← Back to search

io.github.ChromeDevTools/chrome-devtools-mcp

ChromeDevTools Apache-2.0 40,094 stars Scanned 5h ago

MCP server for Chrome DevTools

B
79.7 / 100

Versions

1.0.1 latest
May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 48

upload_file
unchecked low

Upload a file through a provided element.

readOnlyHint false
take_snapshot
unchecked low

Take a text snapshot of the currently selected page based on the a11y tree. The snapshot lists page elements along with a unique identifier (uid). Always use the latest snapshot. Prefer taking a snapshot over taking a screenshot. The snapshot indicates the element selected in the DevTools Elements panel (if any).

readOnlyHint false
wait_for
unchecked low

Wait for the specified text to appear on the selected page.

readOnlyHint true
performance_start_trace
unchecked low

Start a performance trace on the selected webpage. Use to find frontend performance issues, Core Web Vitals (LCP, INP, CLS), and improve page load speed.

readOnlyHint false
performance_stop_trace
unchecked low

Stop the active performance trace recording on the selected webpage.

readOnlyHint false
performance_analyze_insight
unchecked low

Provides more detailed information on a specific Performance Insight of an insight set that was highlighted in the results of a trace recording.

readOnlyHint true
evaluate_script
unchecked low

Evaluate a JavaScript function inside the currently selected page${cliArgs?.categoryExtensions ? ' or service worker' : ''}. Returns the response as JSON, so returned values have to be JSON-serializable.

readOnlyHint false
take_screenshot
unchecked low

Take a screenshot of the page or element.

readOnlyHint false
lighthouse_audit
unchecked low

Get Lighthouse score and reports for accessibility, SEO, best practices, and agentic browsing. This excludes performance. For performance audits, run ${startTrace.name}

readOnlyHint false
list_network_requests
unchecked low

List all requests for the currently selected page since the last navigation.

readOnlyHint true
get_network_request
unchecked low

Gets a network request by an optional reqid, if omitted returns the currently selected request in the DevTools Network panel.

readOnlyHint false
click
unchecked low

Clicks on the provided element

readOnlyHint false
click_at
unchecked low

Clicks at the provided coordinates

readOnlyHint false
hover
unchecked low

Hover over the provided element

readOnlyHint false
fill
unchecked low

Type text into an input, text area or select an option from a <select> element.

readOnlyHint false
type_text
unchecked low

Type text using keyboard into a previously focused input

readOnlyHint false
drag
unchecked low

Drag an element onto another element

readOnlyHint false
fill_form
unchecked low

Fill out multiple form elements (inputs, selects, checkboxes, radios) at once. ALWAYS prefer this tool over multiple individual 'fill' or 'click' calls when interacting with forms. It is significantly faster, more reliable, and reduces turn count. Example: Fill username, password, and check "Remember Me" in one call.

readOnlyHint false
press_key
unchecked low

Press a key or key combination. Use this when other input methods like fill() cannot be used (e.g., keyboard shortcuts, navigation keys, or special key combinations).

readOnlyHint false
list_3p_developer_tools
unchecked low

Lists all third-party developer tools the page exposes for providing runtime information. Third-party developer tools can be called via the 'execute_3p_developer_tool()' MCP tool. Alternatively, third-party developer tools can be executed by calling 'evaluate_script' and adding the following command to the script: 'window.__dtmcp.executeTool(toolName, params)' This might be helpful when the third-party developer tools return non-serializable values or when composing third-party developer tools with additional functionality.

readOnlyHint true
execute_3p_developer_tool
unchecked low

Executes a tool exposed by the page.

readOnlyHint false
list_pages
unchecked low

Get a list of pages${args?.categoryExtensions ? ' including extension service workers' : ''} open in the browser.

readOnlyHint true
select_page
unchecked low

Select a page as a context for future tool calls.

readOnlyHint true
close_page
unchecked low

Closes the page by its index. The last open page cannot be closed.

readOnlyHint false
new_page
unchecked low

Open a new tab and load a URL. Use project URL if not specified otherwise.

readOnlyHint false
navigate_page
unchecked low

Go to a URL, or back, forward, or reload. Use project URL if not specified otherwise.

readOnlyHint false
resize_page
unchecked low

Resizes the selected page's window so that the page has specified dimension

readOnlyHint false
handle_dialog
unchecked low

If a browser dialog was opened, use this command to handle it

readOnlyHint false
get_tab_id
unchecked low

Get the tab ID of the page

readOnlyHint true
install_extension
unchecked low

Installs a Chrome extension from the given path.

