← Back to search

brave-mcp

triuzzi Scanned 2d ago

MCP server for Brave DevTools

D
40 / 100

Versions

1.6.0latest
Jul 30, 2026
1.5.0
Jul 3, 2026
1.3.0
Jun 21, 2026
1.2.0
Jun 11, 2026
0.5.0
May 7, 2026
+ show 8 moreshow less
0.4.0
May 7, 2026
0.3.0
Apr 28, 2026
0.2.2
Apr 21, 2026
0.2.1
Apr 18, 2026
0.2.0
Apr 16, 2026
0.1.2
Apr 14, 2026
0.1.1
Apr 12, 2026
0.1.0
Apr 10, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 68

page_tool
annotations: verified low

A page scoped tool

readOnlyHint false
page_file_tool
annotations: verified low

A page scoped tool with file verification

readOnlyHint false
get_console_message
annotations: verified low

Gets a console message by its ID. You can get all messages by calling ${LIST_CONSOLE_MESSAGES_TOOL_NAME}.

readOnlyHint true
performance_start_trace
annotations: verified low

Start a performance trace on the target webpage. Use to find frontend performance issues, Core Web Vitals (LCP, INP, CLS), and improve page load speed.

readOnlyHint false
performance_stop_trace
annotations: verified low

Stop the active performance trace recording on the target webpage.

readOnlyHint false
performance_analyze_insight
annotations: verified low

Provides more detailed information on a specific Performance Insight of an insight set that was highlighted in the results of a trace recording.

readOnlyHint true
take_heapsnapshot
annotations: verified low

Capture a heap snapshot of the target page. Use to analyze the memory distribution of JavaScript objects and debug memory leaks.

readOnlyHint false
get_heapsnapshot_summary
annotations: verified low

Loads and caches a memory heapsnapshot and returns snapshot summary stats, including native contexts and their sizes, and retained by context summary.

readOnlyHint true
get_heapsnapshot_details
annotations: verified low

Loads and caches a memory heapsnapshot and returns all available information including statistics, static data, and aggregated node information. Supports pagination for aggregates.

readOnlyHint true
get_heapsnapshot_class_nodes
annotations: verified low

Loads and caches a memory heapsnapshot and returns instances of a specific class with their IDs.

readOnlyHint true
get_heapsnapshot_retainers
annotations: verified low

Loads and caches a memory heapsnapshot and returns retainers for a specific node ID.

readOnlyHint true
close_heapsnapshot
annotations: verified low

Closes a previously loaded and cached memory heapsnapshot, freeing its memory.

readOnlyHint false
get_heapsnapshot_retaining_paths
annotations: verified low

Loads and caches a memory heapsnapshot and returns retaining paths for a specific node ID. This helps to understand why a node is not being garbage collected.

readOnlyHint true
get_heapsnapshot_edges
annotations: verified low

Loads and caches a memory heapsnapshot and returns outgoing edges (references) for a specific node ID.

readOnlyHint true
get_heapsnapshot_dominators
annotations: verified low

Loads and caches a memory heapsnapshot and returns the dominator chain for a specific node ID. This helps to identify which objects are keeping the target node alive.

readOnlyHint true
compare_heapsnapshots
annotations: verified low

Loads and caches two memory heapsnapshots and returns the comparison. If classIndex is provided, returns detailed diff for that class, otherwise returns summary diff.

readOnlyHint true
get_heapsnapshot_duplicate_strings
annotations: verified low

Loads and caches a memory heapsnapshot and returns duplicate strings grouped by their value.

readOnlyHint true
get_heapsnapshot_object_details
annotations: verified low

Loads and caches a memory heapsnapshot and returns detailed information about a specific object by its node ID, including size, type, distance, and DOM detachedness.

readOnlyHint true
query_heapsnapshot_objects
annotations: verified low

Loads and caches a memory heapsnapshot and queries objects matching specific filters (className, propertyName, nodeType, retainedSize, selfSize, isDetached, sortBy).

readOnlyHint true
analyze_heapsnapshot_contexts
annotations: verified low

Loads and caches a memory heapsnapshot to identify and rank closure contexts holding dead captured fields—variables no remaining live closure can read. Scopes are ranked globally by the retained size of these dead values to provide a prioritizing heuristic, rather than an exact measure of reclaimable bytes.

