Skip to content

This release adds 1 notable feature for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-tools apple-silicon applescript automation browser-automation
+14 more
claude claude-code cursor devtools llm-tools macos mcp mcp-server model-context-protocol safari safari-mcp web-automation webkit windsurf

Summary

AI summary

Fixed multiple reliability bugs and added visibility spoofing for backgrounded tabs.

Full changelog

Fixed

  • safari_evaluate resolves async scriptsawait / .then() / leading async scripts no longer return (undefined). AppleScript do JavaScript never awaits a Promise, so async work is now started into a page global and polled from the Node side. The shared sync/async normalizer also no longer crashes on a trailing })(), and an un-awaited fetch( is no longer misclassified as async.
  • safari_wait_for actually waits — its in-page async wait loop returned immediately (do JavaScript does not await); the wait loop now runs on the Node side, re-checking each tick.
  • safari_click no longer false-reports success — synthetic clicks dropped by event.isTrusted-gated handlers (Clutch, G2, Cloudflare-class WAFs) are detected via a page fingerprint and escalated to a real OS-level CGEvent click.
  • navigate no longer returns a stale page as success — a cold/crashed helper daemon could make set URL silently no-op; navigate now retries via the daemon-independent osascript subprocess and throws a clear error if the page still did not move.
  • Tab targeting no longer drifts to the user's tab during concurrent browsing — window.name identity marker survives navigation, single-call resolution, fail-safe re-anchor.

Added

  • Visibility spoofing keeps backgrounded automation tabs rendering — document.visibilityState is pinned to visible so SPAs (e.g. the Meta developer console) don't blank out.

Full Changelog: https://github.com/achiya-automation/safari-mcp/compare/v2.10.10...v2.11.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track achiya-automation/safari-mcp

Get notified when new releases ship.

Sign up free

About achiya-automation/safari-mcp

Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.

All releases →

Related context

Earlier breaking changes

  • v2.10.5 npm audit gate now fails build on high or critical advisories.

Beta — feedback welcome: [email protected]