From 58861dc1bf79b6974754e256305e7e3603f1df53 Mon Sep 17 00:00:00 2001 From: DevHusaninAi Date: Thu, 17 Sep 2026 17:16:00 +0500 Subject: [PATCH 1/3] =?UTF-8?q?Add=20DevHusnainAi/zerodom=20=F0=9F=A4=96?= =?UTF-8?q?=F0=9F=A4=96=F0=9F=A4=96?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 45f85250f..9c1a882d1 100644 --- a/README.md +++ b/README.md @@ -510,6 +510,7 @@ Web content access and automation capabilities. Enables searching, scraping, and - [Cubenest/rrweb-stack](https://github.com/Cubenest/rrweb-stack) [![Cubenest/rrweb-stack MCP server](https://glama.ai/mcp/servers/Cubenest/rrweb-stack/badges/score.svg)](https://glama.ai/mcp/servers/Cubenest/rrweb-stack) 📇 🏠 - Local-first MCP server (@peekdev/mcp) + Chrome extension that records your real authenticated browser session (rrweb DOM + console + network, PII-masked, to local SQLite) and lets AI coding agents query it or drive the browser. No cloud, no telemetry. - [Custodia-Admin/pagebolt-mcp](https://github.com/Custodia-Admin/pagebolt-mcp) [![Custodia-Admin/pagebolt-mcp MCP server](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp) 📇 ☁️ - MCP server for screenshots, PDFs, OG images, and narrated video recording from Claude Desktop, Cursor, and Windsurf. - [dashi96/chromium-bridge](https://github.com/dashi96/chromium-bridge) [![dashi96/chromium-bridge MCP server](https://glama.ai/mcp/servers/@dashi96/chromium-bridge/badges/score.svg)](https://glama.ai/mcp/servers/@dashi96/chromium-bridge) 📇 🏠 🍎 🪟 🐧 - MCP server + Chrome extension that connects Claude Code to Chromium-based browsers (Arc, Vivaldi, Brave) where the official Claude in Chrome extension doesn't work — navigate, click, read pages, run JS, and record GIFs in the user's real browser. +- [DevHusnainAi/zerodom](https://github.com/DevHusnainAi/zerodom) 🐍 📇 🏠 - Parses a live page into a flat, addressable interaction graph for AI agents (`[03] button 'Sign In'`) instead of a raw DOM or accessibility tree dump. Every CSS selector is checked for actual document-wide uniqueness before it's returned, not assumed from an attribute — 71% fewer tokens than Playwright's ARIA snapshot mode. - [dmytrome/groundhog](https://github.com/dmytrome/groundhog) [![dmytrome/groundhog MCP server](https://glama.ai/mcp/servers/dmytrome/groundhog/badges/score.svg)](https://glama.ai/mcp/servers/dmytrome/groundhog) 🐍 🏠 🍎 🪟 🐧 - Web search, read and research over a real stealth-patched Chrome, driven by raw CDP so the `Runtime` domain is never enabled and the `isAutomatedWithCDP` tell is absent. Strips text that is invisible in the rendered DOM before the model reads it and reports each occurrence in `threats`, returns a SHA-256 provenance receipt per source, and re-checks the SSRF guard after redirects. `research` ranks passages across all sources in one pass — extracts, not summaries, so no model or API key is involved. MIT. - [eat-pray-ai/yutu](https://github.com/eat-pray-ai/yutu) 🏎️ 🏠 🍎 🐧 🪟 - A fully functional MCP server and CLI for YouTube to automate YouTube operation - [executeautomation/playwright-mcp-server](https://github.com/executeautomation/mcp-playwright) 📇 - An MCP server using Playwright for browser automation and webscrapping From 78f06a33f37264450355a1e679a4797cb560f157 Mon Sep 17 00:00:00 2001 From: DevHusaninAi Date: Thu, 17 Sep 2026 18:01:31 +0500 Subject: [PATCH 2/3] =?UTF-8?q?Add=20Glama=20score=20badge=20=F0=9F=A4=96?= =?UTF-8?q?=F0=9F=A4=96=F0=9F=A4=96?