readOnlyHint true
install_extension
annotations: verified low

Installs a Chrome extension from the given path.

readOnlyHint false
uninstall_extension
annotations: verified low

Uninstalls a Chrome extension by its ID.

readOnlyHint false
list_extensions
annotations: verified low

Lists all the Chrome extensions installed in the browser. This includes their name, ID, version, and enabled status.

readOnlyHint true
reload_extension
annotations: verified low

Reloads an unpacked Chrome extension by its ID.

readOnlyHint false
trigger_extension_action
annotations: verified low

Triggers the default action of an extension by its ID.

readOnlyHint false
install_pwa
annotations: verified low

Installs a Progressive Web App (PWA) identified by its manifest ID.

readOnlyHint false
uninstall_pwa
annotations: verified low

Uninstalls a Progressive Web App identified by its manifest ID and

readOnlyHint false
launch_pwa
annotations: verified low

Launches an installed Progressive Web App using its saved display mode.

readOnlyHint false
get_os_app_state
annotations: verified low

Returns the OS integration state (badge count and registered file

readOnlyHint true
list_network_requests
annotations: verified low

Lists the most recent requests for the target page since the last navigation.

readOnlyHint true
get_network_request
annotations: verified low

Gets a network request by an optional reqid, if omitted returns the currently selected request in the DevTools Network panel. Useful for inspecting request headers (including 'Cookie') and response headers (including 'Set-Cookie' and directives).

readOnlyHint false
list_webmcp_tools
annotations: verified low

Lists all WebMCP tools the page exposes (excluding debugging tools, which are exposed via 'list_3p_developer_tools').

readOnlyHint true
execute_webmcp_tool
annotations: verified low

Executes a WebMCP tool exposed by the page (for debugging tools, use 'execute_3p_developer_tool').

readOnlyHint false
take_snapshot
annotations: verified low

Take a text snapshot of the target page based on the a11y tree. The snapshot lists page elements along with a unique identifier (uid). Always use the latest snapshot. Prefer taking a snapshot over taking a screenshot. The snapshot indicates the element selected in the DevTools Elements panel (if any).

readOnlyHint false
wait_for
annotations: verified low

Wait for the specified text to appear on the selected page.

readOnlyHint true
lighthouse_audit
annotations: verified low

Get Lighthouse scores, failing audits, and the DOM nodes they flag for accessibility, SEO, best practices, and agentic browsing. Full reports are saved to disk. This excludes performance. For performance audits, run ${startTrace(args).name}

readOnlyHint false
screencast_start
annotations: verified low

Starts recording a screencast (video) of the target page.

readOnlyHint false
screencast_stop
annotations: verified low

Stops the active screencast recording on the target page.

readOnlyHint false
list_pages
annotations: verified low

Get a list of pages${args?.categoryExtensions ? ' including extension service workers' : ''} open in the browser.

readOnlyHint true
select_page
annotations: verified low

Select a page as a context for future tool calls.

readOnlyHint true
close_page
annotations: verified low

Closes the page by its index. The last open page cannot be closed.

readOnlyHint false
new_page
annotations: verified low

Open a new tab and load a URL. Use project URL if not specified otherwise.

readOnlyHint false
navigate_page
annotations: verified low

Go to a URL, or back, forward, or reload. Use project URL if not specified otherwise.

readOnlyHint false
resize_page
annotations: verified low

Resizes the page's window so that the page has specified dimension

readOnlyHint false
handle_dialog
annotations: verified low

If a browser dialog was opened, use this command to handle it

readOnlyHint false
get_tab_id
annotations: verified low

Get the tab ID of the page

readOnlyHint true
take_screenshot
annotations: verified low

Take a screenshot of the page or element.

readOnlyHint false
open_devtools
annotations: verified low

Open a DevTools window for the selected page.

readOnlyHint true
get_devtools_comments
annotations: verified low

Retrieve user comments from the DevTools window for the page.

readOnlyHint true
resolve_devtools_comment
annotations: verified low

Append an agent reply to a DevTools comment thread and mark it as resolved.

readOnlyHint false
reveal_in_devtools
annotations: verified low

Navigate DevTools to a specified panel and highlight a target DOM node or network request. The parameters uid and reqid are mutually exclusive.

