Render Mcp

io.github.RodRomer由 GitHub 帳號 RodRomer 發布v0.7.4更新於 Oct 28, 2026

Hosted browser for AI agents: screenshots, post-JS DOM, console, WCAG. No install, no API key.

已驗證Streamable HTTP可網頁執行網頁搜尋與抓取瀏覽器自動化

概覽

AI 產生的概覽

給 AI 助理用的託管無頭瀏覽器:截圖、執行 JavaScript 後的 DOM、頁面診斷、元素檢查與 PDF 匯出,免安裝、免 API 金鑰。

可以做什麼
  • 對網址截圖,可整頁或指定視窗尺寸,回傳 PNG
  • 取得 JavaScript 執行後的 DOM,可等待指定 CSS 選擇器
  • 載入頁面並回報主控台錯誤、失敗的請求以及 4xx/5xx 回應
  • 檢查某個 CSS 選擇器:盒模型、計算樣式、是否在視窗內、被哪個元素遮住、是否被上層元素隱藏
  • 將頁面渲染成 PDF,可選橫向
適用情境
適合助理需要真正「看到」頁面、而不只是抓取內容的情況:確認部署或版面是否正確、讀取對一般抓取只回傳空殼的單頁應用、診斷空白或異常頁面、說明某個元素為何沒有顯示。主要針對無法在本機執行瀏覽器程序的用戶端。
執行需求
透過 streamable HTTP 連線的遠端 MCP 端點,免安裝、免帳號、免 API 金鑰與設定。網址必須是含 https:// 的絕對位址。頁面需可公開存取,並在 20 秒導覽時限內載入完成。
安裝前請注意
送出的每個網址都由 Cloudflare 網路上的第三方伺服器抓取,頁面內容會經過該服務;README 表示不儲存或記錄網址與內容,只統計工具名稱、結果與耗時。私有與內網位址會被拒絕。不支援登入,需驗證的頁面只會呈現登入頁。不支援注入 JavaScript。服務仍在早期且免費,未提供可用性保證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Render Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.RodRomer%2Frender-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "render": {
      "type": "http",
      "url": "https://render.makermargins.com/mcp"
    }
  }
}

README

render-mcp

Gives an AI agent a real browser. Screenshots, PDFs, and the HTML a page produces after JavaScript has run.

No API key. No signup. No account. Point your client at a URL and it works.

https://render.makermargins.com/mcp

Why this exists

An agent can fetch a URL. It cannot see one.

Ask an assistant to check whether a page looks right, or to read a site built with React, and it hits a wall: a plain HTTP fetch returns an empty shell and a loading spinner. The content is built by JavaScript that never runs.

The usual answer is a rendering API — but every one of them requires you to sign up, verify an email, and paste an API key. An agent working on its own can't do any of that. It has no inbox and no card. A free tier it cannot register for is worth nothing to it.

This server needs none of it. It runs on Cloudflare's network, launches a real headless browser, and hands back what the page actually looks like.

Install

Claude Code — as a plugin (one command, and updates arrive automatically)

/plugin marketplace add RodRomer/render-mcp/plugin install render@render-mcp

Claude Code — directly

bash
claude mcp add --transport http render https://render.makermargins.com/mcp

Claude Desktop, Cursor, and other clients — add to your MCP config:

json
{  "mcpServers": {    "render": {      "type": "http",      "url": "https://render.makermargins.com/mcp"    }  }}

That's the whole setup. Nothing to install, nothing to configure, no credentials.

Tools

screenshot_url

See a page as a person would. Returns a PNG.

ArgumentTypeNotes
urlstringRequired. Absolute, including https://
full_pagebooleanCapture the whole scrollable page. Default false
widthnumberViewport width, 320–2560. Default 1280
heightnumberViewport height, 240–2000. Default 800

Good for: confirming a deployment looks right, checking a layout, seeing what a user sees.

rendered_html

The DOM after JavaScript has executed. Returns HTML text.

ArgumentTypeNotes
urlstringRequired. Absolute, including https://
wait_forstringCSS selector to wait for, if content loads late
max_charsnumberTruncation limit, 1,000–500,000. Default 100000

Good for: single-page apps, anything where a plain fetch returns a shell.

page_diagnostics

Load a page and report what went wrong: JavaScript console errors, failed network requests, and any 4xx/5xx responses. Returns a readable summary.

ArgumentTypeNotes
urlstringRequired. Absolute, including https://
include_warningsbooleanInclude warnings and info, not just errors. Default false
widthnumberViewport width, 320–2560. Default 1280
heightnumberViewport height, 240–2000. Default 800

Good for: a deployment that might have shipped a bug, a page that loads blank, a site that "looks broken" and you need to know why.

Stated honestly: this is not a rare capability. Microsoft's @playwright/mcp returns console messages, and Google's chrome-devtools-mcp returns them with source-mapped stack traces across 29 tools. Both are excellent, both are better resourced than this, and between them they are downloaded around 34 million times a month. If you can run a local process, use one of them.

The one thing neither can do is run where nothing can be installed. They need npx, Node, and browser binaries, or a local Chrome. This needs a URL. That is the whole of the difference, and it only matters if you are in that situation.

inspect_element

Answers "why isn't this element showing where I expect?" for a CSS selector.

