@browserstack/mcp-server 1.2.19 → 1.2.20-beta.1

package/dist/lib/apiClient.js

@@ -55,7 +55,6 @@ function getAxiosAgent() {
                 host: proxyHost,
                 port: Number(proxyPort),
                 ca,
-                rejectUnauthorized: false, // Set to true if you want strict SSL
             });
         }
         else {
@@ -67,7 +66,6 @@ function getAxiosAgent() {
         // CA only
         return new https.Agent({
             ca: fs.readFileSync(caCertPath),
-            rejectUnauthorized: false, // Set to true for strict SSL
         });
     }
     // Default agent (no proxy, no CA)

package/dist/tools/applive-utils/start-session.js

@@ -5,7 +5,6 @@ import { uploadApp } from "./upload-app.js";
 import { getBrowserStackAuth } from "../../lib/get-auth.js";
 import { findDeviceByName } from "./device-search.js";
 import { pickVersion } from "./version-utils.js";
-import childProcess from "child_process";
 import envConfig from "../../config.js";
 /**
  * Start an App Live session: filter, select, upload, and open.
@@ -69,33 +68,44 @@ export async function startSession(args, options) {
     });
     const launchUrl = `https://app-live.browserstack.com/dashboard#${params.toString()}&device=${deviceParam}`;
     if (!envConfig.REMOTE_MCP) {
-        openBrowser(launchUrl);
+        const openCommand = getOpenBrowserCommand(launchUrl);
+        if (openCommand) {
+            return [
+                `App Live session URL: ${launchUrl}${note}`,
+                ``,
+                `To open the session in the default browser, run:`,
+                `    ${openCommand}`,
+            ].join("\n");
+        }
     }
     return launchUrl + note;
 }
 /**
- * Opens the launch URL in the default browser.
- * @param launchUrl - The URL to open.
- * @throws Will throw an error if the browser fails to open.
+ * Returns the platform-appropriate shell command to open `launchUrl` in the
+ * default browser, or null if the URL is not a trusted BrowserStack URL.
+ *
+ * The command is returned to the MCP client so the host agent can prompt the
+ * user before executing it. The server itself never spawns a process, which
+ * eliminates the command-injection surface entirely.
  */
-function openBrowser(launchUrl) {
+function getOpenBrowserCommand(launchUrl) {
+    let parsed;
     try {
-        const command = process.platform === "darwin"
-            ? ["open", launchUrl]
-            : process.platform === "win32"
-                ? ["cmd", "/c", "start", launchUrl]
-                : ["xdg-open", launchUrl];
-        // nosemgrep:javascript.lang.security.detect-child-process.detect-child-process
-        const child = childProcess.spawn(command[0], command.slice(1), {
-            stdio: "ignore",
-            detached: true,
-        });
-        child.on("error", (error) => {
-            logger.error(`Failed to open browser automatically: ${error}. Please open this URL manually: ${launchUrl}`);
-        });
-        child.unref();
+        parsed = new URL(launchUrl);
+    }
+    catch {
+        logger.error(`Refusing to surface malformed URL: ${launchUrl}`);
+        return null;
     }
-    catch (error) {
-        logger.error(`Failed to open browser automatically: ${error}. Please open this URL manually: ${launchUrl}`);
+    if (parsed.protocol !== "https:" ||
+        !/(^|\.)browserstack\.com$/i.test(parsed.hostname)) {
+        logger.error(`Refusing to surface untrusted URL: ${launchUrl}`);
+        return null;
     }
+    const quoted = `"${parsed.toString()}"`;
+    if (process.platform === "darwin")
+        return `open ${quoted}`;
+    if (process.platform === "win32")
+        return `cmd /c start "" ${quoted}`;
+    return `xdg-open ${quoted}`;
 }

package/dist/tools/live-utils/start-session.js

@@ -1,5 +1,4 @@
 import logger from "../../logger.js";
-import childProcess from "child_process";
 import { filterDesktop } from "./desktop-filter.js";
 import { filterMobile } from "./mobile-filter.js";
 import { PlatformType, } from "./types.js";
@@ -39,10 +38,19 @@ export async function startBrowserSession(args, config) {
     const url = args.platformType === PlatformType.DESKTOP
         ? buildDesktopUrl(args, entry, isLocal)
         : buildMobileUrl(args, entry, isLocal);
+    const note = entry.notes ? `, ${entry.notes}` : "";
     if (!envConfig.REMOTE_MCP) {
-        openBrowser(url);
+        const openCommand = getOpenBrowserCommand(url);
+        if (openCommand) {
+            return [
+                `Live session URL: ${url}${note}`,
+                ``,
+                `To open the session in the default browser, run:`,
+                `    ${openCommand}`,
+            ].join("\n");
+        }
     }
-    return entry.notes ? `${url}, ${entry.notes}` : url;
+    return `${url}${note}`;
 }
 function buildDesktopUrl(args, e, isLocal) {
     const params = new URLSearchParams({
@@ -79,24 +87,33 @@ function buildMobileUrl(args, d, isLocal) {
     });
     return `https://live.browserstack.com/dashboard#${params.toString()}`;
 }
-// ——— Open a browser window ———
-function openBrowser(launchUrl) {
+// ——— Build a browser-open command for the host agent ———
+/**
+ * Returns the platform-appropriate shell command to open `launchUrl` in the
+ * default browser, or null if the URL is not a trusted BrowserStack URL.
+ *
+ * The command is returned to the MCP client so the host agent can prompt the
+ * user before executing it. The server itself never spawns a process, which
+ * eliminates the command-injection surface entirely.
+ */
+function getOpenBrowserCommand(launchUrl) {
+    let parsed;
     try {
-        const command = process.platform === "darwin"
-            ? ["open", launchUrl]
-            : process.platform === "win32"
-                ? ["cmd", "/c", "start", `""`, `"${launchUrl}"`]
-                : ["xdg-open", launchUrl];
-        // nosemgrep:javascript.lang.security.detect-child-process.detect-child-process
-        const child = childProcess.spawn(command[0], command.slice(1), {
-            stdio: "ignore",
-            detached: true,
-            ...(process.platform === "win32" ? { shell: true } : {}),
-        });
-        child.on("error", (err) => logger.error(`Failed to open browser: ${err}. URL: ${launchUrl}`));
-        child.unref();
+        parsed = new URL(launchUrl);
+    }
+    catch {
+        logger.error(`Refusing to surface malformed URL: ${launchUrl}`);
+        return null;
     }
-    catch (err) {
-        logger.error(`Failed to launch browser: ${err}. URL: ${launchUrl}`);
+    if (parsed.protocol !== "https:" ||
+        !/(^|\.)browserstack\.com$/i.test(parsed.hostname)) {
+        logger.error(`Refusing to surface untrusted URL: ${launchUrl}`);
+        return null;
     }
+    const quoted = `"${parsed.toString()}"`;
+    if (process.platform === "darwin")
+        return `open ${quoted}`;
+    if (process.platform === "win32")
+        return `cmd /c start "" ${quoted}`;
+    return `xdg-open ${quoted}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@browserstack/mcp-server",
-  "version": "1.2.19",
+  "version": "1.2.20-beta.1",
   "description": "BrowserStack's Official MCP Server",
   "mcpName": "io.github.browserstack/mcp-server",
   "main": "dist/index.js",