readOnlyHint true
emulate
annotations: verified low

Emulates various features on the target page. Each call replaces all emulation settings (except extraHttpHeaders), so pass all desired settings in a single call.

readOnlyHint false
evaluate_script
annotations: verified low

Evaluate JavaScript inside the target page${cliArgs.categoryExtensions ? ' or service worker' : ''}. The source can be provided inline or loaded from a local file. Returns the response as JSON, so returned values have to be JSON-serializable.

readOnlyHint false
list_3p_developer_tools
annotations: verified low

Lists all third-party developer tools the page exposes for providing runtime information (including debugging WebMCP tools and tools exposed via the 'devtoolstooldiscovery' event). Third-party developer tools can be called via the 'execute_3p_developer_tool()' MCP tool. Alternatively, third-party developer tools exposed via the 'devtoolstooldiscovery' event can be executed by calling 'evaluate_script' and adding the following command to the script: \

readOnlyHint true
execute_3p_developer_tool
annotations: verified low

Executes a third-party developer tool exposed by the page.

readOnlyHint false
click
annotations: verified low

Clicks on the provided element

readOnlyHint false
click_at
annotations: verified low

Clicks at the provided coordinates

readOnlyHint false
hover
annotations: verified low

Hover over the provided element

readOnlyHint false
fill
annotations: verified low

Type text into an input, text area or select an option from a <select> element.

readOnlyHint false
type_text
annotations: verified low

Type text using keyboard into a previously focused input

readOnlyHint false
drag
annotations: verified low

Drag an element onto another element

readOnlyHint false
fill_form
annotations: verified low

Fill out multiple form elements (inputs, selects, checkboxes, radios) at once. ALWAYS prefer this tool over multiple individual 'fill' or 'click' calls when interacting with forms. It is significantly faster, more reliable, and reduces turn count. Example: Fill username, password, and check "Remember Me" in one call.

readOnlyHint false
upload_file
annotations: verified low

Upload a file through a provided element.

readOnlyHint false
press_key
annotations: verified low

Press a key or key combination. Use this when other input methods like fill() cannot be used (e.g., keyboard shortcuts, navigation keys, or special key combinations).

readOnlyHint false
get_css_styles
annotations: verified low

Retrieve matched CSS rules, inline styles (element.style), inherited styles, custom properties, and cascade wrappers (@layer, @media, @container, @scope) for an element identified by its UID. Rules are ordered from highest to lowest cascade precedence and include source line numbers (e.g. index:196). Active (winning) declarations have no prefix tag, while (losing) overridden declarations are prefixed with [overloaded]. Treat the output as authoritative and complete. Results are paginated (10 rules per page by default); use pageIdx to page through the remaining rules. Requires a UID from take_snapshot.

readOnlyHint true
screenshot
annotations: verified low

Takes a screenshot

readOnlyHint false
navigate
annotations: verified low

Loads a URL

readOnlyHint false
evaluate
annotations: verified low

Evaluates a JavaScript script

readOnlyHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs.promises, fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 159