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 9c1a882d1..cb718c9cd 100644 --- a/README.md +++ b/README.md @@ -510,7 +510,7 @@ Web content access and automation capabilities. Enables searching, scraping, and - [Cubenest/rrweb-stack](https://github.com/Cubenest/rrweb-stack) [![Cubenest/rrweb-stack MCP server](https://glama.ai/mcp/servers/Cubenest/rrweb-stack/badges/score.svg)](https://glama.ai/mcp/servers/Cubenest/rrweb-stack) 📇 🏠 - Local-first MCP server (@peekdev/mcp) + Chrome extension that records your real authenticated browser session (rrweb DOM + console + network, PII-masked, to local SQLite) and lets AI coding agents query it or drive the browser. No cloud, no telemetry. - [Custodia-Admin/pagebolt-mcp](https://github.com/Custodia-Admin/pagebolt-mcp) [![Custodia-Admin/pagebolt-mcp MCP server](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp) 📇 ☁️ - MCP server for screenshots, PDFs, OG images, and narrated video recording from Claude Desktop, Cursor, and Windsurf. - [dashi96/chromium-bridge](https://github.com/dashi96/chromium-bridge) [![dashi96/chromium-bridge MCP server](https://glama.ai/mcp/servers/@dashi96/chromium-bridge/badges/score.svg)](https://glama.ai/mcp/servers/@dashi96/chromium-bridge) 📇 🏠 🍎 🪟 🐧 - MCP server + Chrome extension that connects Claude Code to Chromium-based browsers (Arc, Vivaldi, Brave) where the official Claude in Chrome extension doesn't work — navigate, click, read pages, run JS, and record GIFs in the user's real browser. -- [DevHusnainAi/zerodom](https://github.com/DevHusnainAi/zerodom) 🐍 📇 🏠 - Parses a live page into a flat, addressable interaction graph for AI agents (`[03] button 'Sign In'`) instead of a raw DOM or accessibility tree dump. Every CSS selector is checked for actual document-wide uniqueness before it's returned, not assumed from an attribute — 71% fewer tokens than Playwright's ARIA snapshot mode. +- [DevHusnainAi/zerodom](https://github.com/DevHusnainAi/zerodom) [![DevHusnainAi/zerodom MCP server](https://glama.ai/mcp/servers/DevHusnainAi/zerodom/badges/score.svg)](https://glama.ai/mcp/servers/DevHusnainAi/zerodom) 🐍 📇 🏠 - Parses a live page into a flat, addressable interaction graph for AI agents (`[03] button 'Sign In'`) instead of a raw DOM or accessibility tree dump. Every CSS selector is checked for actual document-wide uniqueness before it's returned, not assumed from an attribute — 71% fewer tokens than Playwright's ARIA snapshot mode. - [dmytrome/groundhog](https://github.com/dmytrome/groundhog) [![dmytrome/groundhog MCP server](https://glama.ai/mcp/servers/dmytrome/groundhog/badges/score.svg)](https://glama.ai/mcp/servers/dmytrome/groundhog) 🐍 🏠 🍎 🪟 🐧 - Web search, read and research over a real stealth-patched Chrome, driven by raw CDP so the `Runtime` domain is never enabled and the `isAutomatedWithCDP` tell is absent. Strips text that is invisible in the rendered DOM before the model reads it and reports each occurrence in `threats`, returns a SHA-256 provenance receipt per source, and re-checks the SSRF guard after redirects. `research` ranks passages across all sources in one pass — extracts, not summaries, so no model or API key is involved. MIT. - [eat-pray-ai/yutu](https://github.com/eat-pray-ai/yutu) 🏎️ 🏠 🍎 🐧 🪟 - A fully functional MCP server and CLI for YouTube to automate YouTube operation - [executeautomation/playwright-mcp-server](https://github.com/executeautomation/mcp-playwright) 📇 - An MCP server using Playwright for browser automation and webscrapping From 45fa1bcb49888b9c76a8768ccd2e40dc565e546c Mon Sep 17 00:00:00 2001 From: SYED HUSNAIN KHALID Date: Sat, 26 Sep 2026 20:30:27 +0500 Subject: [PATCH 3/3] zerodom: reposition entry to AppSec/red-team (match current README) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cb718c9cd..0e208d5ef 100644 --- a/README.md +++ b/README.md @@ -510,7 +510,7 @@ Web content access and automation capabilities. Enables searching, scraping, and - [Cubenest/rrweb-stack](https://github.com/Cubenest/rrweb-stack) [![Cubenest/rrweb-stack