← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path Server uses shell capabilities via: child_process, execSync() Server uses env_vars capabilities via: process.env
@mozilla/firefox-devtools-mcp
Model Context Protocol (MCP) server for Firefox DevTools automation (moz build with privileged context support)
? Not scanned yet
Versions
No versions found.
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 18
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: vitest@4.1.8 (GHSA-82fw-gwwq-j7x9)
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-8f6e930/scripts/test-screenshot.js:30
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-8f6e930/tests/integration/e2e-scenario.integration.test.ts:573
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-8f6e930/tests/tools/screenshot.test.ts:98
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-8f6e930/src/tools/screenshot.ts:60
info
package.json metadata
info
Transport: stdio
info
Required env vars (27)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 577 components
medium
No build provenance detected (SLSA L0)
high
Declared package 'firefox-devtools-mcp' matches no manifest in the repo