info
Tool 'page_tool' annotations are consistent annotation_checker · 80%
info
Tool 'page_file_tool' annotations are consistent annotation_checker · 80%
info
Tool 'get_console_message' annotations are consistent annotation_checker · 80%
info
Tool 'performance_start_trace' annotations are consistent annotation_checker · 80%
info
Tool 'performance_stop_trace' annotations are consistent annotation_checker · 80%
info
Tool 'performance_analyze_insight' annotations are consistent annotation_checker · 80%
info
Tool 'take_heapsnapshot' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_summary' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_details' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_class_nodes' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_retainers' annotations are consistent annotation_checker · 80%
info
Tool 'close_heapsnapshot' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_retaining_paths' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_edges' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_dominators' annotations are consistent annotation_checker · 80%
info
Tool 'compare_heapsnapshots' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_duplicate_strings' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_object_details' annotations are consistent annotation_checker · 80%
info
Tool 'query_heapsnapshot_objects' annotations are consistent annotation_checker · 80%
info
Tool 'analyze_heapsnapshot_contexts' annotations are consistent annotation_checker · 80%
info
Tool 'install_extension' annotations are consistent annotation_checker · 80%
info
Tool 'uninstall_extension' annotations are consistent annotation_checker · 80%
info
Tool 'list_extensions' annotations are consistent annotation_checker · 80%
info
Tool 'reload_extension' annotations are consistent annotation_checker · 80%
info
Tool 'trigger_extension_action' annotations are consistent annotation_checker · 80%
info
Tool 'install_pwa' annotations are consistent annotation_checker · 80%
info
Tool 'uninstall_pwa' annotations are consistent annotation_checker · 80%
info
Tool 'launch_pwa' annotations are consistent annotation_checker · 80%
info
Tool 'get_os_app_state' annotations are consistent annotation_checker · 80%
info
Tool 'list_network_requests' annotations are consistent annotation_checker · 80%
info
Tool 'get_network_request' annotations are consistent annotation_checker · 80%
info
Tool 'list_webmcp_tools' annotations are consistent annotation_checker · 80%
info
Tool 'execute_webmcp_tool' annotations are consistent annotation_checker · 80%
info
Tool 'take_snapshot' annotations are consistent annotation_checker · 80%
info
Tool 'wait_for' annotations are consistent annotation_checker · 80%
info
Tool 'lighthouse_audit' annotations are consistent annotation_checker · 80%
info
Tool 'screencast_start' annotations are consistent annotation_checker · 80%
info
Tool 'screencast_stop' annotations are consistent annotation_checker · 80%
info
Tool 'list_pages' annotations are consistent annotation_checker · 80%
info
Tool 'select_page' annotations are consistent annotation_checker · 80%
info
Tool 'close_page' annotations are consistent annotation_checker · 80%
info
Tool 'new_page' annotations are consistent annotation_checker · 80%
info
Tool 'navigate_page' annotations are consistent annotation_checker · 80%
info
Tool 'resize_page' annotations are consistent annotation_checker · 80%
info
Tool 'handle_dialog' annotations are consistent annotation_checker · 80%
info
Tool 'get_tab_id' annotations are consistent annotation_checker · 80%
info
Tool 'take_screenshot' annotations are consistent annotation_checker · 80%
info
Tool 'open_devtools' annotations are consistent annotation_checker · 80%
info
Tool 'get_devtools_comments' annotations are consistent annotation_checker · 80%
info
Tool 'resolve_devtools_comment' annotations are consistent annotation_checker · 80%
info
Tool 'reveal_in_devtools' annotations are consistent annotation_checker · 80%
info
Tool 'emulate' annotations are consistent annotation_checker · 80%
info
Tool 'evaluate_script' annotations are consistent annotation_checker · 80%
info
Tool 'list_3p_developer_tools' annotations are consistent annotation_checker · 80%
info
Tool 'execute_3p_developer_tool' annotations are consistent annotation_checker · 80%
info
Tool 'click' annotations are consistent annotation_checker · 80%
info
Tool 'click_at' annotations are consistent annotation_checker · 80%
info
Tool 'hover' annotations are consistent annotation_checker · 80%
info
Tool 'fill' annotations are consistent annotation_checker · 80%
info
Tool 'type_text' annotations are consistent annotation_checker · 80%
info
Tool 'drag' annotations are consistent annotation_checker · 80%
info
Tool 'fill_form' annotations are consistent annotation_checker · 80%
info
Tool 'upload_file' annotations are consistent annotation_checker · 80%
info
