← Back to search

@mozilla/firefox-devtools-mcp

GitHub Actions Scanned 8d ago

Model Context Protocol (MCP) server for Firefox DevTools automation (moz build with privileged context support)

npm ↗
? Not scanned yet

Versions

0.9.12latest
first seen Jul 21, 2026
0.9.4
first seen Jun 5, 2026
0.9.2
Apr 19, 2026
0.9.1
Mar 29, 2026
0.9.0
Mar 28, 2026
+ show 19 moreshow less
0.8.1
Mar 17, 2026
0.8.0
Mar 17, 2026
0.7.4
Feb 27, 2026
0.7.3
Feb 24, 2026
0.7.2
Feb 24, 2026
0.7.1
Feb 13, 2026
0.7.0
Feb 13, 2026
0.6.1
Feb 6, 2026
0.6.0
Feb 3, 2026
0.5.3
Jan 30, 2026
0.5.2
Jan 22, 2026
0.5.1
Jan 21, 2026
0.4.0
Nov 26, 2025
0.3.0
Nov 6, 2025
0.2.5
Oct 29, 2025
0.2.3
Oct 28, 2025
0.2.2
Oct 27, 2025
0.2.1
Oct 19, 2025
0.2.0
Oct 19, 2025

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 16

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-009187d/scripts/test-screenshot.js:30 entropy_analyzer · 75%
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-009187d/tests/tools/screenshot.test.ts:91 entropy_analyzer · 75%
medium
Buffer.from base64 in mozilla-firefox-devtools-mcp-009187d/src/tools/screenshot.ts:55 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (22) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 576 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package 'firefox-devtools-mcp' matches no manifest in the repo identity_guard · 70%