MCP server](https://glama.ai/mcp/servers/Cubenest/rrweb-stack/badges/score.svg)](https://glama.ai/mcp/servers/Cubenest/rrweb-stack) 📇 🏠 - Local-first MCP server (@peekdev/mcp) + Chrome extension that records your real authenticated browser session (rrweb DOM + console + network, PII-masked, to local SQLite) and lets AI coding agents query it or drive the browser. No cloud, no telemetry. - [Custodia-Admin/pagebolt-mcp](https://github.com/Custodia-Admin/pagebolt-mcp) [![Custodia-Admin/pagebolt-mcp MCP server](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Custodia-Admin/pagebolt-mcp) 📇 ☁️ - MCP server for screenshots, PDFs, OG images, and narrated video recording from Claude Desktop, Cursor, and Windsurf. - [dashi96/chromium-bridge](https://github.com/dashi96/chromium-bridge) [![dashi96/chromium-bridge MCP server](https://glama.ai/mcp/servers/@dashi96/chromium-bridge/badges/score.svg)](https://glama.ai/mcp/servers/@dashi96/chromium-bridge) 📇 🏠 🍎 🪟 🐧 - MCP server + Chrome extension that connects Claude Code to Chromium-based browsers (Arc, Vivaldi, Brave) where the official Claude in Chrome extension doesn't work — navigate, click, read pages, run JS, and record GIFs in the user's real browser. -- [DevHusnainAi/zerodom](https://github.com/DevHusnainAi/zerodom) [![DevHusnainAi/zerodom MCP server](https://glama.ai/mcp/servers/DevHusnainAi/zerodom/badges/score.svg)](https://glama.ai/mcp/servers/DevHusnainAi/zerodom) 🐍 📇 🏠 - Parses a live page into a flat, addressable interaction graph for AI agents (`[03] button 'Sign In'`) instead of a raw DOM or accessibility tree dump. Every CSS selector is checked for actual document-wide uniqueness before it's returned, not assumed from an attribute — 71% fewer tokens than Playwright's ARIA snapshot mode. +- [DevHusnainAi/zerodom](https://github.com/DevHusnainAi/zerodom) [![DevHusnainAi/zerodom MCP server](https://glama.ai/mcp/servers/DevHusnainAi/zerodom/badges/score.svg)](https://glama.ai/mcp/servers/DevHusnainAi/zerodom) 🐍 📇 🏠 - Deterministic attack-surface perception for AI security agents. Attaches over `chrome.debugger` to the Chrome you're already logged into (cookies, MFA and SSO already done) and turns the live page into a short numbered interaction graph an agent can act on (`[03] button 'Sign In'`), with CSS selectors kept server-side and out of the model's context. Cross-identity tools (`compare_identities`, `replay`) flag a byte-identical response across two logged-in users as a cross-tenant IDOR, and `scan` maps the attack surface from the CLI. No LLM in the parse; 71% fewer tokens than Playwright's ARIA snapshot mode. - [dmytrome/groundhog](https://github.com/dmytrome/groundhog) [![dmytrome/groundhog MCP server](https://glama.ai/mcp/servers/dmytrome/groundhog/badges/score.svg)](https://glama.ai/mcp/servers/dmytrome/groundhog) 🐍 🏠 🍎 🪟 🐧 - Web search, read and research over a real stealth-patched Chrome, driven by raw CDP so the `Runtime` domain is never enabled and the `isAutomatedWithCDP` tell is absent. Strips text that is invisible in the rendered DOM before the model reads it and reports each occurrence in `threats`, returns a SHA-256 provenance receipt per source, and re-checks the SSRF guard after redirects. `research` ranks passages across all sources in one pass — extracts, not summaries, so no model or API key is involved. MIT. - [eat-pray-ai/yutu](https://github.com/eat-pray-ai/yutu) 🏎️ 🏠 🍎 🐧 🪟 - A fully functional MCP server and CLI for YouTube to automate YouTube operation - [executeautomation/playwright-mcp-server](https://github.com/executeautomation/mcp-playwright) 📇 - An MCP server using Playwright for browser automation and webscrapping