readOnlyHint false
uninstall_extension
unchecked low

Uninstalls a Chrome extension by its ID.

readOnlyHint false
list_extensions
unchecked low

Lists all the Chrome extensions installed in the browser. This includes their name, ID, version, and enabled status.

readOnlyHint true
reload_extension
unchecked low

Reloads an unpacked Chrome extension by its ID.

readOnlyHint false
trigger_extension_action
unchecked low

Triggers the default action of an extension by its ID.

readOnlyHint false
list_webmcp_tools
unchecked low

Lists all WebMCP tools the page exposes.

readOnlyHint true
execute_webmcp_tool
unchecked low

Executes a WebMCP tool exposed by the page.

readOnlyHint false
emulate
unchecked low

Emulates various features on the selected page.

readOnlyHint false
take_heapsnapshot
unchecked low

Capture a heap snapshot of the currently selected page. Use to analyze the memory distribution of JavaScript objects and debug memory leaks.

readOnlyHint false
get_heapsnapshot_summary
unchecked low

Loads a memory heapsnapshot and returns snapshot summary stats.

readOnlyHint true
get_heapsnapshot_details
unchecked low

Loads a memory heapsnapshot and returns all available information including statistics, static data, and aggregated node information. Supports pagination for aggregates.

readOnlyHint true
get_heapsnapshot_class_nodes
unchecked low

Loads a memory heapsnapshot and returns instances of a specific class with their IDs.

readOnlyHint true
get_heapsnapshot_retainers
unchecked low

Loads a memory heapsnapshot and returns retainers for a specific node ID.

readOnlyHint true
screencast_start
unchecked low

Starts recording a screencast (video) of the selected page in specified format.

readOnlyHint false
screencast_stop
unchecked low

Stops the active screencast recording on the selected page.

readOnlyHint false
get_console_message
unchecked low

Gets a console message by its ID. You can get all messages by calling ${LIST_CONSOLE_MESSAGES_TOOL_NAME}.

readOnlyHint true
screenshot
unchecked low

Takes a screenshot

readOnlyHint false
navigate
unchecked low

Loads a URL

readOnlyHint false
evaluate
unchecked low

Evaluates a JavaScript script

readOnlyHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs.promises, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 114

