← Back to search

codex-control-chrome-mcp

GitHub Actions Scanned 23d ago

MCP server and native host bridge for controlling Chrome through the Codex Chrome extension.

npm
B
81.4 / 100

Versions

1.4.1latest
Jul 3, 2026
1.4.0
Jul 3, 2026
1.3.3
Jul 3, 2026
1.3.2
Jul 3, 2026
1.3.1
Jul 3, 2026
+ show 6 moreshow less
1.3.0
Jul 3, 2026
1.2.1
Jul 2, 2026
1.2.0
Jun 29, 2026
1.1.0
Jun 27, 2026
1.0.1
Jun 26, 2026
1.0.0
Jun 26, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 16

chrome_status
annotations: none low

Show native host manifest paths and discovered bridge sockets.

chrome_bridge_status
annotations: none low

Ask the active Codex Control Chrome MCP bridge for status.

chrome_get_info
annotations: none low

Get connected Codex Chrome extension backend info.

chrome_name_session
annotations: none low

Set the Chrome tab group/session name.

name string
chrome_user_tabs
annotations: none low

List user Chrome tabs visible to the extension.

chrome_session_tabs
annotations: none low

List tabs currently claimed by this MCP browser session.

chrome_create_tab
annotations: none low

Create a new background tab and claim it for this MCP session.

chrome_claim_tab
annotations: none low

Claim an existing Chrome tab by numeric tab id.

tabId number
chrome_attach_tab
annotations: none low

Attach Chrome debugger to a claimed tab.

tabId number
chrome_detach_tab
annotations: none low

Detach Chrome debugger from a claimed tab.

tabId number
chrome_cdp_send
annotations: none low

Send a raw CDP command to a claimed and attached tab.

tabId number method string params record timeoutMs number
chrome_navigate
annotations: none low

Navigate a claimed tab to a URL using CDP Page.navigate.

url string tabId number
chrome_evaluate
annotations: none low

Evaluate JavaScript in a claimed tab using Runtime.evaluate.

tabId number expression string awaitPromise boolean
chrome_screenshot
annotations: none low

Capture a screenshot from a claimed tab. Returns base64 PNG.

tabId number format enum
chrome_read_events
annotations: none low

Read and clear CDP/download notifications buffered by this MCP process.

limit number method string
chrome_finalize_tabs
annotations: none low

Finalize claimed tabs. Use status handoff or deliverable.

keep array tabId number status enum

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 41

low
Tool 'chrome_status' has no annotations annotation_checker · 100%
low
Tool 'chrome_bridge_status' has no annotations annotation_checker · 100%
low
Tool 'chrome_get_info' has no annotations annotation_checker · 100%
low
Tool 'chrome_name_session' has no annotations annotation_checker · 100%
low
Tool 'chrome_user_tabs' has no annotations annotation_checker · 100%
low
Tool 'chrome_session_tabs' has no annotations annotation_checker · 100%
low
Tool 'chrome_create_tab' has no annotations annotation_checker · 100%
low
Tool 'chrome_claim_tab' has no annotations annotation_checker · 100%
low
Tool 'chrome_attach_tab' has no annotations annotation_checker · 100%
low
Tool 'chrome_detach_tab' has no annotations annotation_checker · 100%
low
Tool 'chrome_cdp_send' has no annotations annotation_checker · 100%
low
Tool 'chrome_navigate' has no annotations annotation_checker · 100%
low
Tool 'chrome_evaluate' has no annotations annotation_checker · 100%
low
Tool 'chrome_screenshot' has no annotations annotation_checker · 100%
low
Tool 'chrome_read_events' has no annotations annotation_checker · 100%
low
Tool 'chrome_finalize_tabs' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: chrome_status manifest_parser · 85%
info
Tool: chrome_bridge_status manifest_parser · 85%
info
Tool: chrome_get_info manifest_parser · 85%
info
Tool: chrome_name_session manifest_parser · 85%
info
Tool: chrome_user_tabs manifest_parser · 85%
info
Tool: chrome_session_tabs manifest_parser · 85%
info
Tool: chrome_create_tab manifest_parser · 85%
info
Tool: chrome_claim_tab manifest_parser · 85%
info
Tool: chrome_attach_tab manifest_parser · 85%
info
Tool: chrome_detach_tab manifest_parser · 85%
info
Tool: chrome_cdp_send manifest_parser · 85%
info
Tool: chrome_navigate manifest_parser · 85%
info
Tool: chrome_evaluate manifest_parser · 85%
info
Tool: chrome_screenshot manifest_parser · 85%
info
Tool: chrome_read_events manifest_parser · 85%
info
Tool: chrome_finalize_tabs manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 92 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%