Tool 'press_key' annotations are consistent annotation_checker · 80%
info
Tool 'get_css_styles' annotations are consistent annotation_checker · 80%
info
Tool 'screenshot' annotations are consistent annotation_checker · 80%
info
Tool 'navigate' annotations are consistent annotation_checker · 80%
info
Tool 'evaluate' annotations are consistent annotation_checker · 80%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:521 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:553 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:592 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:622 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:645 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/tests/tools/screenshot.test.ts:675 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/src/third_party/lighthouse-devtools-mcp-bundle.js:55247 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/src/third_party/lighthouse-devtools-mcp-bundle.js:56613 entropy_analyzer · 75%
medium
Buffer.from base64 in triuzzi-brave-devtools-mcp-c2a15bc/src/daemon/client.ts:301 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: page_tool manifest_parser · 75%
info
Tool: page_file_tool manifest_parser · 75%
info
Tool: get_console_message manifest_parser · 75%
info
Tool: performance_start_trace manifest_parser · 75%
info
Tool: performance_stop_trace manifest_parser · 75%
info
Tool: performance_analyze_insight manifest_parser · 75%
info
Tool: take_heapsnapshot manifest_parser · 75%
info
Tool: get_heapsnapshot_summary manifest_parser · 75%
info
Tool: get_heapsnapshot_details manifest_parser · 75%
info
Tool: get_heapsnapshot_class_nodes manifest_parser · 75%
info
Tool: get_heapsnapshot_retainers manifest_parser · 75%
info
Tool: close_heapsnapshot manifest_parser · 75%
info
Tool: get_heapsnapshot_retaining_paths manifest_parser · 75%
info
Tool: get_heapsnapshot_edges manifest_parser · 75%
info
Tool: get_heapsnapshot_dominators manifest_parser · 75%
info
Tool: compare_heapsnapshots manifest_parser · 75%
info
Tool: get_heapsnapshot_duplicate_strings manifest_parser · 75%
info
Tool: get_heapsnapshot_object_details manifest_parser · 75%
info
Tool: query_heapsnapshot_objects manifest_parser · 75%
info
Tool: analyze_heapsnapshot_contexts manifest_parser · 75%
info
Tool: install_extension manifest_parser · 75%
info
Tool: uninstall_extension manifest_parser · 75%
info
Tool: list_extensions manifest_parser · 75%
info
Tool: reload_extension manifest_parser · 75%
info
Tool: trigger_extension_action manifest_parser · 75%
info
Tool: install_pwa manifest_parser · 75%
info
Tool: uninstall_pwa manifest_parser · 75%
info
Tool: launch_pwa manifest_parser · 75%
info
Tool: get_os_app_state manifest_parser · 75%
info
Tool: list_network_requests manifest_parser · 75%
info
Tool: get_network_request manifest_parser · 75%
info
Tool: list_webmcp_tools manifest_parser · 75%
info
Tool: execute_webmcp_tool manifest_parser · 75%
info
Tool: take_snapshot manifest_parser · 75%
info
Tool: wait_for manifest_parser · 75%
info
Tool: lighthouse_audit manifest_parser · 75%
info
Tool: screencast_start manifest_parser · 75%
info
Tool: screencast_stop manifest_parser · 75%
info
Tool: list_pages manifest_parser · 75%
info
Tool: select_page manifest_parser · 75%
info
Tool: close_page manifest_parser · 75%
info
Tool: new_page manifest_parser · 75%
info
Tool: navigate_page manifest_parser · 75%
info
Tool: resize_page manifest_parser · 75%
info
Tool: handle_dialog manifest_parser · 75%
info
Tool: get_tab_id manifest_parser · 75%
info
Tool: take_screenshot manifest_parser · 75%
info
Tool: open_devtools manifest_parser · 75%
info
Tool: get_devtools_comments manifest_parser · 75%
info
Tool: resolve_devtools_comment manifest_parser · 75%
info
Tool: reveal_in_devtools manifest_parser · 75%
info
Tool: emulate manifest_parser · 75%
info
Tool: evaluate_script manifest_parser · 75%
info
Tool: list_3p_developer_tools manifest_parser · 75%
info
Tool: execute_3p_developer_tool manifest_parser · 75%
info
Tool: click manifest_parser · 75%
info
Tool: click_at manifest_parser · 75%
info
Tool: hover manifest_parser · 75%
info
Tool: fill manifest_parser · 75%
info
Tool: type_text manifest_parser · 75%
info
Tool: drag manifest_parser · 75%
info
Tool: fill_form manifest_parser · 75%
info
Tool: upload_file manifest_parser · 75%
info
Tool: press_key manifest_parser · 75%
info
Tool: get_css_styles manifest_parser · 75%
info
Tool: screenshot manifest_parser · 75%
info
Tool: navigate manifest_parser · 75%
info
Tool: evaluate manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (19) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'take_snapshot': Directive language: 'always' poisoning · 85%
info
SBOM generated: 528 components sbom_generator · 100%
critical
AWS Access Key ID found in triuzzi-brave-devtools-mcp-c2a15bc/src/third_party/lighthouse-devtools-mcp-bundle.js secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%