Reported issues for Skyvern

Pod holds 18 of 18 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to Skyvern.

Most discussed

OpenCode - Authentication error - OAuth

I'm using OpenCode CLI to install Skyvern MCP as remote. While trying to install Skyvern MCP server into OpenCode for browser automation I'm getting authentication error,

opencode mcp auth Skyvern

┌ MCP OAuth Authentication │ ■ Authentication failed │ ■ OAuth callback timeout - authorization took too long │ └ Done

Read the thread · 2026-05-18 · closed · external user · 3 comments

ERROR: Skyvern Frontend directory not found.

I keep on getting ERROR: Skyvern Frontend directory not found..

I'm on:

and skyvern version:

But still getting: <img width="1008" height="105" alt="Image" src="https://github.com/user-attachments/assets/1f536e31-eb7d-46fa-9391-74816355

Read the thread · 2025-08-20 · closed · external user · 5 comments

Feature Request 🚀 — Optional 10Captcha API Support

Hi @Skyvern-AI team,

Thank you for building Skyvern — it's an exceptional AI-powered browser automation platform.

I’d like to suggest adding optional support for 10Captcha, a fast and affordable CAPTCHA-solving API. Many automation workflows encounter CAPTCHA challenges, and integrating 10Captcha as an opt-in solution could enhance reliability and flexibility.

The API is straightforward to integrate: https://10captcha.com/api-docs.php

This addition aligns well with

Read the thread · 2025-06-30 · closed · external user · 5 comments

CLI: skyvern run workflow subcommand missing

CLI: `skyvern run workflow` subcommand missing

Summary

Currently there is no CLI sub‑command for executing workflows programmatically. Attempting to run skyvern run workflow … exits with Error: No such command 'workflow'. Adding this command would bring feature parity with the Web UI and REST API and allow automation or CI pipelines to trigger workflo

Read the thread · 2025-04-22 · closed · external user · 4 comments

Media URLs seem incorrect when not local

I noticed in console two problems:

The service was trying to contact localhost:9090 for media (page snapshots, e.g.).
The service was trying to use file:// for videos

I was able to work around #1 by specifying VITE_ARTIFACT_API_BASE_URL=http://remotehost:9090 (very sensitive to trailing slash).

It would probably be good to include an example in the docker compose file.

But for 2, I don't have a workaround. It seems to just always want to serve that from a place that won't exist on m

Read the thread · 2025-01-27 · closed · external user · 10 comments

Support for Loading Extensions with Playwright Browser Context

It would be highly beneficial to have a feature that allows loading browser extensions when using Playwright. The functionality could involve specifying a list of extension folder names through an environment variable. These extensions would then automatically load whenever a Playwright browser context is created.

This feature would greatly enhance workflows that rely on custom browser extensions, enabling better testing and automation scenarios.

Read the thread · 2025-01-26 · closed · outside contributor · 4 comments

Self-hosted proxy pool

It would be great if we could specify a proxy pool to use in chrome. either through a comma-separated list of proxy configs passed through an ENV, or some other config value.

Read the thread · 2025-01-25 · closed · external user · 6 comments

Add tutorial for utilizing skyvern for automated UI testing

I'm not sure if this is an intended use case, but this looks like something that could seriously help tremendously with automated UI testing. Would you be able to add something to the ReadMe that explains how one might integrate this into a CI/CD pipeline for that purpose?

Read the thread · 2024-03-18 · open · external user · 12 comments

Most recent

MCP OAuth: authorization server issuer doesn't match its discovery URL, so SDK clients refuse to authorize

An external MCP-auth conformance scan of the Skyvern MCP endpoint turns up one requirement violation that stops spec-following OAuth clients from authorizing.

What happens

https://api.skyvern.com/mcp/ returns a 401 whose WWW-Authenticate points at the protected-resource metadata:

resource_metadata="https://api.skyvern.com/.well-known/oauth-protected-resource/mcp"

That document lists the authorization server as:

"authorization_servers": ["https://api.skyvern.com"]

Read the thread · 2026-08-22 · open · external user · 1 comment

Follow-up: opt-in gateway allowlist to restore Docker self-heal Repair under loopback-only internal_auth

Follow-up to Skyvern-AI/skyvern#6890 / PR Skyvern-AI/skyvern#7176.

