This release adds 1 notable feature for engineering teams evaluating rollout.
Published 24d
MCP Browser & Automation
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai-agents
ai-tools
apple-silicon
applescript
automation
browser-automation
+14 more
claude
claude-code
cursor
devtools
llm-tools
macos
mcp
mcp-server
model-context-protocol
safari
safari-mcp
web-automation
webkit
windsurf
Summary
AI summaryAdded opt‑in shared HTTP transport for Safari MCP to reduce memory usage
Full changelog
Added
- Shared HTTP transport (opt-in
SAFARI_MCP_HTTP) — run a single Safari MCP daemon that many Claude Code sessions share over StreamableHTTP, instead of a process per session (~17→1 in heavy use; lower memory and startup cost). The default transport stays stdio, so existing npm users see zero behavior change — fully opt-in. Enable withSAFARI_MCP_HTTP=1(optionalSAFARI_MCP_HTTP_PORT). Design notes indocs/http-transport-design.md.
Changed
safari_doctornow reports the macOS version and flags macOS 26+ (Tahoe), whereCGEvent.postToPidnative clicks/keys can silently no-op even with Accessibility granted (#29). Bug reports now carry the single most relevant diagnostic fact; affected users are steered towardsafari_evaluate/ extension-based clicks for trust-gated forms.
Internal
- Extracted the tab-ownership state machine into
ownership-state.jswith behavioral tests asserting cross-client isolation and TTL expiry (#39).
96 tools total. macOS only. npx safari-mcp
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]