30 days" in the date range dropdown.”

  Write · skyvern_select_option

• Presses a keyboard key

  Sends a key press such as Enter or Tab to the page.

  Try: “Press Enter to submit the search.”

  Write · skyvern_press_key

• Scrolls the page

  Scrolls the page so more content loads or comes into view.

  Try: “Scroll down to load more results.”

  Network · skyvern_scroll

• Runs JavaScript on the page

  Runs JavaScript you or the assistant write inside the current page and returns the result. It can read or change anything on that page.

  Try: “Run JavaScript to count the rows in the results table.”

  Runs code · skyvern_evaluate

• Uploads a file to a page

  Uploads a file through a file field on the page.

  Try: “Upload invoice.pdf in the attachment field.”

  Write · skyvern_file_upload

• Runs a one-off hands-off browser task

  Hands a whole goal to Skyvern's autonomous agent, which works out the steps itself. The description calls it the highest-cost option and says to use it for trials, not repeated automations.

  Try: “Find the cheapest flight from Berlin to Rome next Friday and stop before booking.”

  Write · skyvern_run_task

• Saves a multi-step automation as a workflow

  Creates a reusable, versioned workflow from a YAML or JSON definition. Use it for multi-page automations you want to run again or on a schedule.

  Try: “Create a workflow that logs in, downloads last month's invoice and returns the total.”

  Write · skyvern_workflow_create

• Starts a saved workflow with parameters

  Starts a new run of a workflow by its ID and returns immediately. Check progress with the status tool.

  Try: “Run my invoice-download workflow for March.”

  Write · skyvern_workflow_run

• Checks how a workflow run is going

  Returns the state and results of a workflow run so you can see if it finished or failed.

  Try: “Is the invoice workflow run finished?”

  Read · skyvern_workflow_status

• Permanently deletes a workflow

  Deletes a workflow for good. It needs force set to true so it cannot happen by accident.

  Try: “Delete the old test workflow.”

  Delete · skyvern_workflow_delete

• Lists your saved credentials

  Lists the credentials stored in Skyvern. It does not return passwords.

  Try: “Which logins do I have saved in Skyvern?”

  Read · skyvern_credential_list

• Permanently deletes a saved credential

  Deletes a stored credential. The tool description says this cannot be undone.

  Try: “Delete the credential for the old CRM login.”

  Delete · skyvern_credential_delete

• Schedules a workflow to run on a timetable

  Creates a schedule so a workflow runs automatically, for example every morning.

  Try: “Run the price-check workflow every day at 8am.”

  Write · skyvern_schedule_create

Watch out for

• It can delete workflows, credentials and folders

  Delete tools are registered for workflows, saved credentials, browser profiles, folders and schedules. Credential deletion cannot be undone. github.com

• It acts on real websites with your logins

  It can click, type, upload files and submit forms, and log in with stored credentials. Watch what it does before pointing it at sites where actions have effects. github.com

• It can run JavaScript on any page it opens

  The evaluate tool runs script code inside the page and has no sandbox switch. Do not let it open sites you do not trust. github.com

• Page content goes through Skyvern Cloud in hosted mode

  Hosted use sends page data to Skyvern. Run it locally against your own Skyvern server if that matters. github.com

Security advisories