Context

Skyvern-AI/skyvern#7176 fixes a trust-boundary bypass by restricting the internal/auth routes to loopback-only (127.0.0.1 / ::1), dropping the previous is_private (all-RFC1918) trust. That is the deliberate, correct security default.

Known intentional tradeoff: the local-dev self-heal "Repair" button (SelfHealApiKeyBanner.tsx → POST /api/v1/internal/auth/repair) used **against a Dockerized backen

Read the thread · 2026-07-07 · open · outside contributor · 0 comments

SSRF Protection Bypass via IPv6 Bracket Parsing Gap

1. Executive Summary

Skyvern's SSRF protection function is_blocked_host() uses ipaddress.ip_address(host) to detect private/loopback IP addresses. However, when a URL contains an IPv6 address (e.g., https://[::1]/), the host value parsed by Pydantic's HttpUrl retains the RFC 3986 brackets ([::1]). Python's ipaddress.ip_address() does not accept bracketed IPv6 addresses, raising ValueError. The code catches this exception and falls through to a simple string comparison against

Read the thread · 2026-05-09 · closed · external user · 0 comments

feat: Support per-run LLM API key override (BYOK) for tasks and workflows

Current behavior

All LLM calls in Skyvern use a single server-configured API key (LLM_KEY env var). There is no way for a caller to supply their own LLM API key on a per-run basis.

Expected behavior

Callers should be able to pass an optional llm_api_key in the request body for POST /run/tasks, POST /run/workflows, and the legacy POST /api/v1/tasks endpoint. Skyvern should use that key for every LLM call within that specific run.

Why this is useful

**Multi-tenant / BYOK dep

Read the thread · 2026-05-08 · closed · external user · 1 comment

Session Persistence Bridge

Objective

Implement a session persistence bridge that maintains browser state and session data across OctoBrowser profile transitions and Skyvern agent handoffs, enabling seamless workflow continuity.

Background

Skyvern workflows often require maintaining session state across multiple steps or agent transitions. OctoBrowser profiles provide persistent browser environments, but we need a bridge system to coordinate session data between the two systems.

Req

Read the thread · 2025-08-21 · closed · external user · 1 comment

Epic: octobrowser-skyvern-integration

Epic: OctoBrowser-Skyvern Integration

Overview

Technical implementation to enable Skyvern automation agents to execute within OctoBrowser's managed Chromium profiles (Octium), leveraging existing profile persistence, CDP/VNC debugging capabilities, and MCP server infrastructure. The integration will create an adapter layer between Skyvern's BrowserFactory and OctoBrowser's ProfileManager without modifying core components, maintaining full backward compatibility while enabling advanced mul

Read the thread · 2025-08-21 · closed · external user · 1 comment

Cannot run MCP Server with Claude

When I run the MCP server manually I see b@bdm1 ~ % python -m skyvern run mcp ╭────────────────────────────────────────────────────────────────────╮ │ Starting MCP Server... │ ╰────────────────────────────────────────────────────────────────────╯

And Claude desktop does not like the output:

I am running Skyvern itself in docker.

Read the thread · 2025-06-24 · closed · external user · 0 comments

ERROR : connection failed: fe_sendauth: no password supplied

I am having a problem during the installation. I could not find any documentation on how to fix the problem. Can you help?

`PS C:\Users\fetullah.turkeli\skyvern> docker -v Docker version 28.1.1, build 4eba377 PS C:\Users\fetullah.turkeli\skyvern> docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 5edd688364d0 postgres:14 "docker-entrypoint.s…" 13 minutes ago Up 13 minutes 0.0.0.0:5432->5432/tcp postgresql-c

Read the thread · 2025-06-19 · closed · external user · 1 comment

[Feature Request] Add Infisical Support

Hello,

Same as Bitwarden support, could you add infisical support ?

Thanks.

Read the thread · 2025-06-10 · closed · external user · 2 comments

Interrupt process to append extra data

I kicked off a prompt from the homepage, just a simple query (check if I have unclaimed money). Skyvern started navigating to a page and started to search for me. But I didn't give it any of my information, and it started looping:

Is it possible to have a semi-iterative approach, where it tries to refine the process, or ask me to supply extra information, before it does this?

Read the thread · 2025-05-22 · closed · external user · 1 comment

The remaining reports are on the project's issue tracker.