← Back to search

io.github.mikusnuz/cws

mikusnuz Scanned 24d ago

MCP server for Chrome Web Store — extension upload, publish, status, and rollout

MCP Registry ↗
B
85.8 / 100

Versions

1.4.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

upload
annotations: none low

Upload a ZIP file to update an existing Chrome Web Store item draft. Note: Creating new items via API is not supported in v2 — use the Developer Dashboard to create new items.

zipPath string
publish
annotations: none low

Publish an extension to Chrome Web Store. Supports immediate publish, staged publish, initial deploy percentage, and skip-review.

status
annotations: none low

Fetch the current status of an extension on Chrome Web Store. Returns published/submitted revision status, deploy percentage, version, takedown/warning flags, and last upload state.

cancel
annotations: none low

Cancel a pending submission on Chrome Web Store. Can be used to cancel an item currently in review.

deploy-percentage
annotations: none low

Set the published deploy percentage for staged rollout on Chrome Web Store. The new percentage must be higher than the current target. Only available for items with 10,000+ seven-day active users.

get
annotations: none low

Get the current metadata of a Chrome Web Store item (v1.1 API). Returns title, description, category, and other listing fields. Note: v1 API is deprecated and will be removed after Oct 15, 2026.

update-metadata
annotations: none low

Update the store listing metadata of a Chrome Web Store item (v1.1 API). Supports both common fields and raw metadata payload for advanced fields. Note: v1 API is deprecated and will be removed after Oct 15, 2026. Use update-metadata-ui as an alternative.

update-metadata-ui
annotations: none low

Update listing metadata via Chrome Web Store dashboard UI automation (Playwright). Use this when API metadata updates are not reflected, or as the primary metadata update method since the v1 API is deprecated.

title string summary string category string supportUrl string description string homepageUrl string
cws-mcp
annotations: none low

itemId string zipPath string skipReview boolean publishType enum publisherId string deployPercentage number

Permissions 2

env_vars low
Server uses env_vars capabilities via: process.env
network medium
Server uses network capabilities via: fetch()

Scan Findings 28

low
Tool 'upload' has no annotations annotation_checker · 100%
low
Tool 'publish' has no annotations annotation_checker · 100%
low
Tool 'status' has no annotations annotation_checker · 100%
low
Tool 'cancel' has no annotations annotation_checker · 100%
low
Tool 'deploy-percentage' has no annotations annotation_checker · 100%
low
Tool 'get' has no annotations annotation_checker · 100%
low
Tool 'update-metadata' has no annotations annotation_checker · 100%
low
Tool 'update-metadata-ui' has no annotations annotation_checker · 100%
low
Tool 'cws-mcp' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: upload manifest_parser · 70%
info
Tool: publish manifest_parser · 70%
info
Tool: status manifest_parser · 70%
info
Tool: cancel manifest_parser · 70%
info
Tool: deploy-percentage manifest_parser · 70%
info
Tool: get manifest_parser · 70%
info
Tool: update-metadata manifest_parser · 70%
info
Tool: update-metadata-ui manifest_parser · 70%
info
Tool: cws-mcp manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 129 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%