Authorization notice. Jev Browser is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.
Credentials. A checkout run uses saved payment or login details, so run it only on accounts you control and review the pending action first.
Who it is forA shopper or small team member who wants an agent to prepare an order but not to submit it without a human check.
The problemAn agent that clicks through checkout could place an order by mistake, and a plain script has no pause step.
The outcomeThe run stops with needs_confirmation and shows the pending action, so you can approve or cancel it.
What you need first
- Node.js and npm
- A TypeSafe API key, or an OpenRouter API key
- Claude Code for the MCP route, or a source checkout of the repo for the read example
Steps
- Run
npx playwright install chromiumonce. - Run
claude mcp add jev-browser -e TYPESAFE_API_KEY=your-key -- npx -y -p jev-browser jev-browser-mcpand replace your-key with your key. - Ask Claude to call browser_do with the cart and checkout goal, without allow_irreversible.
- When the status is needs_confirmation, read the pending field and confirm with the user.
- Re-call browser_do with allow_irreversible set to true only if the user approves the order.
Prompt for your agent
Use the jev-browser MCP server to run browser_do on <store-url> with the goal "<checkout-goal>". Stop when the status is needs_confirmation and return the pending action. Verify with the user before you re-call with allow_irreversible true.
Caveat. The README reports that across about 200 rounds it flagged only the saucedemo Finish button, so it may not catch every irreversible action on other sites.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for Ying-Kai-Liao/jev-browser and "Stop a checkout before it places an order"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer