Chrome Browser

Overview

From the repository's own README, as read at the audited commit.

# Chrome MCP Server 🚀[![Stars](https://img.shields.io/github/stars/hangwin/mcp-chrome)](https://img.shields.io/github/stars/hangwin/mcp-chrome)[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)[![TypeScript](https://img.shields.io/badge/TypeScript-5.8+-blue.svg)](https://www.typescriptlang.org/)[![Chrome Extension](https://img.shields.io/badge/Chrome-Extension-green.svg)](https://developer.chrome.com/docs/extensions/)[![Release](https://img.shields.io/github/v/release/hangwin/mcp-chrome.svg)](https://img.shields.io/github/v/release/hangwin/mcp-chrome.svg)> 🌟 **Turn your Chrome browser into your intelligent assistant** - Let AI take control of your browser, transforming it into a powerful AI-controlled automation tool.**📖 Documentation**: [English](README.md) | [中文](README_zh.md)> The project is still in its early stages and is under intensive development. More features, stability improvements, and other enhancements will follow.---## 🎯 What is Chrome MCP Server?Chrome MCP Server is a Chrome extension-based **Model Context Protocol (MCP) server** that exposes your Chrome browser functionality to AI assistants like Claude, enabling complex browser automation, content analysis, and semantic search. Unlike traditional browser automation tools (like Playwright), **Chrome MCP Server** directly uses your daily Chrome browser, leveraging existing user habits, configurations, and login states, allowing various large models or chatbots to take control of your browser and truly become your everyday assistant.## ✨ New Features(2025/12/30)- **A New Visual Editor for Claude Code & Codex**, for more detail here: [VisualEditor](docs/VisualEditor.md)## ✨ Core Features- 😁 **Chatbot/Model Agnostic**: Let any LLM or chatbot client or agent you prefer automate your browser- ⭐️ **Use Your Original Browser**: Seamlessly integrate with your existing browser environment (your configurations, login states, etc.)- 💻 **Fully Local**: Pur

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add wasm-simd --env ANTHROPIC_AUTH_TOKEN=${ANTHROPIC_AUTH_TOKEN} --env CHROME_EXTENSION_KEY=${CHROME_EXTENSION_KEY} -- npx -y @chrome-mcp/[email protected]

{
  "mcpServers": {
    "wasm-simd": {
      "command": "npx",
      "args": [
        "-y",
        "@chrome-mcp/[email protected]"
      ],
      "env": {
        "ANTHROPIC_AUTH_TOKEN": "${ANTHROPIC_AUTH_TOKEN}",
        "CHROME_EXTENSION_KEY": "${CHROME_EXTENSION_KEY}"
      }
    }
  }
}

Exposed tools (7) 7 read · 0 write · 0 destructive

Details

Source

hangwin/mcp-chrome

npm

@chrome-mcp/wasm-simd@0.1.0

Transports

sse · stdio · streamable-http

Credentials it reads

ANTHROPIC_AUTH_TOKENCHROME_EXTENSION_KEY

License

MIT

Stars

12,405 · pushed 249d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (10 observation(s))

Network

declared (10 observation(s))

Shell

declared (10 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (25)

payload-builder.ts

const fn = new Function(code);

const fn = new Function(...argNames, wrappedCode);

const fn = new Function(

const fn = new Function(

func: (code) => new Function(code)(),

{ color = CONFIG.COLORS.HOVER, dashed = true, offsetX = 0, offsetY = 0, isVerify = false } = {},

function drawRects(elements, color = CONFIG.COLORS.HOVER, dashed = true, isVerify = false) {

simd_math_bg.wasm

const url = `http://127.0.0.1:${port}/agent/sessions/${encodeURIComponent(sessionId)}`;

const sseUrl = `http://127.0.0.1:${request.port}/agent/chat/${encodeURIComponent(request.sessionId)}/stream`;

const url = `http://127.0.0.1:${request.port}/agent/chat/${encodeURIComponent(request.sessionId)}/act`;

.prettierignore

.prettierrc.json

import type { NodeId, RunId } from '../../domain/ids';

import type { RRError } from '../../domain/errors';

import { RR_ERROR_CODES, createRRError } from '../../domain/errors';

import type { NodeId, RunId } from '../../domain/ids';

import type { Breakpoint, DebuggerState } from '../../domain/debug';

"url": "http://127.0.0.1:12306/mcp"

"url": "http://127.0.0.1:12306/mcp"

const byteChars = atob(base64Data);

const decodedString = atob(base64);

@modelcontextprotocol/sdk, @vue-flow/background, @vue-flow/controls, @vue-flow/core, @vue-flow/minimap, @xenova/transformers, date-fns, elkjs

@anthropic-ai/claude-agent-sdk, @fastify/cors, @modelcontextprotocol/sdk, better-sqlite3, chalk, chrome-devtools-frontend, commander, drizzle-orm

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 54eb663ae58f · full audit: observations/trust-audit/mcp-server/hangwin__chrome-browser.json · Report an issue or request a re-scan

Audit history

Also audited

Servers with a similar trust profile.

Questions