info
package.json metadata manifest_parser · 100%
info
Tool: take_snapshot manifest_parser · 75%
info
Tool: wait_for manifest_parser · 75%
info
Tool: performance_start_trace manifest_parser · 75%
info
Tool: performance_stop_trace manifest_parser · 75%
info
Tool: performance_analyze_insight manifest_parser · 75%
info
Tool: evaluate_script manifest_parser · 75%
info
Tool: take_screenshot manifest_parser · 75%
info
Tool: lighthouse_audit manifest_parser · 75%
info
Tool: list_network_requests manifest_parser · 75%
info
Tool: get_network_request manifest_parser · 75%
info
Tool: click manifest_parser · 75%
info
Tool: click_at manifest_parser · 75%
info
Tool: hover manifest_parser · 75%
info
Tool: fill manifest_parser · 75%
info
Tool: type_text manifest_parser · 75%
info
Tool: drag manifest_parser · 75%
info
Tool: fill_form manifest_parser · 75%
info
Tool: upload_file manifest_parser · 75%
info
Tool: press_key manifest_parser · 75%
info
Tool: list_3p_developer_tools manifest_parser · 75%
info
Tool: execute_3p_developer_tool manifest_parser · 75%
info
Tool: list_pages manifest_parser · 75%
info
Tool: select_page manifest_parser · 75%
info
Tool: close_page manifest_parser · 75%
info
Tool: new_page manifest_parser · 75%
info
Tool: navigate_page manifest_parser · 75%
info
Tool: resize_page manifest_parser · 75%
info
Tool: handle_dialog manifest_parser · 75%
info
Tool: get_tab_id manifest_parser · 75%
info
Tool: install_extension manifest_parser · 75%
info
Tool: uninstall_extension manifest_parser · 75%
info
Tool: list_extensions manifest_parser · 75%
info
Tool: reload_extension manifest_parser · 75%
info
Tool: trigger_extension_action manifest_parser · 75%
info
Tool: list_webmcp_tools manifest_parser · 75%
info
Tool: execute_webmcp_tool manifest_parser · 75%
info
Tool: emulate manifest_parser · 75%
info
Tool: take_heapsnapshot manifest_parser · 75%
info
Tool: get_heapsnapshot_summary manifest_parser · 75%
info
Tool: get_heapsnapshot_details manifest_parser · 75%
info
Tool: get_heapsnapshot_class_nodes manifest_parser · 75%
info
Tool: get_heapsnapshot_retainers manifest_parser · 75%
info
Tool: screencast_start manifest_parser · 75%
info
Tool: screencast_stop manifest_parser · 75%
info
Tool: get_console_message manifest_parser · 75%
info
Tool: screenshot manifest_parser · 75%
info
Tool: navigate manifest_parser · 75%
info
Tool: evaluate manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (12) manifest_parser · 80%
info
Tool 'take_snapshot' annotations are consistent annotation_checker · 80%
info
Tool 'wait_for' annotations are consistent annotation_checker · 80%
info
Tool 'performance_start_trace' annotations are consistent annotation_checker · 80%
info
Tool 'performance_stop_trace' annotations are consistent annotation_checker · 80%
info
Tool 'performance_analyze_insight' annotations are consistent annotation_checker · 80%
info
Tool 'evaluate_script' annotations are consistent annotation_checker · 80%
info
Tool 'take_screenshot' annotations are consistent annotation_checker · 80%
info
Tool 'lighthouse_audit' annotations are consistent annotation_checker · 80%
info
Tool 'list_network_requests' annotations are consistent annotation_checker · 80%
info
Tool 'get_network_request' annotations are consistent annotation_checker · 80%
info
Tool 'click' annotations are consistent annotation_checker · 80%
info
Tool 'click_at' annotations are consistent annotation_checker · 80%
info
Tool 'hover' annotations are consistent annotation_checker · 80%
info
Tool 'fill' annotations are consistent annotation_checker · 80%
info
Tool 'type_text' annotations are consistent annotation_checker · 80%
info
Tool 'drag' annotations are consistent annotation_checker · 80%
info
Tool 'fill_form' annotations are consistent annotation_checker · 80%
info
Tool 'upload_file' annotations are consistent annotation_checker · 80%
info
Tool 'press_key' annotations are consistent annotation_checker · 80%
info
Tool 'list_3p_developer_tools' annotations are consistent annotation_checker · 80%
info
Tool 'execute_3p_developer_tool' annotations are consistent annotation_checker · 80%
info
Tool 'list_pages' annotations are consistent annotation_checker · 80%
info
Tool 'select_page' annotations are consistent annotation_checker · 80%
info
Tool 'close_page' annotations are consistent annotation_checker · 80%
info
Tool 'new_page' annotations are consistent annotation_checker · 80%
info
Tool 'navigate_page' annotations are consistent annotation_checker · 80%
info
Tool 'resize_page' annotations are consistent annotation_checker · 80%
info
Tool 'handle_dialog' annotations are consistent annotation_checker · 80%
info
Tool 'get_tab_id' annotations are consistent annotation_checker · 80%
info
Tool 'install_extension' annotations are consistent annotation_checker · 80%
info
Tool 'uninstall_extension' annotations are consistent annotation_checker · 80%
info
Tool 'list_extensions' annotations are consistent annotation_checker · 80%
info
Tool 'reload_extension' annotations are consistent annotation_checker · 80%
info
Tool 'trigger_extension_action' annotations are consistent annotation_checker · 80%
info
Tool 'list_webmcp_tools' annotations are consistent annotation_checker · 80%
info
Tool 'execute_webmcp_tool' annotations are consistent annotation_checker · 80%
info
Tool 'emulate' annotations are consistent annotation_checker · 80%
info
Tool 'take_heapsnapshot' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_summary' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_details' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_class_nodes' annotations are consistent annotation_checker · 80%
info
Tool 'get_heapsnapshot_retainers' annotations are consistent annotation_checker · 80%
info
Tool 'screencast_start' annotations are consistent annotation_checker · 80%
info
Tool 'screencast_stop' annotations are consistent annotation_checker · 80%
info
Tool 'get_console_message' annotations are consistent annotation_checker · 80%
info
Tool 'screenshot' annotations are consistent annotation_checker · 80%
info
Tool 'navigate' annotations are consistent annotation_checker · 80%
info
Tool 'evaluate' annotations are consistent annotation_checker · 80%
critical
Tool poisoning in 'take_snapshot': Directive language: 'always' poisoning · 85%
medium
OAuth implementation without PKCE auth_checker · 75%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Buffer.from base64 in src/third_party/lighthouse-devtools-mcp-bundle.js:58394 entropy_analyzer · 75%
medium
Buffer.from base64 in src/third_party/lighthouse-devtools-mcp-bundle.js:59434 entropy_analyzer · 75%
medium
Buffer.from base64 in src/daemon/client.ts:175 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 623 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%