ArgumentTypeNotes
urlstringRequired. Absolute, including https://
selectorstringRequired. CSS selector, e.g. .buy-button
max_matchesnumberHow many matches to report, 1–10. Default 3
widthnumberViewport width, 320–2560. Default 1280
heightnumberViewport height, 240–2000. Default 800

Leads with a diagnosis, then the numbers: resolved box model, computed display / visibility / opacity / position / z-index, colours, whether it's inside the viewport, and whether another element is covering it.

The useful part is that it walks up the tree. The usual reason an element is missing is not the element — it's an ancestor, and the answer you want is which one:

--- match 1: button#buy  HIDDEN BY AN ANCESTOR — div.modal.panel has display:none. The element itself is fine.

It also catches the case no single property reveals. Content inside a closed <details> keeps a normal box and reports display:block, visibility:visible, opacity:1 — everything looks fine, and it still doesn't paint:

  NOT RENDERED — it sits inside details.fees, which is not displaying its  contents because of a closed <details>.  Box: 70x27 ...  display:block  visibility:visible  opacity:1

Good for: an element that "should be there", a click landing on the wrong thing, verifying a CSS change actually applied. Cascade resolution and layout cannot be derived from reading HTML and CSS — this is the one thing a browser is strictly required for.

url_to_pdf

Render a page to PDF as a browser would print it.

ArgumentTypeNotes
urlstringRequired. Absolute, including https://
landscapebooleanDefault false

Good for: archiving a page, turning a rendered report into a document.

What it won't do

Stated plainly, so an agent doesn't waste calls discovering them:

  • No private networks. Loopback, RFC1918 ranges, 169.254.x.x, .internal and .local hostnames are refused. This server runs inside Cloudflare's network and an unvalidated URL would be a server-side request forgery.
  • No logins. There's no session, so anything behind authentication renders as its login page.
  • 20 second navigation limit. Very slow pages will time out.
  • No JavaScript injection. It renders pages; it doesn't run your code on them.

Failures come back as readable text explaining what went wrong, not as protocol errors — so an agent can route around them rather than crashing.

Privacy

URLs and page content are never stored or logged. Each call launches a browser, does the work, hands back the result, and closes it. Nothing about what you asked for is retained.

One thing is counted, and it's worth stating precisely rather than hiding behind "anonymised":

RecordedNot recorded
Which tool ran (screenshot_url, …)The URL, or any part of it
How it ended (ok, timeout, capacity, …)Your IP address
How long it took, in millisecondsAny header, cookie or credential
Any page content, image or PDF

That's three fields with no way to tie them to a request, a person or a site. The function that writes them is never handed the URL in the first place, so it cannot record one by accident — see count() in src/index.js.

It exists for one reason: this server is free, and the only way to decide whether it's worth keeping alive is knowing whether anything calls it.

The counts are public — no login, no dashboard:

https://render.makermargins.com/stats

Development

bash
npm installnpm test          # 279 tests, no network or browser needednpm run test:dom  # 39 DOM tests, headless Edge/Chrome, no networknpm run dev       # local workernpm run deploy    # to Cloudflare

Two layers, both tested outside their host:

  • src/protocol.js — the MCP request/response surface as pure functions, with no Cloudflare or browser dependency. Every URL validation and SSRF rule is proven under plain Node before anything deploys.
  • src/inspect-page.js — the half of inspect_element that runs inside the page. It closes over nothing, so any real DOM can execute it. Its tests build fixture pages in headless Edge and assert on real computed styles and real geometry. A mocked DOM would prove nothing here: the entire premise of the tool is that these values only exist once a browser has resolved the cascade and run layout.

src/index.js is a thin shell — transport in, browser work out, prose formatting on the way back.

If Node isn't installed, npm run test:nonode runs the protocol suite in headless Edge instead. It strips only the export/import keywords and executes the same source.

When testing against a live page, use a neutral URL

Use https://example.com — it is reserved by IANA for exactly this — or httpstat.us for error paths. Do not point live tests at makermargins.com.

The reason is not politeness. That site has Cloudflare Web Analytics, whose beacon is injected into HTML responses for browser-like requests. This server drives a real headless browser, so every screenshot or audit of that site executes the beacon and registers as a visitor — inflating the traffic figures of the very asset the numbers are meant to measure. An instrument that counts its own operator measures nothing.

Status

Early and free. Built to find out whether MCP registry discovery actually works. If it gets used, it'll be maintained; if it doesn't, that's a useful answer too.

Issues and pull requests welcome.

How this was built

Written by Claude, directed by a human, and stated here rather than left to be inferred.

That is worth knowing when judging it, so the relevant facts are these: 318 tests cover the protocol surface, the routing table, the usage counter, the landing page and the plugin manifests, and the parts that need a real browser are tested against real fixture pages rather than a mock DOM. Every platform claim in this README was checked against a primary source, and several widely-repeated ones turned out to be wrong.

None of that makes it good on its own — but it is checkable, which is more useful than a promise.

Licence

MIT

來源:README.md,提交 4b71e66

工具

0
SourceWeft 尚未讀取此伺服器的工具。

版本歷史

1
  1. v0.7.4最新Sep 16, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分